scttfrdmn / substrate

Full resolved dependency set from the GitHub dependency graph: 14 direct and 234 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 248 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 0 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "aws",
        "aws-cdk",
        "aws-emulator",
        "boto3",
        "cloudformation",
        "devops",
        "event-sourcing",
        "go",
        "golang",
        "infrastructure-as-code",
        "integration-testing",
        "localstack-alternative",
        "mock",
        "terraform",
        "testing"
      ],
      "is_fork": false,
      "size_kb": 2040,
      "has_wiki": true,
      "homepage": "https://scttfrdmn.github.io/substrate/",
      "languages": {
        "Go": 4491073,
        "HTML": 16345,
        "Shell": 1801,
        "Python": 28570,
        "Makefile": 3316,
        "Dockerfile": 886
      },
      "pushed_at": "2026-07-30T04:54:40Z",
      "created_at": "2026-03-07T23:22:15Z",
      "owner_type": "User",
      "updated_at": "2026-07-26T07:20:42Z",
      "description": "Event-sourced AWS emulator for deterministic testing of AI-generated infrastructure code",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Scott Friedman",
      "type": "User",
      "login": "scttfrdmn",
      "company": "Amazon Web Services",
      "location": "Los Angeles, CA",
      "followers": 18,
      "avatar_url": "https://avatars.githubusercontent.com/u/3011922?v=4",
      "created_at": "2012-12-10T23:52:59Z",
      "is_verified": null,
      "public_repos": 187,
      "account_age_days": 4979
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.76.0",
          "kind": "minor",
          "published_at": "2026-07-26T07:20:42Z"
        },
        {
          "tag": "v0.75.0",
          "kind": "minor",
          "published_at": "2026-07-26T05:50:01Z"
        },
        {
          "tag": "v0.74.0",
          "kind": "minor",
          "published_at": "2026-07-22T23:34:36Z"
        },
        {
          "tag": "v0.73.0",
          "kind": "minor",
          "published_at": "2026-07-20T21:01:04Z"
        },
        {
          "tag": "v0.72.0",
          "kind": "minor",
          "published_at": "2026-07-20T20:35:35Z"
        },
        {
          "tag": "v0.71.0",
          "kind": "minor",
          "published_at": "2026-06-15T23:37:20Z"
        },
        {
          "tag": "v0.70.0",
          "kind": "minor",
          "published_at": "2026-06-10T05:37:23Z"
        },
        {
          "tag": "v0.69.0",
          "kind": "minor",
          "published_at": "2026-06-10T05:12:30Z"
        },
        {
          "tag": "v0.68.3",
          "kind": "patch",
          "published_at": "2026-06-10T04:55:15Z"
        },
        {
          "tag": "v0.68.2",
          "kind": "patch",
          "published_at": "2026-06-06T02:32:07Z"
        },
        {
          "tag": "v0.68.1",
          "kind": "patch",
          "published_at": "2026-06-05T20:58:05Z"
        },
        {
          "tag": "v0.68.0",
          "kind": "minor",
          "published_at": "2026-06-03T05:06:51Z"
        },
        {
          "tag": "v0.66.1",
          "kind": "patch",
          "published_at": "2026-06-03T04:18:33Z"
        },
        {
          "tag": "v0.66.0",
          "kind": "minor",
          "published_at": "2026-06-02T21:11:07Z"
        },
        {
          "tag": "v0.43.4",
          "kind": "patch",
          "published_at": "2026-03-20T03:04:37Z"
        },
        {
          "tag": "v0.43.3",
          "kind": "patch",
          "published_at": "2026-03-20T02:28:00Z"
        },
        {
          "tag": "v0.43.2",
          "kind": "patch",
          "published_at": "2026-03-20T01:23:56Z"
        },
        {
          "tag": "v0.43.1",
          "kind": "patch",
          "published_at": "2026-03-20T01:02:27Z"
        },
        {
          "tag": "v0.43.0",
          "kind": "minor",
          "published_at": "2026-03-20T00:49:46Z"
        },
        {
          "tag": "v0.42.1",
          "kind": "patch",
          "published_at": "2026-03-20T00:39:53Z"
        },
        {
          "tag": "v0.42.0",
          "kind": "minor",
          "published_at": "2026-03-20T00:09:06Z"
        },
        {
          "tag": "v0.41.3",
          "kind": "patch",
          "published_at": "2026-03-18T23:26:56Z"
        },
        {
          "tag": "v0.41.2",
          "kind": "patch",
          "published_at": "2026-03-18T22:51:34Z"
        },
        {
          "tag": "v0.41.1",
          "kind": "patch",
          "published_at": "2026-03-18T22:46:27Z"
        },
        {
          "tag": "v0.41.0",
          "kind": "minor",
          "published_at": "2026-03-18T22:42:17Z"
        },
        {
          "tag": "v0.40.0",
          "kind": "minor",
          "published_at": "2026-03-18T22:13:34Z"
        },
        {
          "tag": "v0.39.0",
          "kind": "minor",
          "published_at": "2026-03-18T22:03:07Z"
        },
        {
          "tag": "v0.38.0",
          "kind": "minor",
          "published_at": "2026-03-18T21:39:38Z"
        },
        {
          "tag": "v0.37.1",
          "kind": "patch",
          "published_at": "2026-03-18T21:08:25Z"
        },
        {
          "tag": "v0.37.0",
          "kind": "minor",
          "published_at": "2026-03-18T20:50:22Z"
        },
        {
          "tag": "v0.32.0",
          "kind": "minor",
          "published_at": "2026-03-16T02:38:46Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2026-03-10T04:52:37Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2026-03-10T04:52:29Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2026-03-10T04:52:19Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2026-03-10T04:52:11Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-03-10T04:52:04Z"
        },
        {
          "tag": "v0.3.0-alpha",
          "kind": "prerelease",
          "published_at": "2026-03-08T03:01:36Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "fa7684bd66f663e9304f5b950149b9d76cef0774",
          "body": "Promote the documentation-reliability work to v0.76.0 (#363-#370):\ngenerated service reference, docs CI, Python CI, journey examples,\ncontributor + fidelity + security docs, and site restructure.",
          "is_bot": false,
          "headline": "chore(release): v0.76.0 (#383)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T07:20:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4438394fc66097b25c4c8d3f3ee87d8cc816d84b",
          "body": "Bumps [postcss](https://github.com/postcss/postcss) from 8.5.15 to 8.5.23.\n- [Release notes](https://github.com/postcss/postcss/releases)\n- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.23)\n\n---\nupdated-depe\n[…]\nby: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Scott Friedman <3011922+scttfrdmn@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump postcss from 8.5.15 to 8.5.23 in /docs (#375)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-26T07:07:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b7b204a37610eb8bbbd57b1ace17b14a9b9e12c8",
          "body": "…(#382)\n\n* docs: restructure site (Learn/Start/Test/Reference), date comparison, clarify non-AI use (#370)\n\n- Sidebar reorganised around the four user intentions Learn / Start / Test /\n  Reference (+ Contributing), relabelling/regrouping existing pages without\n  splitting content.\n- Date the LocalSt\n[…]\nhe /foo#anchor link on the homepage did not match the /foo replacement\npattern. Allow an optional #fragment and drop it so the checker resolves the\ntarget file (VitePress validates the anchor itself).",
          "is_bot": false,
          "headline": "docs: restructure site + date comparison + clarify non-AI use (#370) …",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T07:04:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88baca1760251d0a656492b5c9d5f33b29ae2840",
          "body": "Four self-contained journey tests in test/e2e (already run in CI), each starting\nits own emulator.StartTestServer and using the real AWS SDK v2:\n\n- journey_throttling: seed a throttling fault via the control plane, observe the\n  SDK surface it, clear it, succeed.\n- journey_replay: run a workload, re\n[…]\n, so\nfault injection and non-zero cost summaries are available to every test server.\n\nDocumented in examples/README.md. Terraform/CDK/pytest journeys (external\ntoolchains) split to #380.\n\nCloses #367.",
          "is_bot": false,
          "headline": "examples: runnable differentiator journeys wired into CI (#367) (#381)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:55:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ba13f584e7d1fb4a19b946f6062391e0cef2cee",
          "body": "- docs/contributing.md: how to add and test a service plugin -- the scope test,\n  the Plugin interface (grounded in examples/custom_plugin), state-key/error\n  conventions, the seedable control-plane pattern, registration + the\n  gen-service-reference metadata requirement, testing/coverage bar, and a\n[…]\nidelity is\n  decided (verify against official AWS docs; scope test), and what 'not yet\n  supported' means.\n- Wired both into the VitePress sidebar (Reference + new Contributing section).\n\nCloses #368.",
          "is_bot": false,
          "headline": "docs: contributor guide + compatibility/fidelity policy (#368) (#379)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:42:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9cd040b82743d84d669167de3b8d11112ae8ac4d",
          "body": "…orted versions, verification (#369) (#378)\n\nPer external review. Preserves the existing tag-integrity advisories.\n\n- Make GitHub private vulnerability reporting the documented preferred path;\n  public issues only for already-public matters.\n- Add acknowledgement/assessment/fix timelines (good-faith\n[…]\ndance instead of naming an aging version.\n- Add a release integrity/verification section (git verify-tag, gh release view,\n  checksum database) tying to the existing signed-tag practice.\n\nCloses #369.",
          "is_bot": false,
          "headline": "docs(security): refresh SECURITY.md — reporting path, timelines, supp…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:37:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c285e4d0cdfd6e5a231054bb036b62214065e2a",
          "body": "…) (#377)\n\n* ci: validate docs on pull requests (build, links, version scan) (#365)\n\nThe deploy workflow (docs.yml) only builds on main, so doc drift landed before\nanyone noticed — this is what let the docs advertise v0.68.0 while the repo was\nat v0.75.0 (#363).\n\nNew 'Docs CI' workflow runs on PRs t\n[…]\n are valid routes\nthat the VitePress build already validates. Add a replacementPattern mapping\n/foo -> foo.md so the checker verifies the real target file exists instead of\nfalse-flagging valid links.",
          "is_bot": false,
          "headline": "ci: validate docs on pull requests (build, links, version scan) (#365…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:34:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cdee3ffbd340154b6c87c04b1e38a4b46ccc1f5c",
          "body": "…ding (#366) (#376)\n\nThe pytest-substrate package (python/) was real but never exercised by CI and\nnearly invisible in the docs.\n\n- New CI 'Python (pytest-substrate)' job: builds the substrate binary, installs\n  the package, and runs ruff + pytest (32 tests) + wheel build on every PR.\n- Add an expli\n[…]\nealth-poll).\n- Docs: Getting Started gains a 'First Python test' section; README lists the\n  pytest plugin as a third usage mode; a language-agnostic pointer sits under\n  the Go example.\n\nCloses #366.",
          "is_bot": false,
          "headline": "ci+docs: run pytest-substrate in primary CI and surface Python onboar…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:24:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "322ac4ad412ad2171c79c5fffca782f2790305d1",
          "body": "…n registry (#364) (#374)\n\nRoot-cause fix for the doc drift behind #363 (README said 63 plugins, the\nService Reference said 37 and called itself authoritative).\n\n- cmd/gen-service-reference boots the default registry and rewrites the coverage\n  matrix in docs/services.md between BEGIN/END marker com\n[…]\ntargets; a 'Service Reference Drift' CI job runs the\n  check on every PR.\n\nVerified: go generate is idempotent, the drift guard fails when a plugin lacks\nmetadata, build/lint/test clean.\n\nCloses #364.",
          "is_bot": false,
          "headline": "feat(docs): generate service-reference coverage matrix from the plugi…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:18:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b938a8001b0d7e3e65b1a77ac7461ce8b8fd2f5f",
          "body": "Local Claude Code permission config was accidentally swept into #372 via\ngit add -A. It is machine-local editor config (and contains AWS allowlists\nfor an unrelated project), not part of substrate. Remove from tracking and\nadd .claude/ to .gitignore.",
          "is_bot": false,
          "headline": "chore: untrack .claude/settings.json and gitignore it (#373)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:07:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ab6571dc379bc59bee525ce5f843b2d3c146c62",
          "body": "…ocumented TestServer API real (#363) (#372)\n\nThe public docs had drifted from the implementation (found by an external\nreview). Rather than degrade the docs, make the documented ergonomic API real:\n\n- Add TestServer accessors Store()/StateManager()/TimeController()/Registry()\n  and enable the in-me\n[…]\n, not a prerequisite' clarification.\n\nNew tests guard the accessors and the documented cost path. Verified the\nGetting Started S3 snippet compiles and passes verbatim against the module.\n\nCloses #363.",
          "is_bot": false,
          "headline": "docs+test: correctness pass — sync guides with implementation, make d…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T06:03:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29c2c6fcaf7db46f4f92c27e848cfe86d07da439",
          "body": "Promote Unreleased to v0.75.0:\n- S3 seedable spore.host task-completion outcomes (#360)",
          "is_bot": false,
          "headline": "chore(release): v0.75.0 (#362)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T05:49:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18a791999dc6e58358aff7b73b8ad1e1d949d836",
          "body": "* feat(s3): seedable spore.host task-completion outcomes (#360)\n\nA GET of tasks/<task_id>/completion.json now resolves a seedable, clock-aware\nspore.host `spawn task run` completion record (task_id, exit_code, state,\nstarted_at, ended_at), matching taskproto.CompletionRecord. New control-plane\nendpo\n[…]\noes not execute the task; this is the seedable completion\n  observation only, per the scope boundary.\n\nCloses #360.\n\n* test(s3): cover spawn task-completion malformed-seed and no-ended-at paths (#360)",
          "is_bot": false,
          "headline": "feat(s3): seedable spore.host task-completion outcomes (#360) (#361)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-26T05:45:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe8d6bcc7846bad01aa2aa098cdd334f19f6ec8b",
          "body": "Bumps the go-minor-patch group in /test/e2e with 1 update: [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2).\n\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.105.1 to 1.105.2\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\n- [Commits](https:/\n[…]\nby: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Scott Friedman <3011922+scttfrdmn@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#356)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T23:41:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97085c4ba57500a2661439916cec8c8255052033",
          "body": "Bumps the go-minor-patch group with 1 update: [modernc.org/sqlite](https://gitlab.com/cznic/sqlite).\n\n\nUpdates `modernc.org/sqlite` from 1.53.0 to 1.54.0\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.53.0...v1.54.0)\n\n--\n[…]\nby: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Scott Friedman <3011922+scttfrdmn@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump modernc.org/sqlite in the go-minor-patch group (#355)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T23:37:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba1afac641c4ebd0af1c24673bd4e632d2a63e2d",
          "body": "Promote Unreleased to v0.74.0:\n- SSM seedable SendCommand/GetCommandInvocation outcomes (#345)\n- Security: grpc v1.82.1 (GHSA-hrxh-6v49-42gf, #358)",
          "is_bot": false,
          "headline": "chore(release): v0.74.0 (#359)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-22T23:34:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e4986e4c0dc2fe5aaf276db05f1c4b7f0f7accd",
          "body": "…) (#358)\n\nTrivy flagged a HIGH advisory in grpc v1.81.1 (xDS RBAC / HTTP/2), failing the\nscan jobs on every PR. Bump to v1.82.1 in both root and test/e2e modules. The\ndep is indirect and not call-reachable (govulncheck clean), but the bump clears\nthe manifest-based Trivy scan.",
          "is_bot": false,
          "headline": "security: bump google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-22T23:31:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9833ac444ce045de61fb675fd8c88205467464b",
          "body": "…(#354)\n\n* feat(ssm): seedable SendCommand/GetCommandInvocation outcomes (#345)\n\nSubstrate does not execute the shell command (workload-internal, out of scope);\ninstead a test can seed the observable result GetCommandInvocation returns —\nStatus, stdout, stderr, ResponseCode — rather than always gett\n[…]\n (#345)\n\nAdd TestSSM_SeedCommandInvocation_WildcardAndClear covering the '*' wildcard\nseed, targeted + clear-all DELETE, and seed validation — raising patch coverage\non the new control-plane handlers.",
          "is_bot": false,
          "headline": "feat(ssm): seedable SendCommand/GetCommandInvocation outcomes (#345) …",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-21T01:32:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0eaa8e3d95e631995fcc95b04d9d3d285aa1c7e3",
          "body": "Minor release: EC2 cluster placement group actions (#344) and RunInstances\ntagSet fix (#351).",
          "is_bot": false,
          "headline": "chore(release): v0.73.0 (#353)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-20T21:00:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fb7c20c24af3fa64699f162f6f70cb3ab252440",
          "body": "…(#351) (#352)\n\nRunInstances stored TagSpecification tags but its response item struct had no\ntagSet field, so SDK callers reading the returned instance's tags got an empty\nset (a later DescribeInstances rendered them fine). Real EC2 populates tagSet in\nthe RunInstances response. Add the field + pop\n[…]\ncorrectly omit tagSet (matching\nAWS — they return only currentState/previousState), so no change there.\n\nRegression test TestEC2_RunInstances_ReturnsTagSet. make test (race) + lint clean.\n\nCloses #351",
          "is_bot": false,
          "headline": "fix(ec2): RunInstances response includes tagSet for launch-time tags …",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-20T20:56:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad18d99080f070afe0bd1b08d5031fcd398ced91",
          "body": "Add CreatePlacementGroup / DescribePlacementGroups / DeletePlacementGroup and\nvalidate RunInstances' Placement.GroupName, so spawn's per-AZ MPI launch path\n(create → poll available → launch → delete on abandon) is testable end-to-end.\n\n- CreatePlacementGroup: GroupName + Strategy (default cluster); \n[…]\nC2PlacementGroup type + generatePlacementGroupID/ec2PlacementGroupStateKey.\nRegression test TestEC2_PlacementGroups covers the full lifecycle + error paths.\nmake test (race) + lint clean.\n\nCloses #344",
          "is_bot": false,
          "headline": "feat(ec2): cluster placement group actions (#344) (#350)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-20T20:46:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e82868763d3f9508acb1d17c5bce6a154e75d4e4",
          "body": "Minor release: CORS for browser SDK clients (#346), Go 1.26.5 toolchain\n(GO-2026-5856), x/net bump, trivy-action pin, and Dependabot enablement.",
          "is_bot": false,
          "headline": "chore(release): v0.72.0 (#349)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-20T20:34:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b265cdd5f58292009e7916fc05ec66296ac255a",
          "body": "…s (#343)\n\nBumps the go-minor-patch group in /test/e2e with 4 updates: [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/service/iam](https://github.com/aws/aws-\n[…]\n-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: scttfrdmn <3011922+scttfrdmn@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the go-minor-patch group in /test/e2e with 4 update…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T20:30:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10097b88366a01b3275d282dd1e22f34cf85873b",
          "body": "…ates (#348)\n\nBumps the actions-all group with 2 updates in the / directory: [actions/setup-go](https://github.com/actions/setup-go) and [actions/setup-node](https://github.com/actions/setup-node).\n\n\nUpdates `actions/setup-go` from 6 to 7\n- [Release notes](https://github.com/actions/setup-go/release\n[…]\nversion-update:semver-major\n  dependency-group: actions-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions-all group across 1 directory with 2 upd…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T20:27:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1fa2c91f4a217d2753d1e0231caff0f816443bc",
          "body": "…1.26.5 (#347)\n\n#346: add CORS middleware (github.com/go-chi/cors) to buildRouter, gated on\nserver.cors.enabled. Reflects the configured origin allowlist (default '*'),\nhandles OPTIONS preflight, permits the AWS SDK's x-amz-*/amz-sdk-*/authorization\nheaders, and exposes x-amzn-RequestId/x-amz-reques\n[…]\n.26.4 -> go1.26.5 in both modules to clear the\ncall-reachable crypto/tls advisory GO-2026-5856 (was failing govulncheck on\nevery PR). govulncheck now clean.\n\nmake test (race) + lint clean on go1.26.5.",
          "is_bot": false,
          "headline": "feat(server): opt-in CORS for browser SDK clients (#346); bump Go to …",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-20T20:22:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c2360c55daf171e7e474ca37eedac8c4c4a4a2c",
          "body": "Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.\n- [Release notes](https://github.com/pytest-dev/pytest/releases)\n- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)\n- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.2...9.0.3)\n\n---\nupdated-\n[…]\n-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: scttfrdmn <3011922+scttfrdmn@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump pytest from 9.0.2 to 9.0.3 in /python (#336)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T19:56:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "419ae1d93c0007c8f053dc41503d8049654e3f93",
          "body": "* chore(deps): bump the go-minor-patch group with 7 updates\n\nBumps the go-minor-patch group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.2.5` | `5.3.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/op\n[…]\n-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: scttfrdmn <3011922+scttfrdmn@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the go-minor-patch group with 7 updates (#339)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T19:50:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "078cb08a03612e9e829c2446eafb18fd7a4e88c1",
          "body": "…s (#341)\n\nBumps the go-minor-patch group in /test/e2e with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.32.5` | `1.42.1` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.28.0` \n[…]\nsion-update:semver-minor\n  dependency-group: go-minor-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the go-minor-patch group in /test/e2e with 5 update…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T19:41:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7869564a9375a59ef584c6f329d43004d70a3979",
          "body": "Bumps the actions-all group with 14 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |\n| [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` |\n| [codecov/codecov-action](https://github.com/codecov/codecov-acti\n[…]\nversion-update:semver-major\n  dependency-group: actions-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions-all group with 14 updates (#340)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T19:41:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "225fada08f25fb83e9dc6e21b78ee4f6de571100",
          "body": "* chore: add Dependabot config for weekly dependency updates\n\nConfigure version-update PRs across all ecosystems: gomod (root + test/e2e),\nnpm (docs VitePress), pip (python/pytest-substrate), and github-actions. Minor/\npatch updates are grouped per ecosystem to reduce PR noise; each capped at 5 open\n[…]\not\ncall-reachable (govulncheck already clean), but the bump clears the manifest-\nbased Trivy scan and keeps the tree current.\n\nAlso documents the trivy-action pin and Dependabot enablement in this PR.",
          "is_bot": false,
          "headline": "chore: enable Dependabot + pin trivy-action (fix broken CI) (#334)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-07-07T18:15:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d7e5da721478222fedc8600ac1fb8e2a2037b52",
          "body": "Minor release for EC2/SSM fidelity (#331): DescribeInstances echoes\nIamInstanceProfile; SSM DescribeInstanceInformation gates PingStatus on an\nattached profile (behavior change).",
          "is_bot": false,
          "headline": "chore(release): v0.71.0 (#333)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-15T23:34:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31028fdaadc2ed3c2d473534438738ea0febc04b",
          "body": "…le (#331) (#332)\n\nTwo EC2/SSM fidelity gaps surfaced by spawn's warm-AMI SSM-readiness logic.\n\nGap 2 (Fixed): DescribeInstances dropped IamInstanceProfile. RunInstances already\nstored it; the describe response now includes iamInstanceProfile {arn, id} so a\ncaller can read back the profile it set.\n\n\n[…]\nests: TestEC2_DescribeInstances_EchoesIamInstanceProfile and\nTestSSM_DescribeInstanceInformation_RequiresProfile (end-to-end via a combined\nEC2+SSM server). make test (race) + lint clean.\n\nCloses #331",
          "is_bot": false,
          "headline": "fix(ec2,ssm): echo IamInstanceProfile; gate SSM PingStatus on a profi…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-15T23:29:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "236848d22be9bbc1432a3468e098018fe97e9a08",
          "body": "Minor release for EC2 RegisterImage with explicit BDM snapshot-id, enabling\nshared-snapshot modeling (#328).",
          "is_bot": false,
          "headline": "chore(release): v0.70.0 (#330)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T05:36:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2be9aa5e11818196db67fa1ed8bd2a3e7b7ebb5",
          "body": "…pshots (#328) (#329)\n\nFollow-up to #322. The block-device-mapping.snapshot-id filter already returned\nALL matching AMIs, but two CreateImage calls never shared a snapshot (each gets\na fresh snap-id, as in real AWS), so a shared snapshot couldn't exist to test the\n'retain shared snapshot' path.\n\nAdd\n[…]\nencing it.\n\nRegression test TestEC2_RegisterImage_SharedSnapshot: CreateImage A -> snap-X,\nRegisterImage B on snap-X, filter by snap-X returns both A and B.\nmake test (race) + lint clean.\n\nCloses #328",
          "is_bot": false,
          "headline": "feat(ec2): RegisterImage with explicit BDM snapshot-id for shared sna…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T05:29:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2af586ea6de041cbdc8215642007da8274d10be7",
          "body": "…(#327)\n\nThe emulator/ reorg (#310) renamed the package clause substrate -> emulator but\nleft five files' leading doc comments saying 'Package substrate' / 'Package\nsubstrate_test', which Go convention flags as a name mismatch. Update the comment\nlines (doc.go, doc_plugins.go, sns_types.go, coverage_test.go,\nv030_coverage_test.go); 'Substrate' as the product name in prose is unchanged.\n\nDoc-comment only; no code or behaviour change.",
          "is_bot": false,
          "headline": "docs: fix package doc comments to say 'Package emulator' after reorg …",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T05:22:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8b40dde8d2c5ed31d328cf061e269b25a5d993a",
          "body": "Minor release for EC2 DescribeSnapshots + CreateImage backing snapshots +\nblock-device-mapping.snapshot-id filter (#322).",
          "is_bot": false,
          "headline": "chore(release): v0.69.0 (#326)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T05:11:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0425494e97f0f74d6cbe24d23535df0c0d4864c2",
          "body": "…shot-id filter (#322) (#325)\n\nEnables testing AMI-deletion logic that retains EBS snapshots shared by\nmultiple AMIs (spore.host/spawn DeleteAMI).\n\n- CreateImage materializes a backing EC2Snapshot and records its id on the AMI.\n- DescribeSnapshots (new) lists snapshots with SnapshotId/VolumeSize/Sta\n[…]\nEBSSnapshotID/ec2SnapshotStateKey helpers.\nRegression test TestEC2_CreateImage_SnapshotsAndFilter covers the full\nshared-snapshot retain-vs-delete scenario. make test (race) + lint clean.\n\nCloses #322",
          "is_bot": false,
          "headline": "feat(ec2): DescribeSnapshots, CreateImage backing snapshots, BDM snap…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T04:58:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8d48e1e719a37b695b4dad69c4e35ec3b436904",
          "body": "Patch release for the S3 aws-chunked PutObject decoding fix (#321).",
          "is_bot": false,
          "headline": "chore(release): v0.68.3 (#324)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T04:55:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c2522830937cd811d78062df0264888ca47b6b6",
          "body": "SigV4 streaming (aws-chunked) uploads — sent by e.g. the AWS SDK for .NET with\nPutObjectRequest.InputStream — were stored raw, chunk-signature framing and all,\nso GetObject returned the chunk headers instead of the payload. The AWS CLI was\nunaffected because it uses standard HTTP chunking (already d\n[…]\nct, uploadPart,\nand putBucketLifecycleConfiguration.\n\nRegression test TestS3_PutObject_AWSChunked covers the chunked round-trip and\nnon-chunked passthrough. make test (race) + lint clean.\n\nCloses #321",
          "is_bot": false,
          "headline": "fix(s3): decode aws-chunked PutObject/UploadPart bodies (#321) (#323)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-10T04:43:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "73ed3129edc5c48a636bfff281539563909d9aae",
          "body": "Patch release for the S3 GetObject/HeadObject delete-marker fix (#318).",
          "is_bot": false,
          "headline": "chore(release): v0.68.2 (#320)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-06T02:25:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89711414dbdd38ca1cda08bf9b1eb3e5a98179fd",
          "body": "…) (#319)\n\nFollow-up to #316. getObject already 404'd a delete-marker current version,\nbut two gaps remained, both found via Fatou.jl integration tests:\n\n- GET naming the delete-marker version returned 404 NoSuchKey; AWS returns\n  405 MethodNotAllowed. Neither path emitted the x-amz-delete-marker he\n[…]\nw on the 405).\nheadObject is now version-aware and applies the same check.\n\nRegression test TestS3_GetHeadObject_DeleteMarker covers all three paths.\nmake lint clean; full S3 suite green.\n\nCloses #318",
          "is_bot": false,
          "headline": "fix(s3): GetObject/HeadObject return 404/405 for delete markers (#318…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-06T02:20:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "35bd649047d02d25adbfb5531e34694bf019edf0",
          "body": "…s (#316)\n\nfix(s3): ListObjectsV2 must not surface delete markers as live objects (#316)",
          "is_bot": false,
          "headline": "fix(s3): ListObjectsV2 must not surface delete markers as live object…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-05T00:24:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7745927f5a6433f0ffbe34827d6e62753fb6b398",
          "body": "ListObjectsV2 (and ListObjects) surfaced delete markers as live objects\non versioning-enabled buckets. DeleteObjects correctly inserted delete\nmarkers but loadObjectEntry did not skip entries where IsDeleteMarker is\ntrue, so aws s3 ls showed objects that GetObject correctly returned 404 for.\n\nAdds t\n[…]\nguard that getObject already carries, and a\nregression test (TestS3_DeleteObjects_Versioned_HiddenFromList) that\nverifies ListObjectsV2 returns zero objects after a multi-delete on a\nversioned bucket.",
          "is_bot": false,
          "headline": "fix(s3): loadObjectEntry must filter delete markers (#316)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-04T23:50:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f96ee6bd0adedb61d211d7ac8b7527a5c97e7553",
          "body": "The README asserted 'test harness for AI-generated infrastructure' but never\nearned it, and the only competitor mention was a throwaway LocalStack jab. Make\nboth arguments explicit, grounded, and honest — they share one root cause (the\nAPI-surface scope boundary is both the differentiator and the AI\n[…]\n-than. Links to Scope & Philosophy.\n- Renamed the differentiators heading 'Why Substrate' → 'Core capabilities'\n  (the new subsection now owns the 'why').\n\nDocs build clean (strict link check passes).",
          "is_bot": false,
          "headline": "docs: articulate AI-infra fit and how Substrate compares (#315)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-04T00:18:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4dea8f1552f2c677456543a289dcf07a71380ed",
          "body": "- Richer meta description + keywords; canonical URL.\n- Open Graph + Twitter (summary_large_image) card tags with a branded\n  1200x630 og-image.png (brand palette), for link unfurls on social/Slack/etc.\n- sitemap.xml (VitePress sitemap with hostname) + robots.txt pointing at it,\n  for search-engine c\n[…]\nrmation, terraform, localstack-alternative, event-sourcing, ...).\n\nVerified: npm run build emits sitemap.xml + robots.txt + assets; built HTML\ncarries og:*/twitter:*/canonical with absolute image URL.",
          "is_bot": false,
          "headline": "docs: add SEO metadata, social cards, sitemap to docs site (#314)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T23:48:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b857ee71d16b9b26874292613d880fb0736b198a",
          "body": null,
          "is_bot": false,
          "headline": "docs: link the live documentation site in the README (#313)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T23:33:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ced166f95916cdc16e7893ece90dd3d903fdd158",
          "body": "Scaffold a VitePress site under docs/ matching the spore.host site's look/feel\n(Atkinson Hyperlegible font, brand palette #4059E5/#1E3EA6/#42D4D4, shared\ncustom.css typography), deployed to GitHub Pages (not spore-host's S3/CloudFront).\n\n- docs/package.json + .vitepress/{config.mts,theme/{index.ts,c\n[…]\ne_modules,.vitepress/dist,.vitepress/cache}.\n\nVerified: npm run build succeeds; hero/features render; Atkinson font + brand\ncolor baked into output CSS; only source files tracked (dist/cache ignored).",
          "is_bot": false,
          "headline": "docs: add VitePress docs site (spore-host look, GitHub Pages) (#312)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T23:26:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b39b7ac782011cd1ecf6c4298aa9821a133e610f",
          "body": "…ts (#311)\n\n- Lead with 'What is Substrate?' framing the API-surface scope + seedable\n  determinism (from doc.go/CLAUDE.md) and the two ways to use it.\n- Promote the differentiators to four (add seedable outcomes / API-surface scope).\n- Reorder: server quick-start first (the primary use), then Go te\n[…]\nmilestone table with a Releases/CHANGELOG link.\n- Update Go import path/symbols to .../emulator (post-reorg) in all code samples.\n\nVerified: referenced emulator.* symbols exist; all doc links resolve.",
          "is_bot": false,
          "headline": "docs: rewrite README — clearer what/why, HTTP-first flow, current fac…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T23:19:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6e95eb71c8b44745f7fc7e40ddcde3ebb89729db",
          "body": "Relocate all 286 package files (173 source + 113 test) plus the embedded\nui.html from the repo root into emulator/, leaving a clean professional root\n(cmd/ emulator/ docs/ examples/ deploy/ configs/ python/ test/ + project files).\n\n- Rename package substrate → emulator (and substrate_test → emulator\n[…]\nl consumers Go-import the package (all use the HTTP server), so the\nimport-path change has zero external blast radius.\n\nmake build/test(race)/lint/vet/e2e all green; go:embed ui.html still serves /ui.",
          "is_bot": false,
          "headline": "refactor: move package substrate into emulator/ subdirectory (#310)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T23:13:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5289493db4c050560d9df21f303d9e8ebd616b43",
          "body": "Cut v0.68.0 to supersede the void out-of-order tag v0.67.0 as the highest\nsemver tag, so go get @latest resolves to current code instead of the void tag.\nNo source change vs v0.66.1.",
          "is_bot": false,
          "headline": "chore(release): v0.68.0 (#309)",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T05:06:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a73f261333cffa1f84fac577da69ceeb5204c957",
          "body": "…sets (#308)\n\n- SECURITY.md: new 'Out-of-order tag advisory' declaring v0.67.0 void (points to\n  an ancestor of v0.66.0/v0.66.1; stray manual tag, no release). Left in place\n  per the immutability rule; version 0.67.0 burned, next minor is v0.68.0.\n  Expanded Prevention with the server-side rulesets\n[…]\nsummarizing the rulesets + void advisory.\n\nProtections added server-side (not in this diff): tag ruleset on refs/tags/v*\n(block move/update/delete) and branch ruleset on main (PR required, no bypass).",
          "is_bot": false,
          "headline": "docs(security): void v0.67.0 advisory + document repo protection rule…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T04:57:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "955187e3781517b02e48392ae3ab4b7c6be21566",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): v0.66.1",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T04:16:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c23dbd0b79641e147b24169e790d9e290e3a797e",
          "body": "…olchain to 1.26.4 (#307)\n\n#305: describeInstances only read Filter.1 and only honored instance-state-name,\nsilently dropping Filter.2+ and all tag: filters — returning instances the caller\nfiltered out (order-dependent). Now uses the shared extractEC2Filters helper and\nAND-combines all filters via \n[…]\n-reachable stdlib advisories (GO-2026-5039 net/textproto, GO-2026-5037\ncrypto/x509); govulncheck now reports zero call-reachable vulnerabilities.\n\nmake test (race) + lint clean on 1.26.4.\n\nCloses #305",
          "is_bot": false,
          "headline": "fix: DescribeInstances multi-filter + tag: support (#305); bump Go to…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T04:14:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5940ed98a2aa39d5932a77adf5b37d85a8242bbf",
          "body": "…matter (#304)\n\n- CLAUDE.md gains a 'Scope' section: substrate models what is observable through\n  an AWS API call, not what software inside a resource does; seeding is how a\n  deterministic emulator produces different results; plus why the determinism\n  payoff beats container/real-infra approaches \n[…]\nm\n  (vs. containers or real infrastructure)'.\n\nDocuments the principle that the boundary and the deterministic-replay guarantee\nare the same line viewed from two sides. Docs-only; no behaviour change.",
          "is_bot": false,
          "headline": "docs: articulate scope boundary, seeding, and why determinism/replay …",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-03T03:33:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d4a93f2d5c7b9db349a55e373005fa24c4d9b26e",
          "body": "…naged AMI SSM params (#303)\n\nTwo fidelity fixes so the AWS SDK v2's standard launch shape works end-to-end:\n\nec2 RunInstances:\n- Parse subnet, security groups, and AssociatePublicIpAddress from a nested\n  NetworkInterface.1.* spec, not just top-level params. The SDK nests these\n  whenever a public-\n[…]\naged missing params still 404.\n\nTests: NetworkInterface subnet+public-IP honored on a non-default subnet;\nmanaged-AMI resolution is stable, overridable, and scoped to /aws/service/*.\nFull suite green.",
          "is_bot": false,
          "headline": "feat(ec2,ssm): honor NetworkInterface.N.* on RunInstances; resolve ma…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-02T21:15:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a9c28ab3e70791a08415fde4a9f0375331fc693b",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): v0.66.0",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-02T21:10:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cea947bf68cca115761f18fe074d575b20b53b94",
          "body": "… (#290) (#302)\n\nExtends cfnDriftComparators with comparators for DynamoDB (BillingMode,\nProvisionedThroughput), Lambda (Runtime/Handler/Timeout/MemorySize), IAM Role\n(AssumeRolePolicyDocument via order-insensitive policyDocumentsEqual, plus\nDescription/Path), SQS (queue attributes), and SNS (Displa\n[…]\nySize never worked).\n\nNew: iam_policy_compare.go (policyDocumentsEqual). Tests: one MODIFIED case per\ntype + reordered-policy IN_SYNC + declared-only IN_SYNC. make test (race)+lint clean.\n\nCloses #290",
          "is_bot": false,
          "headline": "feat: property-level CFN drift MODIFIED for all drift-checkable types…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-02T21:05:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3e749aa28a5e519c9e4fe2c4ffe98f6c2d2b8c4",
          "body": "…#290) (#301)\n\n#290 — CloudFormation drift detection (PARTIAL, stays open):\n- Add MODIFIED status via cfnDriftComparators map; S3 VersioningConfiguration\n  comparator implemented end-to-end (re-parses template + resolves intrinsics).\n  Other drift-checkable types remain existence-only (bounded by wh\n[…]\nia extractEC2Filters.\n- ensureDefaultVPC creates+attaches a default IGW and adds 0.0.0.0/0 -> igw route\n  to the default VPC main route table.\n\nTests added; make test (race) + lint clean.\n\nCloses #293",
          "is_bot": false,
          "headline": "feat: complete VPC route tables (#293), advance CFN drift detection (…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-02T20:21:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c942484dcc0e39a13f729afb047f991297dd099",
          "body": "…ror (#297, #298, #299) (#300)\n\n- #297: Add ModelInvocationJob control-plane ops (Create/Get/Stop/List) to\n  BedrockRuntimePlugin, path-routed (no parser change); seed endpoints for\n  job-status override. Cost: bedrock-runtime/CreateModelInvocationJob.\n- #298: Store CreateTable Tags; implement TagRe\n[…]\nd terminal status + FailureReason\n  via /v1/sagemaker/training-job-status; default remains Completed.\n\nTests added across all three; make test (race) + lint clean.\n\nCloses #297\nCloses #298\nCloses #299",
          "is_bot": false,
          "headline": "feat: Bedrock batch inference, DynamoDB tagging, SageMaker CapacityEr…",
          "author_name": "Scott Friedman",
          "author_login": "scttfrdmn",
          "committed_at": "2026-06-02T20:17:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17e2f9127cd1a7c329eafea42f4ac1e2bc2ac103",
          "body": "Both tags were re-cut after publication: their current GitHub content no\nlonger matches the hash recorded in sum.golang.org, so go.sum verification\nfails for every consumer on the default GOSUMDB.\n\nInvestigation (sum.golang.org vs GOPROXY=direct GitHub fetch):\n- v0.45.1: sumdb yaEPwC78... vs github \n[…]\n(re-cutting cannot satisfy the transparency log\nand would compound the divergence). Add SECURITY.md advisory, CHANGELOG\nSecurity entry, and a never-move-a-tag rule to the release process.\n\nCloses #296",
          "is_bot": false,
          "headline": "docs(security): advisory for poisoned tags v0.45.1 and v0.45.2 (#296)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-05-30T05:16:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf447ebc91bdd0157f609c30d811ac8353f082a5",
          "body": "A (#N) reference in a commit/PR title only links, it does not auto-close\nthe issue. This caused 6 fully-shipped issues (#283, #284, #286, #287, and\npartially #290, #293) to linger open after their releases. Add steps 4-5 to\nthe Releasing section: use Closes #N in PR bodies, only close when all\nacceptance criteria are met, and close milestones when their issues close.",
          "is_bot": false,
          "headline": "docs: document issue/milestone closing in release process",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-05-30T05:11:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3affe152f6ec1749ac0f842699bd33130a60f450",
          "body": "Add // nosemgrep inline comments for intentional patterns:\n- math/rand: deterministic ID generation, not crypto\n- MD5: AWS S3/SQS protocol requirement\n- ResponseWriter.Write: JSON/XML API, not HTML (no XSS risk)\n- text/template: Go code generation, not HTML rendering\n- interface{} deserialization: generic JSON handling for AWS emulator\n- exec.Command: controlled CLI wrapper (substratelocal)\n- urllib: pytest helper connecting to local test server",
          "is_bot": false,
          "headline": "fix(semgrep): suppress 34 pre-existing false-positive findings",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-11T00:29:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4636ba37645aeaff3a53a0da9e42a0dd13e3924",
          "body": "…#295)\n\n- `substrate status` — server health, version, plugin count, costs\n- `substrate inspect [service]` — list services or recent events\n- `substrate pricing info|refresh|lookup` — pricing management\n- `substrate reset` — reset all server state\n\nCloses #295.",
          "is_bot": false,
          "headline": "Release v0.65.0: CLI enhancements — status, inspect, pricing, reset (…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-11T00:17:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a9764db17839036299efbb7ab26ff224e0f28d7",
          "body": "…m (#294)\n\n- CloudFront: persist invalidations, add GetInvalidation + ListInvalidations\n- Health: add HealthEvent type, seedable events via POST/DELETE /v1/health/events\n- Timestream: WriteRecords stores data, Query serves stored records for\n  SELECT * FROM db.table without seeding\n\nCloses #294.",
          "is_bot": false,
          "headline": "Release v0.64.0: Deepen stub services — CloudFront, Health, Timestrea…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-11T00:05:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3101d8d5709a9bdf5d68f618fd40d8ad985e9c1d",
          "body": "…le responses (#292, #293)\n\n- RunInstances validates SGs exist and belong to target VPC\n- DescribeSecurityGroups returns full IpPermissions (protocol/port/CIDR)\n- DescribeRouteTables returns full Routes and Associations\n- SecurityGroupAllowed() evaluator for protocol/port/CIDR checking\n- CreateVpc and ensureDefaultVPC auto-create main route table\n\nCloses #292, #293.",
          "is_bot": false,
          "headline": "Release v0.63.0: EC2/VPC networking depth — SG enforcement, route tab…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T23:51:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "375f49ddfc8cf8bb199f439c35b69e1a7c045c98",
          "body": "…r, TimeoutSeconds, Choice operators (#291)\n\n- Parameters: JSONPath .$ references + static values transform state input\n- ResultSelector: filter task output before ResultPath merging\n- TimeoutSeconds: enforcement with States.Timeout error code\n- 6 new Choice operators: StringGreater/LessThanOrEquals,\n  NumericGreater/LessThanOrEquals, IsNull, IsPresent\n\nCloses #291.",
          "is_bot": false,
          "headline": "Release v0.62.0: Step Functions ASL depth — Parameters, ResultSelecto…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T23:26:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da7ed0f5612eb2b1f6fcc22b968eb732e9b8bf9f",
          "body": "…, #290)\n\n- CreateChangeSet diffs old vs new templates for Add/Modify/Remove entries\n- ExecuteChangeSet applies changes then consumes the change set\n- ListChangeSets, DescribeChangeSet, DeleteChangeSet for lifecycle mgmt\n- DetectStackDrift checks resource existence in plugin state\n- Drift checkers for S3, DynamoDB, SQS, SNS, Lambda, IAM\n\nCloses #289, #290.",
          "is_bot": false,
          "headline": "Release v0.61.0: CloudFormation change sets and drift detection (#289…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T23:12:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c1012ea91d702c7820efe307f6015b668993116",
          "body": "…cy (#288)\n\n- Wrap SQS-delivered messages in standard SNS notification JSON envelope\n- Add HTTP/S protocol support (POST to subscriber endpoint)\n- Add FilterPolicy evaluation on message attributes\n- Pass Subject through to envelope and Lambda event records\n\nCloses #288.",
          "is_bot": false,
          "headline": "Release v0.60.0: SNS message delivery — envelope, HTTP/S, filter poli…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T21:58:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36ee015f8bb96ccc9cf897cf3cb9add88f7ec05e",
          "body": "…redits (#285, #286, #287)\n\n- Add PricingProvider interface with Static and AWS implementations\n- AWS provider fetches from Price List Bulk API, caches to disk with TTL\n- DiscountConfig: global percentage + per-service fixed rate/percentage\n- Credit model with CRUD, service scoping, expiry, balance tracking\n- 9 new control-plane endpoints under /v1/pricing/\n- Config: pricing.provider, pricing.cachePath, costs.discounts\n- Hot-reload support for discounts via SIGHUP\n\nCloses #285, #286, #287.",
          "is_bot": false,
          "headline": "Release v0.59.0: Cost model overhaul — pricing provider, discounts, c…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T21:50:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd44739eb7caddcc34a7b663a4fb5fd5ba9ead0d",
          "body": "- Bump otel/sdk v1.42→v1.43 and grpc v1.79.2→v1.80.0 to fix\n  CVE-2026-39883 (HIGH) and CVE-2026-33186 (CRITICAL)\n- Add non-root USER directive and HEALTHCHECK to Dockerfile\n- Harden K8s deployment with securityContext, pin image tag\n- Add security scanning workflow and Makefile targets\n\nCloses #282, #283, #284.",
          "is_bot": false,
          "headline": "Release v0.58.2: Security remediation (#282, #283, #284)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T02:31:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4103e8fb2529fa7077a2dec81b13810e78ab983c",
          "body": "Add InvokeModel operation to BedrockRuntimePlugin at POST /model/{modelId}/invoke.\nReturns a deterministic canned response by default, with control-plane endpoints\nPOST/DELETE /v1/bedrock-runtime/responses to seed custom responses per model ID\nor wildcard. Closes #281.",
          "is_bot": false,
          "headline": "Release v0.58.1: Bedrock Runtime InvokeModel (#281)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-10T02:12:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90bc4a6a1968142c0e4885099a5589d89b422475",
          "body": "Add TimestreamPlugin with 12 operations (Write + Query APIs).\nCreateDatabase/Table lifecycle, WriteRecords count ingestion,\nQuery with seeded responses via /v1/timestream-query/results control plane,\nDescribeEndpoints, CancelQuery. Race-safe, 0 lint issues.",
          "is_bot": false,
          "headline": "Release v0.58.0: Amazon Timestream plugin (#279)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-03T00:35:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9025a0696aa4063c58491260558aaa1e9fc2854f",
          "body": "Add two missing API key operations to the AppSyncPlugin.\nCreateApiKey stores a key with one-year expiry; ListApiKeys returns all\nkeys scoped to the API. Both return NotFoundException for unknown APIs.",
          "is_bot": false,
          "headline": "Release v0.57.0: AppSync CreateApiKey + ListApiKeys (#278)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-03T00:18:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75b7da372c0d9eb841a461418aa54e9fa59f86dc",
          "body": "Add GET/POST/DELETE /v1/fault/rules endpoints to manage FaultConfig at runtime.\nReturn 501 when no FaultController is attached. handleStateReset now clears fault\nrules. FaultConfig/FaultRule gain JSON tags; FaultController gains GetConfig().",
          "is_bot": false,
          "headline": "Release v0.56.1: HTTP API for fault injection rule configuration (#280)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-03T00:04:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "117efa304e06b6bbdf7124d90ad7070332c93702",
          "body": "ElastiCachePlugin with 17 operations: cache clusters, replication groups,\nsubnet groups, parameter groups, and resource tagging. AWS Query/XML\nprotocol. Endpoint addresses use deterministic hash matching real AWS\nformat. Costs: $0.017/CreateCacheCluster, $0.034/CreateReplicationGroup.",
          "is_bot": false,
          "headline": "Release v0.56.0: Amazon ElastiCache plugin (#277)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T23:53:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3e677859901bf92b54d5f41ea99ee0cb32262ec",
          "body": "errcheck: add _ = to unchecked Body.Close() calls in athena test\ngodot: add period to s3_control.go comment\nmisspell: cancelled → canceled in dynamodb_plugin.go and test\nrevive: rename Id→ID suffix fields in backup, codepipeline, msk,\n  ram, redshiftdata, sqs, sso, transfer plugins per Go naming\n  conventions; rename generateSSOIdentityStoreId→...ID\nunused: remove unused redshiftXMLNS constant from redshift_types.go",
          "is_bot": false,
          "headline": "fix(lint): resolve 46 golangci-lint issues across v0.53–v0.55",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T23:47:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1124bec5dda84c7f9eae411f49edc7baf48e4d4a",
          "body": "Added CreateClusterV2, DescribeClusterV2, ListClustersV2, and ListNodes\noperations to complete the MSK plugin. V2 operations use the /api/v2/clusters\npath and Provisioned sub-object shape. ListNodes generates synthetic broker\nnode entries per NumberOfBrokerNodes. New types: MSKNodeInfo,\nMSKBrokerNodeInfo, MSKBrokerSoftwareInfo.",
          "is_bot": false,
          "headline": "Release v0.55.0: Amazon MSK plugin completion (#276)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T23:36:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d6e14d3e8e5ef082d08790c9d7491aa0b7d2a5b",
          "body": "…ions, seeded results (#275)\n\n- ListQueryExecutions with optional WorkGroup filter and pagination\n- CreateWorkGroup, GetWorkGroup, DeleteWorkGroup, ListWorkGroups\n- GetQueryResults returns pre-seeded rows (SQL-keyed or wildcard *)\n- POST /v1/athena/results + DELETE /v1/athena/results control-plane endpoints\n- 6 new tests covering all new operations and control plane",
          "is_bot": false,
          "headline": "Release v0.54.0: Complete Athena plugin — workgroups, ListQueryExecut…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T21:40:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9672947e1e38c43a25d6f1f73f3eea5ae7035009",
          "body": "…up Ordering (#272, #273, #274)\n\n- DynamoDB TransactGetItems: ordered Responses array, missing keys return {}\n- DynamoDB TransactWriteItems: two-phase all-or-nothing commit with ConditionCheck,\n  TransactionCanceledException with CancellationReasons on failure\n- S3 presigned URL expiry enforcement a\n[…]\non expired URLs)\n- POST /v1/s3/presign control-plane endpoint generates substrate-compatible presigned URLs\n- SQS FIFO MessageGroupId stored and returned; ReceiveMessage enforces single-group-per-call",
          "is_bot": false,
          "headline": "Release v0.53.0: DynamoDB Transact + S3 Presigned URLs + SQS FIFO Gro…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T21:27:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3af8f4c62254e59ec1a393b622fea595b3214a4a",
          "body": "…0, #271)\n\nCloses #270: pytest-substrate HTTP control plane helpers\n- SubstrateServer.seed_result(service, result, sql=\"*\") → POST /v1/{service}/results\n- SubstrateServer.set_status(service, status, error_message=\"\") → POST /v1/{service}/status\n- SubstrateServer.clear_seeds(service, sql=None) → DELE\n[…]\nn\n- examples/docker-compose.jaeger.yml: Substrate + Jaeger all-in-one tracing example\n\nAlso: TestPluginShutdown_NoopPlugins covers 21 plugin Shutdown() methods, keeping\nmain package coverage at 80.3%.",
          "is_bot": false,
          "headline": "Release v0.52.0: pytest-substrate helpers + OTLP span attributes (#27…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T21:11:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ea0ae74b04f1dfb46437f55887043c73a5a61f78",
          "body": null,
          "is_bot": false,
          "headline": "feat(redshift-data): HTTP control plane for result/status seeding (#269)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T20:09:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4674e69770e2bf2d3b8acedf0477edde7e3bd578",
          "body": "RedshiftDataPlugin with 3 operations: ExecuteStatement,\nDescribeStatement, GetStatementResult. JSON-target protocol\nRedshiftData_20191217.{Op}; parser alias \"redshiftdata\" → \"redshift-data\".\nStatements complete synchronously (FINISHED). GetStatementResult\nreturns pre-seeded rows from the \"results\" plugin option keyed by\nSQL string or \"*\" wildcard — enabling handler tests that require\nspecific query responses without MagicMock.\nCoverage: 80.1% main package.",
          "is_bot": false,
          "headline": "Release v0.50.0: Redshift Data API plugin (#268)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T19:32:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8611b66202a37991337e424c2fa0fabcd8117d85",
          "body": "- SSOPlugin: 12 operations (ListInstances, CreatePermissionSet,\n  DescribePermissionSet, UpdatePermissionSet, DeletePermissionSet,\n  ListPermissionSets, Attach/DetachManagedPolicy,\n  ListManagedPolicies, CreateAccountAssignment,\n  DeleteAccountAssignment, ListAccountAssignments).\n  JSON-target proto\n[…]\nclusters start\n  \"available\"; endpoint {id}.{acct}.{region}.redshift.amazonaws.com:5439.\n- Cost entries: redshift/CreateCluster $0.0002, CreateClusterSnapshot $0.00002.\n- Coverage: 80.1% main package.",
          "is_bot": false,
          "headline": "Release v0.49.0: IAM Identity Center (SSO) + RAM + Redshift (#266)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T19:28:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9d8cf0782ee9a6169a0a23d164082a091d61925",
          "body": "Adds two new data-protection service plugins:\n\n- BackupPlugin (12 ops): CreateBackupVault, DescribeBackupVault,\n  DeleteBackupVault, ListBackupVaults, CreateBackupPlan, GetBackupPlan,\n  UpdateBackupPlan, DeleteBackupPlan, ListBackupPlans,\n  CreateBackupSelection, GetBackupSelection, DeleteBackupSele\n[…]\nrservice\": \"transfer\" added. Server IDs: s-{17 hex chars}.\n  DescribeServer always returns State=ONLINE. DeleteServer cascades\n  to delete all users. Cost: $0.30/server.\n\nCoverage maintained at 80.0%.",
          "is_bot": false,
          "headline": "Release v0.48.0: AWS Backup + Transfer Family plugins (#265)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T19:06:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88294de31f834c3e16578d8a7d441c840127f70c",
          "body": "…(#264)\n\nAdds three new AWS service plugins completing the CI/CD pipeline stack:\n\n- CodeBuildPlugin (7 ops): CreateProject, BatchGetProjects, UpdateProject,\n  DeleteProject, ListProjects, StartBuild, BatchGetBuilds. Builds immediately\n  return SUCCEEDED. Cost: codebuild/StartBuild $0.0001.\n\n- CodePi\n[…]\n immediately Succeeded; IDs use real d-XXXXXXXXX format.\n  Cost: codedeploy/CreateDeployment $0.000001.\n\nAll three use JSON-target protocol with no parser aliases needed. Coverage\nmaintained at 80.0%.",
          "is_bot": false,
          "headline": "Release v0.47.0: CodeBuild + CodePipeline + CodeDeploy CI/CD plugins …",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T18:46:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b56b0088c316c640301aeb2182b9bc6230a9383",
          "body": "…eter (#263, #267)\n\nAdds WAFv2Plugin (13 ops, LockToken CAS), CloudTrailPlugin (8 ops,\ndeterministic GetTrailStatus), and TestServer.SeedSSMParameter/\nSeedSSMParameters helpers for seeding AMI discovery paths in tests.",
          "is_bot": false,
          "headline": "Release v0.46.0: WAFv2 + CloudTrail plugins + TestServer.SeedSSMParam…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T18:35:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aca03385a12e61764d543871e33e7251c4e6b99a",
          "body": "- parser.go: add \"amazonsqs\"→\"sqs\" alias so SigV4 credential-scope\n  service name used by aws-sdk-go-v2 SQS JSON protocol routes correctly\n  to SQSPlugin (closes #236)\n- ce_plugin.go: GetCostAndUsage with Granularity=DAILY now emits one\n  ResultByTime per calendar day over the requested range (inclu\n[…]\n\n  zero-cost days); EC2 usage cost bucketed per day (closes #225)\n- ce_plugin_test.go: TestCE_GetCostAndUsage_DailyGranularity verifies\n  3-day range produces 3 per-day entries with correct TimePeriod",
          "is_bot": false,
          "headline": "feat: SQS JSON protocol routing alias + CE daily granularity bucketing",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T17:43:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "261887ac2d1e39f2922a60bd7cd657506b794fdc",
          "body": "…I (revive)",
          "is_bot": false,
          "headline": "fix: rename omics_plugin.go WorkflowId→WorkflowID, OutputUri→OutputUR…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T17:30:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d3550a5f398e7f2df28f7cfe4eb07c46a7f59da",
          "body": "… nilerr, unused)",
          "is_bot": false,
          "headline": "fix: resolve all golangci-lint errors (misspell, revive, staticcheck,…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T17:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1dc681eef70593fd3c93cba9e6fd34aa2a227ee",
          "body": null,
          "is_bot": false,
          "headline": "style: gofmt all files (CI lint fix)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T17:18:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "966bc9fa6b78a3bfddde28046740850def76c699",
          "body": "Add POST /_substrate/reset as an alias for /v1/state/reset, providing\na stable reset URL for Docker-based test setups (LocalStack drop-in).\nAll previously-implemented issues closed on GitHub: #237-240, #243,\n#247-248, #254-259.",
          "is_bot": false,
          "headline": "Release v0.45.9: /_substrate/reset endpoint + close stale issues (#259)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T17:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6f67cc1ab8b775f22c4125d149396b4d79923ff",
          "body": "- IAM plugin now returns Query+XML protocol responses (not JSON) matching\n  AWS IAM wire format; all 50+ operations emit proper XML envelopes with\n  xmlns, result elements, and ResponseMetadata (closes #260)\n- SSM SendCommand RequestedDateTime now serialised as Unix epoch float64\n  instead of RFC333\n[…]\n Added iam_xml.go with all IAM XML builder helpers\n- Updated betty_cfn.go to parse XML IAM responses via xmlUnmarshalIAM helper\n- Coverage maintained at 80.0% with new epochseconds and sagemaker tests",
          "is_bot": false,
          "headline": "Release v0.45.7: IAM XML protocol + SSM timestamp fix (#260, #261, #262)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T16:45:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "36f3e51246f620748d605cc82f56d01652dc811e",
          "body": "- IAM plugin now returns Query+XML protocol responses (not JSON) matching\n  AWS IAM wire format; all 50+ operations emit proper XML envelopes with\n  xmlns, result elements, and ResponseMetadata (closes #260)\n- SSM SendCommand RequestedDateTime now serialised as Unix epoch float64\n  instead of RFC333\n[…]\n Added iam_xml.go with all IAM XML builder helpers\n- Updated betty_cfn.go to parse XML IAM responses via xmlUnmarshalIAM helper\n- Coverage maintained at 80.0% with new epochseconds and sagemaker tests",
          "is_bot": false,
          "headline": "Release v0.45.7: IAM XML protocol + SSM timestamp fix (#260, #261, #262)",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T16:45:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dc69de72435a560cf1241e7d0bef40c0b4362c2e",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.45.7",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T16:30:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "886cf5aa1100bcd2099c773a2329c19386126a6f",
          "body": "…ugin\n\nboto3's bedrock-runtime client uses \"bedrock\" (not \"bedrock-runtime\") as\nthe SigV4 signing service in the credential scope when AWS_ENDPOINT_URL\nis set to a single base endpoint. Without this alias, ApplyGuardrail\ncalls routed via AWS_ENDPOINT_URL received a 501 ServiceNotAvailable\ninstead of being dispatched to BedrockRuntimePlugin.",
          "is_bot": false,
          "headline": "fix(parser): route SigV4 service name \"bedrock\" to bedrock-runtime pl…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T15:49:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9738540214059597090578c51858721f0d779fa1",
          "body": "…mmand (#256, #257, #258)\n\n- EC2: CreateVolume, DescribeVolumes, AttachVolume, DetachVolume, DeleteVolume\n  with full state machine; DeleteSnapshot stub (#256)\n- IAM: CreateInstanceProfile, GetInstanceProfile, DeleteInstanceProfile,\n  AddRoleToInstanceProfile, RemoveRoleFromInstanceProfile; ListInstanceProfiles\n  now returns persisted profiles (#257)\n- SSM: SendCommand, GetCommandInvocation (immediate Success in test mode),\n  DescribeInstanceInformation (reflects running EC2 instances) (#258)",
          "is_bot": false,
          "headline": "Release v0.45.6: EC2 EBS volumes + IAM instance profiles + SSM Run Co…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-02T04:41:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20cb9a7afa259e8bf7cc4070a5b910c1bad790f2",
          "body": "…x (#254, #255)\n\n- Fix QuickSight REST path routing: use data-sources/data-sets (hyphenated)\n  instead of datasources/datasets — CreateDataSource and DescribeDataSource\n  were returning InvalidAction for all boto3 calls (#255)\n- Add TestDynamoDBPlugin_EmptyStringAttribute_Scan to confirm empty strin\n[…]\ns) (#254)\n- Remove redundant SetConfigType(\"yaml\") from LoadConfig; viper was\n  opening the extension-less ./substrate binary as YAML, breaking\n  TestLoadConfig_Defaults and TestLoadConfig_EnvOverride",
          "is_bot": false,
          "headline": "Release v0.45.5: QuickSight path fix + DynamoDB Scan test + config fi…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-01T22:16:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3cbe20c22148c93ba8096a0fd5db2f16882f84b",
          "body": "- Add unit tests for SubstrateServer (start/stop/health/reset) and\n  plugin fixture registration (20 tests, no binary required)\n- Remove committed build artifacts (build/, egg-info/, __pycache__)\n- Update .gitignore to exclude Python build artifacts\n- Add python-test, python-lint, python-build Makefile targets\n- Update clean target to remove Python build artifacts",
          "is_bot": false,
          "headline": "Release v0.45.4: pytest-substrate test suite + project integration",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-01T21:16:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6927992c5faf84ad0039354448adaf9e75356a8c",
          "body": "…252, #253)\n\nAdd OpenSearchPlugin covering index lifecycle, document CRUD, bulk\nindexing, search query DSL, aggregations (terms/sum/avg/max/min/\ncardinality/value_count), scroll pagination, and cluster health.\nRoutes via *.es.amazonaws.com / *.aoss.amazonaws.com hosts and\nSigV4 service aliases \"es\"/\n[…]\nescriptor structs.\n\nFix DynamoDB empty string attributes lost during state persistence\nby changing AttributeValue.S from string to *string so {\"S\":\"\"}\nround-trips correctly through JSON serialisation.",
          "is_bot": false,
          "headline": "Release v0.45.3: OpenSearch plugin + Glue/DynamoDB bug fixes (#251, #…",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-01T21:06:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0faad415c23a38e6a52332be8a6f779e5e8a4609",
          "body": null,
          "is_bot": false,
          "headline": "feat: add pytest-substrate plugin for integration testing",
          "author_name": "scttfrdmn",
          "author_login": "scttfrdmn",
          "committed_at": "2026-04-01T16:57:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 37,
      "commits_last_year": 177,
      "latest_release_at": "2026-07-26T07:20:42Z",
      "latest_release_tag": "v0.76.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 12,
      "days_since_latest_release": 4,
      "mean_days_between_releases": 5.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 85,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/scttfrdmn/substrate",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/scttfrdmn/substrate",
          "is_deprecated": false,
          "latest_version": "v0.76.0",
          "repository_url": "https://github.com/scttfrdmn/substrate",
          "versions_count": 114,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-26T07:20:23Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 21
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod",
        "test/e2e/go.mod"
      ],
      "largest_source_bytes": 152791,
      "source_files_sampled": 308,
      "oversized_source_files": 9,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7327
    },
    "dependencies": {
      "manifests": [
        "docs/package.json",
        "go.mod",
        "python/pyproject.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "vite",
            "direct": false,
            "version": "5.4.21",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-4w7w-66w2-5vf9",
              "GHSA-fx2h-pf6j-xcff",
              "GHSA-v6wh-96g9-6wx3"
            ],
            "fixed_version": "8.0.16",
            "advisory_count": 3,
            "oldest_advisory_days": 114
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.21.5",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-67mh-4wv8-2f99"
            ],
            "fixed_version": "0.25.0",
            "advisory_count": 1,
            "oldest_advisory_days": 534
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 15
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1,
          "unknown": 1,
          "moderate": 1
        },
        "advisory_count": 5,
        "affected_count": 3,
        "assessed_count": 248,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "github.com/go-chi/chi/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/go-chi/cors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.2"
        },
        {
          "name": "github.com/spf13/afero",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.15.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/spf13/viper",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.0"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.yaml.in/yaml/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.4"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.54.0"
        },
        {
          "name": "pytest",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=9.0.3"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/go-chi/chi/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-chi/cors",
            "direct": true,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": true,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": true,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": true,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": true,
            "version": "v1.54.0",
            "ecosystem": "go"
          },
          {
            "name": "pytest",
            "direct": true,
            "version": "9.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": false,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": false,
            "version": "v1.32.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.19.29",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/iam",
            "direct": false,
            "version": "v1.55.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": false,
            "version": "v1.105.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.32.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.37.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.44.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.74.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "@algolia/abtesting",
            "direct": false,
            "version": "1.19.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/autocomplete-core",
            "direct": false,
            "version": "1.17.7",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/autocomplete-plugin-algolia-insights",
            "direct": false,
            "version": "1.17.7",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/autocomplete-preset-algolia",
            "direct": false,
            "version": "1.17.7",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/autocomplete-shared",
            "direct": false,
            "version": "1.17.7",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-abtesting",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-analytics",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-common",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-insights",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-personalization",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-query-suggestions",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/client-search",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/ingestion",
            "direct": false,
            "version": "1.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/monitoring",
            "direct": false,
            "version": "1.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/recommend",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/requester-browser-xhr",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/requester-fetch",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@algolia/requester-node-http",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@docsearch/css",
            "direct": false,
            "version": "3.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "@docsearch/js",
            "direct": false,
            "version": "3.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "@docsearch/react",
            "direct": false,
            "version": "3.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "@iconify-json/simple-icons",
            "direct": false,
            "version": "1.2.85",
            "ecosystem": "npm"
          },
          {
            "name": "@iconify/types",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm-eabi",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-arm64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-x64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-arm64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-x64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-gnueabihf",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-musleabihf",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-musl",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-musl",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-musl",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-musl",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-s390x-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-musl",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openbsd-x64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openharmony-arm64",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-arm64-msvc",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-ia32-msvc",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-gnu",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-msvc",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/core",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/engine-javascript",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/engine-oniguruma",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/langs",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/themes",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/transformers",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/types",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/vscode-textmate",
            "direct": false,
            "version": "10.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/hast",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/linkify-it",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/markdown-it",
            "direct": false,
            "version": "14.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mdast",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mdurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/unist",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/web-bluetooth",
            "direct": false,
            "version": "0.0.21",
            "ecosystem": "npm"
          },
          {
            "name": "@ungap/structured-clone",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@vitejs/plugin-vue",
            "direct": false,
            "version": "5.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/compiler-core",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/compiler-dom",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/compiler-sfc",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/compiler-ssr",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/devtools-api",
            "direct": false,
            "version": "7.7.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/devtools-kit",
            "direct": false,
            "version": "7.7.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/devtools-shared",
            "direct": false,
            "version": "7.7.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/reactivity",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/runtime-core",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/runtime-dom",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/server-renderer",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vue/shared",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "@vueuse/core",
            "direct": false,
            "version": "12.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "@vueuse/integrations",
            "direct": false,
            "version": "12.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "@vueuse/metadata",
            "direct": false,
            "version": "12.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "@vueuse/shared",
            "direct": false,
            "version": "12.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "algoliasearch",
            "direct": false,
            "version": "5.53.0",
            "ecosystem": "npm"
          },
          {
            "name": "birpc",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "ccount",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "character-entities-html4",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "character-entities-legacy",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "comma-separated-tokens",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "copy-anything",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "csstype",
            "direct": false,
            "version": "3.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "dequal",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "devlop",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex-xs",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "entities",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.21.5",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "focus-trap",
            "direct": false,
            "version": "7.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-to-html",
            "direct": false,
            "version": "9.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-whitespace",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "hookable",
            "direct": false,
            "version": "5.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "html-void-elements",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-what",
            "direct": false,
            "version": "5.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "mark.js",
            "direct": false,
            "version": "8.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-to-hast",
            "direct": false,
            "version": "13.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-character",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-encode",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-sanitize-uri",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-symbol",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-types",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "minisearch",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "mitt",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.16",
            "ecosystem": "npm"
          },
          {
            "name": "oniguruma-to-es",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "perfect-debounce",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.23",
            "ecosystem": "npm"
          },
          {
            "name": "preact",
            "direct": false,
            "version": "10.29.2",
            "ecosystem": "npm"
          },
          {
            "name": "property-information",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "regex-recursion",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "regex-utilities",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "rfdc",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "rollup",
            "direct": false,
            "version": "4.61.0",
            "ecosystem": "npm"
          },
          {
            "name": "search-insights",
            "direct": false,
            "version": "2.17.3",
            "ecosystem": "npm"
          },
          {
            "name": "shiki",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "space-separated-tokens",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "speakingurl",
            "direct": false,
            "version": "14.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "stringify-entities",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "superjson",
            "direct": false,
            "version": "2.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "tabbable",
            "direct": false,
            "version": "6.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "trim-lines",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-is",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-position",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-stringify-position",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-visit",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-visit-parents",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "vfile",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "vfile-message",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "5.4.21",
            "ecosystem": "npm"
          },
          {
            "name": "vitepress",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "npm"
          },
          {
            "name": "vue",
            "direct": false,
            "version": "3.5.35",
            "ecosystem": "npm"
          },
          {
            "name": "zwitch",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "iniconfig",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "26.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pluggy",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-substrate",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 248,
        "direct_count": 14,
        "indirect_count": 234
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 5,
        "merged_prs": 56,
        "open_issues": 16,
        "closed_ratio": 0.952,
        "closed_issues": 319,
        "closed_unmerged_prs": 6
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "scttfrdmn",
          "commits": 168,
          "avatar_url": "https://avatars.githubusercontent.com/u/3011922?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "docker.yml",
        "docs-ci.yml",
        "docs.yml",
        "security.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json",
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/21 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 8,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "fa7684bd66f663e9304f5b950149b9d76cef0774",
        "ran_at": "2026-07-30T12:09:09Z",
        "aggregate_score": 6.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T07:06:21Z",
      "oldest_open_prs": [
        {
          "number": 384,
          "created_at": "2026-07-28T07:06:15Z",
          "last_comment_at": "2026-07-28T07:09:08Z",
          "last_comment_author": "codecov"
        },
        {
          "number": 385,
          "created_at": "2026-07-28T07:07:02Z",
          "last_comment_at": "2026-07-28T07:09:43Z",
          "last_comment_author": "codecov"
        },
        {
          "number": 386,
          "created_at": "2026-07-28T07:13:20Z",
          "last_comment_at": "2026-07-28T07:15:21Z",
          "last_comment_author": "codecov"
        },
        {
          "number": 390,
          "created_at": "2026-07-30T04:45:30Z",
          "last_comment_at": "2026-07-30T04:48:17Z",
          "last_comment_author": "codecov"
        },
        {
          "number": 395,
          "created_at": "2026-07-30T04:54:58Z",
          "last_comment_at": "2026-07-30T04:57:29Z",
          "last_comment_author": "codecov"
        }
      ],
      "last_merged_pr_at": "2026-07-26T07:20:23Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 371,
          "created_at": "2026-07-26T05:54:29Z",
          "last_comment_at": "2026-07-26T07:13:54Z",
          "last_comment_author": "scttfrdmn"
        },
        {
          "number": 380,
          "created_at": "2026-07-26T06:52:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 387,
          "created_at": "2026-07-30T04:08:14Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 388,
          "created_at": "2026-07-30T04:10:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 389,
          "created_at": "2026-07-30T04:21:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 391,
          "created_at": "2026-07-30T04:48:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 392,
          "created_at": "2026-07-30T04:49:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 393,
          "created_at": "2026-07-30T04:49:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 394,
          "created_at": "2026-07-30T04:52:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 396,
          "created_at": "2026-07-30T04:58:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 397,
          "created_at": "2026-07-30T05:02:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 398,
          "created_at": "2026-07-30T05:02:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 399,
          "created_at": "2026-07-30T05:02:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 400,
          "created_at": "2026-07-30T05:02:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 401,
          "created_at": "2026-07-30T05:02:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 402,
          "created_at": "2026-07-30T05:11:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/scttfrdmn/substrate",
    "host": "github.com",
    "name": "substrate",
    "owner": "scttfrdmn"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 68,
      "inputs": {
        "security": 70,
        "vitality": 83,
        "community": 34,
        "governance": 58,
        "engineering": 90
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 83,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "commits_last_year": 177,
              "human_commit_share": 0.91,
              "days_since_last_push": 0,
              "active_weeks_last_year": 12
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "12/52 weeks with commits",
                "points": 8.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 12
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "177 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 177
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 37,
              "latest_release_tag": "v0.76.0",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": 5.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "37 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 37
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~5.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 5.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 34,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "merged_prs": 56,
              "open_issues": 16,
              "closed_issues": 319,
              "issue_closed_ratio": 0.952,
              "closed_unmerged_prs": 6
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "95% of issues closed",
                "points": 44.5,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 95
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "56/62 decided PRs merged",
                "points": 34.5,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 56,
                      "decided": 62
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/21 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "followers": 18,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "scttfrdmn",
              "public_repos": 187,
              "account_age_days": 4979
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "18 followers of scttfrdmn",
                "points": 9.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 18,
                      "login": "scttfrdmn"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "187 public repos, account ~13 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 187
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/scttfrdmn/substrate"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "114 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 114
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "aws",
                "aws-cdk",
                "aws-emulator",
                "boto3",
                "cloudformation",
                "devops",
                "event-sourcing",
                "go",
                "golang",
                "infrastructure-as-code",
                "integration-testing",
                "localstack-alternative",
                "mock",
                "terraform",
                "testing"
              ],
              "has_wiki": true,
              "homepage": "https://scttfrdmn.github.io/substrate/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://scttfrdmn.github.io/substrate/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "15 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 70,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/21 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 248 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 248
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 5,
              "affected_packages": 3,
              "assessed_packages": 248,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1, moderate 1, unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 248,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7327
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "91 of 91 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 91,
                      "sampled": 91
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json",
                "uv.lock"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod",
                "test/e2e/go.mod"
              ],
              "dependency_bot_commit_share": 0.09
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "9 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 9,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 152791,
              "source_files_sampled": 308,
              "oversized_source_files": 9
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "9/308 source files over 60KB",
                "points": 53.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 308,
                      "oversized": 9
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Could not fetch pypi package 'pytest-substrate' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T12:09:26.389011Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/scttfrdmn/substrate.svg",
  "full_name": "scttfrdmn/substrate",
  "license_state": "custom",
  "license_spdx": null
}