Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 06:28 UTC
smartcontractkit / crec-sdk
smartcontractkit/crec-sdk holds a health index of 67 out of 100, placing it in the Moderate band. It scores highest on Vitality (98/100) and lowest on Community & Adoption (22/100). It was last updated today. 2 contributors account for most of its recent work.
67
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
67
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
SmartContractOrganization
4,155 followers381 public repossince Jan 2017
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/smartcontractkit/crec-sdk | v0.7.10 | - | 64 | 0 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
98
Development activity
96Excellent
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 32.5/36 | Commit cadence — 47/52 weeks with commits |
| 18/18 | Commit volume — 130 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 130 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 47 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 53 releases published |
| 36/36 | Release recency — latest release 0 days ago |
| 27/27 | Release cadence — a release every ~10.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 53 |
| latest_release_tag | v0.7.10 |
| releases_from_tags | no |
| days_since_latest_release | 0 |
| mean_days_between_releases | 10.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
22
Popularity & adoption
3Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 1 forks |
| 2.7/15 | Watchers — 4 watchers |
Inputs used
| forks | 1 |
| stars | 0 |
| watchers | 4 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
44At risk
How it's scored
| 22.5/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
82
Maintainer resilience (bus factor)
65Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 16.6/22.5 | Commit distribution — top contributor authored 26% of commits |
| 13.5/13.5 | Contributor breadth — 14 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 14 |
| top_contributor_share | 0.261 |
Issue & PR responsiveness
92Excellent
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 33.8/38.3 | PR acceptance — 144/163 decided PRs merged |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
Inputs used
| merged_prs | 144 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 19 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
80Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 25/25 | Owner reach — 4,155 followers of smartcontractkit |
| 25/25 | Track record — 381 public repos, account ~9 yr old |
Inputs used
| followers | 4,155 |
| owner_type | Organization |
| is_verified | — |
| owner_login | smartcontractkit |
| public_repos | 381 |
| account_age_days | 3,476 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 0 days ago |
| 20/20 | Version history — 64 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/smartcontractkit/crec-sdk |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 0 |
Engineering Quality
Are baseline engineering and documentation practices in place?
53
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
30At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
70
Security posture
72Good
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 3/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 5/5 | Pinned-Dependencies — all dependencies are pinned |
| 5/5 | SAST — SAST tool is run on all commits |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 38 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 7.2 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
64Moderate
How it's scored
| 14/35 | Direct dependencies free of known advisories — 1 affected: github.com/ethereum/go-ethereum v1.16.8 (high 7.5) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 33.7/40 | No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 153 days ago |
Inputs used
| source | osv |
| advisories | 64 |
| affected_packages | 11 |
| assessed_packages | 200 |
| unassessed_packages | 0 |
| affected_by_severity | critical 2, high 5, moderate 2, unknown 2 |
| direct_affected_packages | 1 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 200 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
67
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 88 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.88 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile, Taskfile.yaml |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 5/8 | Automated maintenance — dependency automation configured, none observed in the sampled commits |
| 10/10 | OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile, Taskfile.yaml |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.2/55 | Manageable file sizes — 1/73 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 80,678 |
| source_files_sampled | 73 |
| oversized_source_files | 1 |
Key facts
0GitHub stars
14contributors
130commits, last 12 months
0days since last push
53releases
2bus factor
0open issues
Gopackage ecosystems
More detail
OpenSSF Scorecard 7.2 / 10
7.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 4 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 3 contributing companies or organizations -- score normalized to 10 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 10 | Maintained | 25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 10 | Pinned-Dependencies | all dependencies are pinned |
| 10 | SAST | SAST tool is run on all commits |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 38 existing vulnerabilities detected |
Direct dependencies 14
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/aws/aws-sdk-go-v2 | v1.38.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/config | v1.31.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/kms | v1.44.0 | go.mod |
| Go | github.com/ethereum/go-ethereum | v1.16.8 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/hashicorp/vault/api | v1.20.0 | go.mod |
| Go | github.com/oapi-codegen/runtime | v1.1.2 | go.mod |
| Go | github.com/smartcontractkit/chain-selectors | v1.0.89 | go.mod |
| Go | github.com/smartcontractkit/chainlink-common | v0.10.0 | go.mod |
| Go | github.com/smartcontractkit/crec-api-go | v0.7.10 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/testcontainers/testcontainers-go | v0.38.0 | go.mod |
| Go | github.com/testcontainers/testcontainers-go/modules/vault | v0.38.0 | go.mod |
| Go | github.com/golang-jwt/jwt/v4 | v4.5.2 | go.mod |
All dependencies 200
Full resolved dependency set from the GitHub dependency graph: 14 direct and 186 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/aws/aws-sdk-go-v2 | v1.38.0 | direct |
| Go | github.com/aws/aws-sdk-go-v2/config | v1.31.0 | direct |
| Go | github.com/aws/aws-sdk-go-v2/service/kms | v1.44.0 | direct |
| Go | github.com/ethereum/go-ethereum | v1.16.8 | direct |
| Go | github.com/golang-jwt/jwt/v4 | v4.5.2 | direct |
| Go | github.com/google/uuid | v1.6.0 | direct |
| Go | github.com/hashicorp/vault/api | v1.20.0 | direct |
| Go | github.com/oapi-codegen/runtime | v1.1.2 | direct |
| Go | github.com/smartcontractkit/chain-selectors | v1.0.89 | direct |
| Go | github.com/smartcontractkit/chainlink-common | v0.10.0 | direct |
| Go | github.com/smartcontractkit/crec-api-go | v0.7.10 | direct |
| Go | github.com/stretchr/testify | v1.11.1 | direct |
| Go | github.com/testcontainers/testcontainers-go | v0.38.0 | direct |
| Go | github.com/testcontainers/testcontainers-go/modules/vault | v0.38.0 | direct |
| Go | dario.cat/mergo | v1.0.1 | indirect |
| Go | github.com/apapsch/go-jsonmerge/v2 | v2.0.0 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.18.4 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.3 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.3 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.3 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/internal/ini | v1.8.3 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.0 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.3 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/sso | v1.28.0 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.33.0 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/sts | v1.37.0 | indirect |
| Go | github.com/aws/smithy-go | v1.22.5 | indirect |
| Go | github.com/azure/go-ansiterm | v0.0.0-20210617225240-d185dfc1b5a1 | indirect |
| Go | github.com/bahlo/generic-list-go | v0.2.0 | indirect |
| Go | github.com/beorn7/perks | v1.0.1 | indirect |
| Go | github.com/bits-and-blooms/bitset | v1.20.0 | indirect |
| Go | github.com/buger/jsonparser | v1.1.1 | indirect |
| Go | github.com/cenkalti/backoff/v4 | v4.3.0 | indirect |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | indirect |
| Go | github.com/chigopher/pathlib | v0.19.1 | indirect |
| Go | github.com/cockroachdb/errors | v1.11.3 | indirect |
| Go | github.com/cockroachdb/fifo | v0.0.0-20240606204812-0bbfbd93a7ce | indirect |
| Go | github.com/cockroachdb/logtags | v0.0.0-20230118201751-21c54148d20b | indirect |
| Go | github.com/cockroachdb/pebble | v1.1.5 | indirect |
| Go | github.com/cockroachdb/redact | v1.1.5 | indirect |
| Go | github.com/cockroachdb/tokenbucket | v0.0.0-20230807174530-cc333fc44b06 | indirect |
| Go | github.com/consensys/gnark-crypto | v0.18.1 | indirect |
| Go | github.com/containerd/errdefs | v1.0.0 | indirect |
| Go | github.com/containerd/errdefs/pkg | v0.3.0 | indirect |
| Go | github.com/containerd/log | v0.1.0 | indirect |
| Go | github.com/containerd/platforms | v0.2.1 | indirect |
| Go | github.com/cpuguy83/dockercfg | v0.3.2 | indirect |
| Go | github.com/cpuguy83/go-md2man/v2 | v2.0.5 | indirect |
| Go | github.com/crate-crypto/go-eth-kzg | v1.4.0 | indirect |
| Go | github.com/crate-crypto/go-ipa | v0.0.0-20240724233137-53bbb0ceb27a | indirect |
| Go | github.com/datadog/zstd | v1.5.2 | indirect |
| Go | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | indirect |
| Go | github.com/dchest/siphash | v1.2.3 | indirect |
| Go | github.com/deckarep/golang-set/v2 | v2.6.0 | indirect |
| Go | github.com/decred/dcrd/dcrec/secp256k1/v4 | v4.3.0 | indirect |
| Go | github.com/distribution/reference | v0.6.0 | indirect |
| Go | github.com/docker/docker | v28.3.3+incompatible | indirect |
| Go | github.com/docker/go-connections | v0.5.0 | indirect |
| Go | github.com/docker/go-units | v0.5.0 | indirect |
| Go | github.com/dominikbraun/graph | v0.23.0 | indirect |
| Go | github.com/ebitengine/purego | v0.8.4 | indirect |
| Go | github.com/emicklei/dot | v1.6.2 | indirect |
| Go | github.com/ethereum/c-kzg-4844/v2 | v2.1.5 | indirect |
| Go | github.com/ethereum/go-bigmodexpfix | v0.0.0-20250911101455-f9e208c548ab | indirect |
| Go | github.com/ethereum/go-verkle | v0.2.2 | indirect |
| Go | github.com/felixge/httpsnoop | v1.0.4 | indirect |
| Go | github.com/ferranbt/fastssz | v0.1.4 | indirect |
| Go | github.com/fsnotify/fsnotify | v1.8.0 | indirect |
| Go | github.com/getsentry/sentry-go | v0.27.0 | indirect |
| Go | github.com/go-jose/go-jose/v4 | v4.1.3 | indirect |
| Go | github.com/go-logr/logr | v1.4.3 | indirect |
| Go | github.com/go-logr/stdr | v1.2.2 | indirect |
| Go | github.com/go-ole/go-ole | v1.3.0 | indirect |
| Go | github.com/go-test/deep | v1.0.8 | indirect |
| Go | github.com/go-viper/mapstructure/v2 | v2.4.0 | indirect |
| Go | github.com/gofrs/flock | v0.12.1 | indirect |
| Go | github.com/gogo/protobuf | v1.3.2 | indirect |
| Go | github.com/golang/snappy | v1.0.0 | indirect |
| Go | github.com/gorilla/websocket | v1.5.3 | indirect |
| Go | github.com/graph-gophers/graphql-go | v1.5.0 | indirect |
| Go | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.27.1 | indirect |
| Go | github.com/hashicorp/errwrap | v1.1.0 | indirect |
| Go | github.com/hashicorp/go-bexpr | v0.1.10 | indirect |
| Go | github.com/hashicorp/go-cleanhttp | v0.5.2 | indirect |
| Go | github.com/hashicorp/go-multierror | v1.1.1 | indirect |
| Go | github.com/hashicorp/go-retryablehttp | v0.7.7 | indirect |
| Go | github.com/hashicorp/go-rootcerts | v1.0.2 | indirect |
| Go | github.com/hashicorp/go-secure-stdlib/parseutil | v0.1.6 | indirect |
| Go | github.com/hashicorp/go-secure-stdlib/strutil | v0.1.2 | indirect |
| Go | github.com/hashicorp/go-sockaddr | v1.0.2 | indirect |
| Go | github.com/hashicorp/hcl | v1.0.1-vault-7 | indirect |
| Go | github.com/holiman/billy | v0.0.0-20250707135307-f2f9b9aae7db | indirect |
| Go | github.com/holiman/bloomfilter/v2 | v2.0.3 | indirect |
| Go | github.com/holiman/uint256 | v1.3.2 | indirect |
| Go | github.com/huandu/xstrings | v1.4.0 | indirect |
| Go | github.com/huin/goupnp | v1.3.0 | indirect |
| Go | github.com/iancoleman/strcase | v0.3.0 | indirect |
| Go | github.com/inconshreveable/mousetrap | v1.1.0 | indirect |
| Go | github.com/invopop/jsonschema | v0.13.0 | indirect |
| Go | github.com/jackpal/go-nat-pmp | v1.0.2 | indirect |
| Go | github.com/jinzhu/copier | v0.4.0 | indirect |
| Go | github.com/klauspost/compress | v1.18.0 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.2.10 | indirect |
| Go | github.com/kr/pretty | v0.3.1 | indirect |
| Go | github.com/kr/text | v0.2.0 | indirect |
| Go | github.com/lufia/plan9stats | v0.0.0-20211012122336-39d0f177ccd0 | indirect |
| Go | github.com/magiconair/properties | v1.8.10 | indirect |
| Go | github.com/mailru/easyjson | v0.9.0 | indirect |
| Go | github.com/mattn/go-colorable | v0.1.14 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirect |
| Go | github.com/mattn/go-runewidth | v0.0.16 | indirect |
| Go | github.com/microsoft/go-winio | v0.6.2 | indirect |
| Go | github.com/minio/sha256-simd | v1.0.0 | indirect |
| Go | github.com/mitchellh/go-homedir | v1.1.0 | indirect |
| Go | github.com/mitchellh/mapstructure | v1.5.0 | indirect |
| Go | github.com/mitchellh/pointerstructure | v1.2.0 | indirect |
| Go | github.com/moby/docker-image-spec | v1.3.1 | indirect |
| Go | github.com/moby/go-archive | v0.1.0 | indirect |
| Go | github.com/moby/patternmatcher | v0.6.0 | indirect |
| Go | github.com/moby/sys/sequential | v0.6.0 | indirect |
| Go | github.com/moby/sys/user | v0.4.0 | indirect |
| Go | github.com/moby/sys/userns | v0.1.0 | indirect |
| Go | github.com/moby/term | v0.5.0 | indirect |
| Go | github.com/morikuni/aec | v1.0.0 | indirect |
| Go | github.com/mr-tron/base58 | v1.2.0 | indirect |
| Go | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | indirect |
| Go | github.com/olekukonko/tablewriter | v0.0.5 | indirect |
| Go | github.com/opencontainers/go-digest | v1.0.0 | indirect |
| Go | github.com/opencontainers/image-spec | v1.1.1 | indirect |
| Go | github.com/pelletier/go-toml/v2 | v2.2.4 | indirect |
| Go | github.com/pion/dtls/v2 | v2.2.7 | indirect |
| Go | github.com/pion/logging | v0.2.2 | indirect |
| Go | github.com/pion/stun/v2 | v2.0.0 | indirect |
| Go | github.com/pion/transport/v2 | v2.2.1 | indirect |
| Go | github.com/pion/transport/v3 | v3.0.1 | indirect |
| Go | github.com/pkg/errors | v0.9.1 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | indirect |
| Go | github.com/power-devops/perfstat | v0.0.0-20210106213030-5aafc221ea8c | indirect |
| Go | github.com/projectzkm/ziren/crates/go-runtime/zkvm_runtime | v0.0.0-20251001021608-1fe7b43fc4d6 | indirect |
| Go | github.com/prometheus/client_golang | v1.22.0 | indirect |
| Go | github.com/prometheus/client_model | v0.6.2 | indirect |
| Go | github.com/prometheus/common | v0.65.0 | indirect |
| Go | github.com/prometheus/procfs | v0.16.1 | indirect |
| Go | github.com/rivo/uniseg | v0.4.7 | indirect |
| Go | github.com/rogpeppe/go-internal | v1.14.1 | indirect |
| Go | github.com/rs/cors | v1.11.0 | indirect |
| Go | github.com/rs/zerolog | v1.34.0 | indirect |
| Go | github.com/russross/blackfriday/v2 | v2.1.0 | indirect |
| Go | github.com/ryanuber/go-glob | v1.0.0 | indirect |
| Go | github.com/sagikazarmark/locafero | v0.7.0 | indirect |
| Go | github.com/santhosh-tekuri/jsonschema/v5 | v5.3.1 | indirect |
| Go | github.com/shirou/gopsutil | v3.21.11+incompatible | indirect |
| Go | github.com/shirou/gopsutil/v4 | v4.25.5 | indirect |
| Go | github.com/shopspring/decimal | v1.4.0 | indirect |
| Go | github.com/sirupsen/logrus | v1.9.3 | indirect |
| Go | github.com/smartcontractkit/chainlink-protos/cre/go | v0.0.0-20260210221717-2546aed27ebe | indirect |
| Go | github.com/smartcontractkit/libocr | v0.0.0-20250912173940-f3ab0246e23d | indirect |
| Go | github.com/sourcegraph/conc | v0.3.0 | indirect |
| Go | github.com/spf13/afero | v1.12.0 | indirect |
| Go | github.com/spf13/cast | v1.7.1 | indirect |
| Go | github.com/spf13/cobra | v1.8.1 | indirect |
| Go | github.com/spf13/pflag | v1.0.6 | indirect |
| Go | github.com/spf13/viper | v1.20.0 | indirect |
| Go | github.com/stretchr/objx | v0.5.2 | indirect |
| Go | github.com/subosito/gotenv | v1.6.0 | indirect |
| Go | github.com/supranational/blst | v0.3.16-0.20250831170142-f48500c1fdbe | indirect |
| Go | github.com/syndtr/goleveldb | v1.0.1-0.20220721030215-126854af5e6d | indirect |
| Go | github.com/tidwall/gjson | v1.18.0 | indirect |
| Go | github.com/tklauser/go-sysconf | v0.3.15 | indirect |
| Go | github.com/tklauser/numcpus | v0.10.0 | indirect |
| Go | github.com/urfave/cli/v2 | v2.27.5 | indirect |
| Go | github.com/vektra/mockery/v2 | v2.53.4 | indirect |
| Go | github.com/victoriametrics/fastcache | v1.13.0 | indirect |
| Go | github.com/wk8/go-ordered-map/v2 | v2.1.8 | indirect |
| Go | github.com/xrash/smetrics | v0.0.0-20240521201337-686a1a2994c1 | indirect |
| Go | github.com/yusufpapurcu/wmi | v1.2.4 | indirect |
| Go | go.opentelemetry.io/auto/sdk | v1.2.1 | indirect |
| Go | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.54.0 | indirect |
| Go | go.opentelemetry.io/otel | v1.39.0 | indirect |
| Go | go.opentelemetry.io/otel/metric | v1.39.0 | indirect |
| Go | go.opentelemetry.io/otel/trace | v1.39.0 | indirect |
| Go | go.uber.org/multierr | v1.11.0 | indirect |
| Go | go.uber.org/zap | v1.27.1 | indirect |
| Go | golang.org/x/crypto | v0.47.0 | indirect |
| Go | golang.org/x/exp | v0.0.0-20260112195511-716be5621a96 | indirect |
| Go | golang.org/x/mod | v0.32.0 | indirect |
| Go | golang.org/x/net | v0.49.0 | indirect |
| Go | golang.org/x/sync | v0.19.0 | indirect |
| Go | golang.org/x/sys | v0.40.0 | indirect |
| Go | golang.org/x/term | v0.39.0 | indirect |
| Go | golang.org/x/text | v0.33.0 | indirect |
| Go | golang.org/x/time | v0.14.0 | indirect |
| Go | golang.org/x/tools | v0.41.0 | indirect |
| Go | google.golang.org/genproto/googleapis/rpc | v0.0.0-20251029180050-ab9386a59fda | indirect |
| Go | google.golang.org/grpc | v1.78.0 | indirect |
| Go | google.golang.org/protobuf | v1.36.11 | indirect |
| Go | gopkg.in/natefinch/lumberjack.v2 | v2.2.1 | indirect |
| Go | gopkg.in/yaml.v2 | v2.4.0 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
| Go | sigs.k8s.io/yaml | v1.4.0 | indirect |
Dependency advisories 11
This repository publishes no package the index resolves, so its own dependency graph was assessed — 200 packages, which also include development and test pins that never ship: 11 carry known advisories, of which 1 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.47.0 | indirect | critical | 27 | 0.52.0 |
| google.golang.org/grpc | v1.78.0 | indirect | critical | 3 | 1.82.1 |
| github.com/ethereum/go-ethereum | v1.16.8 | direct | high | 6 | 1.17.0 |
| github.com/buger/jsonparser | v1.1.1 | indirect | high | 2 | 1.1.2 |
| github.com/docker/docker | v28.3.3+incompatible | indirect | high | 10 | 29.3.1 |
| github.com/go-jose/go-jose/v4 | v4.1.3 | indirect | high | 2 | 4.1.4 |
| go.opentelemetry.io/otel | v1.39.0 | indirect | high | 1 | 1.41.0 |
| github.com/pion/dtls/v2 | v2.2.7 | indirect | moderate | 2 | 3.1.1 |
| golang.org/x/net | v0.49.0 | indirect | moderate | 9 | 1.26.3 |
| golang.org/x/sys | v0.40.0 | indirect | unknown | 1 | 0.44.0 |
| golang.org/x/text | v0.33.0 | indirect | unknown | 1 | 0.39.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1192,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 825588,
"Shell": 572,
"Makefile": 950,
"Go Template": 1181
},
"pushed_at": "2026-07-21T16:01:23Z",
"created_at": "2025-05-20T20:49:09Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T16:01:16Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://chain.link/",
"name": "SmartContract",
"type": "Organization",
"login": "smartcontractkit",
"company": null,
"location": null,
"followers": 4155,
"avatar_url": "https://avatars.githubusercontent.com/u/25111032?v=4",
"created_at": "2017-01-13T22:15:46Z",
"is_verified": null,
"public_repos": 381,
"account_age_days": 3476
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.10",
"kind": "patch",
"published_at": "2026-07-21T16:01:23Z"
},
{
"tag": "v0.7.9",
"kind": "patch",
"published_at": "2026-07-17T16:32:25Z"
},
{
"tag": "v0.7.8",
"kind": "patch",
"published_at": "2026-07-07T14:01:38Z"
},
{
"tag": "v0.7.7",
"kind": "patch",
"published_at": "2026-06-29T21:38:06Z"
},
{
"tag": "v0.7.6",
"kind": "patch",
"published_at": "2026-06-22T18:15:21Z"
},
{
"tag": "v0.7.5",
"kind": "patch",
"published_at": "2026-06-11T17:51:13Z"
},
{
"tag": "v0.7.4",
"kind": "patch",
"published_at": "2026-06-01T13:27:18Z"
},
{
"tag": "v0.6.7",
"kind": "patch",
"published_at": "2026-04-24T22:20:27Z"
},
{
"tag": "v0.6.6",
"kind": "patch",
"published_at": "2026-04-20T18:34:54Z"
},
{
"tag": "v0.6.5",
"kind": "patch",
"published_at": "2026-04-20T16:50:07Z"
},
{
"tag": "v0.6.4",
"kind": "patch",
"published_at": "2026-04-14T20:31:45Z"
},
{
"tag": "v0.6.3",
"kind": "patch",
"published_at": "2026-03-23T21:13:58Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2026-03-20T21:48:45Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-03-06T17:44:08Z"
},
{
"tag": "v0.5.4",
"kind": "patch",
"published_at": "2026-03-05T22:34:14Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-03-03T16:41:17Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-03-02T19:46:59Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-02-26T21:00:40Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-02-26T20:08:58Z"
},
{
"tag": "v0.4.14",
"kind": "patch",
"published_at": "2026-02-25T18:16:13Z"
},
{
"tag": "v0.4.13",
"kind": "patch",
"published_at": "2026-02-24T19:23:37Z"
},
{
"tag": "v0.4.12",
"kind": "patch",
"published_at": "2026-02-20T21:01:07Z"
},
{
"tag": "v0.4.10",
"kind": "patch",
"published_at": "2026-02-17T22:58:39Z"
},
{
"tag": "v0.4.9",
"kind": "patch",
"published_at": "2026-02-13T14:01:07Z"
},
{
"tag": "v0.4.8",
"kind": "patch",
"published_at": "2026-02-11T15:31:32Z"
},
{
"tag": "v0.4.7",
"kind": "patch",
"published_at": "2026-02-09T14:18:30Z"
},
{
"tag": "v0.4.6",
"kind": "patch",
"published_at": "2026-02-09T12:59:15Z"
},
{
"tag": "v0.4.5",
"kind": "patch",
"published_at": "2026-02-06T15:46:45Z"
},
{
"tag": "v0.4.4",
"kind": "patch",
"published_at": "2026-02-05T00:01:30Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2026-02-02T18:24:58Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-01-30T17:18:19Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-01-30T16:16:44Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-01-28T19:44:56Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2026-01-22T21:47:03Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2026-01-12T21:31:19Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2025-12-30T14:40:54Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2025-12-18T13:30:15Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2025-12-16T16:46:40Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2025-12-15T22:30:54Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2025-12-10T16:57:13Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2025-11-13T22:59:54Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-10-30T17:54:51Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2025-10-29T17:38:53Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2025-10-22T14:47:14Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2025-10-17T18:45:30Z"
},
{
"tag": "v0.0.8",
"kind": "patch",
"published_at": "2025-10-06T22:35:04Z"
},
{
"tag": "v0.0.7",
"kind": "patch",
"published_at": "2025-09-10T20:47:22Z"
},
{
"tag": "v0.0.6",
"kind": "patch",
"published_at": "2025-08-28T19:38:57Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2025-08-18T18:08:05Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2025-08-13T23:06:03Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2025-08-12T13:07:14Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2025-08-05T15:00:00Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2025-08-04T22:51:23Z"
}
],
"recent_commits": [
{
"oid": "162a8b42a90ec7d7e93603f0eaa466a1da2fe639",
"body": "…llet configuration handling (#177)",
"is_bot": false,
"headline": "Bump crec-api-go dependency to v0.7.10 and update related code for wa…",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-07-21T16:00:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efbe386768f6bc1cdc70cb16974fc137a0e3efb9",
"body": null,
"is_bot": false,
"headline": "update prod ocr signers list (#176)",
"author_name": "jinhoonbang",
"author_login": "jinhoonbang",
"committed_at": "2026-07-17T16:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ee8b71df9694be7d7bf6782dce501298590ddf2",
"body": "* BCM-1732: add support for structured not found error code\n\n* Refactor error handling\n\n* BCM-1732: Fix WrapNotFound fallback to match TDD when code is absent\n\n* BCM-1732: when the 404 body/message is empty, we now append request context (channel/resource IDs)\n\n* BCM-1732: enhance error handling for\n[…]\nandling improvements and new test cases for channel not found scenarios\n\n* BCM-1732: add error handling for nil responses in queries\n\n---------\n\nCo-authored-by: Malec <cmalec@users.noreply.github.com>",
"is_bot": false,
"headline": "BCM-1732: add support for structured not found error code (#168)",
"author_name": "Ilja Pavlovs",
"author_login": "iljapavlovs",
"committed_at": "2026-07-07T14:00:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9cddb02a53fe969d777a2cb19b982c7a1286af79",
"body": "…mmon errors (#171)",
"is_bot": false,
"headline": "Introduce ErrOrganizationNotFound and refactor status handling and co…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-06-26T18:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67089d7542425bc920c24f33277471bcd848dc0e",
"body": null,
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.7.3-rc1 in go.mod and go.sum (#170)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-06-23T18:47:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e3caa58fbdeabae91332118c9a50397e84d6f46",
"body": "…ed replace directive in go.mod (#169)",
"is_bot": false,
"headline": "Update gogo/protobuf dependency from v1.3.3 to v1.3.2 and remove unus…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-06-22T18:13:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f48ca89632dc93db41f043cb736a27422519440",
"body": "…mes (#167)",
"is_bot": false,
"headline": "Implement channel name validation and add test for whitespace-only na…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-06-11T17:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e8962a8be112174f66a6c9eba702827614b9e31",
"body": null,
"is_bot": false,
"headline": "remove confidenceLevel config (#166)",
"author_name": "masha256",
"author_login": "masha256",
"committed_at": "2026-06-03T19:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ed206b34602ce9bcf01ed4f72d7d59f68810275",
"body": null,
"is_bot": false,
"headline": "api bump (#165)",
"author_name": "masha256",
"author_login": "masha256",
"committed_at": "2026-06-03T17:17:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "008702abbf5693ecd13b6b095298b7d672c1226e",
"body": null,
"is_bot": false,
"headline": "api bump (#164)",
"author_name": "masha256",
"author_login": "masha256",
"committed_at": "2026-06-02T21:04:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afa4173d1b04a069a7b9f276f4af605f91e3df1d",
"body": null,
"is_bot": false,
"headline": "api bump (#163)",
"author_name": "masha256",
"author_login": "masha256",
"committed_at": "2026-06-02T18:01:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "106aa9909f0616d84cbbdc1dd4b72bbbab66d834",
"body": "…tests (#162)",
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.7.0-rc11 and enhance event query …",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-06-02T15:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47416d9b0a581e386633a6bf999ca344b54cabb5",
"body": "* Self review\n\n* more self review and clean up",
"is_bot": false,
"headline": "SDK updates hotfixes (#160)",
"author_name": "Oleg Jakushkin",
"author_login": "OlegJakushkin",
"committed_at": "2026-06-01T13:14:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b94e3f2f831041252948d36f90690f0026fa2ef",
"body": "…161)\n\n* confidence level is no longer configurable for watchers\n\n* lint fix\n\n* tweak golangci-lint version\n\n* tweak golangci-lint version\n\n* tweak golangci-lint version\n\n* fix api dep\n\n* update enums\n\n* bump deps to release version",
"is_bot": false,
"headline": "[BCM-3105] confidence level is no longer configurable for watchers (#…",
"author_name": "masha256",
"author_login": "masha256",
"committed_at": "2026-05-28T21:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab1e44bccb24817901122a76fcd4d987b878ade9",
"body": "Added channel-scoped Queries support for asynchronous EVM reads, including query create/get/list/wait flows, raw `CallContract` and ABI-aware `CallContractWithABI` helpers, block-selection utilities, verifiable result decoding, and query terminal error handling.\n\nIntegrated the Queries sub-client in\n[…]\nient, added query.status event verification/decoding support, updated mocks and docs, bumped the generated CREC API client, and added tests plus CI lint coverage to keep the new API support validated.",
"is_bot": false,
"headline": "feat: add Queries API support",
"author_name": "Oleg Jakushkin",
"author_login": "OlegJakushkin",
"committed_at": "2026-05-21T20:02:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "822eb5e5bd4f6337c25098004ddcd59f8614399f",
"body": "* draft implementations\n\n* fixed conflicts\n\n* tweaks\n\n---------\n\nCo-authored-by: Malec <cmalec@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: [BCM-3436] Draft operations (#158)",
"author_name": "Uriel Kelman",
"author_login": "urielkelman",
"committed_at": "2026-05-15T22:24:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e934aa9159cb7dd7749f2053cea136f3e356a911",
"body": null,
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.7.0-rc5 (#159)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-05-15T21:56:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1c85e3143d9289f76a08d6f1ff8d0a04e1852ef",
"body": "…unctionality (#157)\n\n* Update crec-api-go dependency to v0.7.0-rc4 and enhance mock server functionality\n\n- Updated crec-api-go dependency from v0.7.0-rc2 to v0.7.0-rc4.\n- Modified the CreateOperation method in the mock server to properly handle transaction data.\n- Added a stub for FinalizeOrCancelOperation in the mock server to satisfy the ServerInterface.\n- Adjusted the CreateOperation method in the Client to pass a pointer for the Signature field.",
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.7.0-rc4 and enhance mock server f…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-05-14T21:32:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5314269c2b21cded5b9c097825c3c5a86f6610d4",
"body": "…y to v0.7.0-rc2 (#155)\n\n- Changed method names in the API client to use more consistent naming conventions (e.g., Get to List, Post to Create, etc.).\n- Updated the crec-api-go dependency from v0.7.0-rc1 to v0.7.0-rc2.\n- Adjusted related test cases to reflect the updated method names.",
"is_bot": false,
"headline": "Refactor API client method names for consistency and update dependenc…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-05-12T17:56:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dff7121fc0c4f893d9430d5a2493e34c2e59006f",
"body": "…to watcher creation inputs (#154)",
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.7.0-rc1 and add confidence level …",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-05-05T15:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26627885aed5c878b514430f8d3bf224d1faaf17",
"body": null,
"is_bot": false,
"headline": "BCM-3262 StatusChannelId optional to match API (#153)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-05-05T15:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d965c55c1b57c9b866e20d22ff3efbfdc86150d",
"body": "* adds rsa local signer\n\n* pr suggestions\n\n* pr suggestions",
"is_bot": false,
"headline": "bcm-3046: adds rsa local signer (#150)",
"author_name": "Rishabh Rawat",
"author_login": "Rishabh570",
"committed_at": "2026-04-29T12:34:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f20fa6abffc7618b5ac59f53c52d7529c152e8db",
"body": null,
"is_bot": false,
"headline": "Add comment on wasm.br.b64 (#149)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-04-23T16:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "971407812fe56a8f5243c5dffda0fde8d1749a0c",
"body": null,
"is_bot": false,
"headline": "just bytes compare (#148)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-04-23T16:19:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d1e1c546c0240dfea75c4b851270cab1accda7e",
"body": null,
"is_bot": false,
"headline": "Move to prefer more sentinel errors (#147)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-04-23T15:20:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "758df4dfe4891146db0203520e4c23323dde7e6d",
"body": null,
"is_bot": false,
"headline": "Various fixes improvements and added testing (#146)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-04-22T21:03:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32e302f1e76c9c7d54587c03a5a38e2014ce5d0a",
"body": null,
"is_bot": false,
"headline": "docs: add early access notice to README (#141)",
"author_name": "Karim H.",
"author_login": "khadni",
"committed_at": "2026-04-21T14:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a482ff503f77ae32b70957f6c6e57ee1e5eb3451",
"body": "… test (#142)",
"is_bot": false,
"headline": "feat: add confidenceLevel to config template and update corresponding…",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-04-20T18:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "279f78d2846e95c2129f5cc99b854ad4c576cee4",
"body": "BREAKING CHANGE: CreateWithServiceInput.Name is string, not *string.\nValidate trimmed name length ≥4 runes (OpenAPI minLength). Add\nErrWatcherNameTooShort; align CreateWithABI validation.",
"is_bot": false,
"headline": "feat(watchers)!: require name on service watcher create (#140)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-04-20T16:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d37b87463fbd6c5984b7f66bcc45ae8c8c5ae97d",
"body": null,
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.6.3 in go.mod and go.sum (#134)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-04-14T20:27:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e469035a1f30ccfa29e656b56fb98e83366d2916",
"body": null,
"is_bot": false,
"headline": "Update README.md (#129)",
"author_name": "Ana Felisatti",
"author_login": "afelisatti",
"committed_at": "2026-04-07T22:47:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb2d057801b66a7de755942d61b373f433f6708",
"body": null,
"is_bot": false,
"headline": "Adding LICENSE file (#127)",
"author_name": "Sri Kidambi",
"author_login": "kidambisrinivas",
"committed_at": "2026-04-03T19:45:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "494d979f5c09f0c1e3624209ee2d34fce14f9235",
"body": "* Remove workflowID\n\n* bump api",
"is_bot": false,
"headline": "Remove workflowID (#125)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-03-23T21:13:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b9d3aa27dff86d6946cac72de040a58c92db549",
"body": "…ps (#124)\n\n* updated domain for smart accounts in general and deadlines at ops\n\n* consistency check",
"is_bot": false,
"headline": "feat: updated domain for smart accounts in general and deadlines at o…",
"author_name": "Uriel Kelman",
"author_login": "urielkelman",
"committed_at": "2026-03-20T21:41:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cf9cf0fc5d126bd9f9896a368942ae9f08cbf9",
"body": "* dependabot\n\n* gha",
"is_bot": false,
"headline": "dependabot (#123)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-03-17T17:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e592f0a96dafc1a5608480b45e9f6d0b629e20ad",
"body": null,
"is_bot": false,
"headline": "Addition doc updates (#121)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-03-11T21:22:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86cb73c344ba01608d964121b5be490803c338b9",
"body": "* use creTenantID = 1 when calculating workflow owner\n\n* allow setting creTenantID in client options. change WorkflowOwnerFromOrgID to receiver function",
"is_bot": false,
"headline": "use creTenantID = 1 when calculating workflow owner (#120)",
"author_name": "jinhoonbang",
"author_login": "jinhoonbang",
"committed_at": "2026-03-06T17:37:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc01650c38eb0248388e1a551cc98cb9d870c7a9",
"body": "* gh action fix\n\n* Update docs\n\n* Update crec-api-go dependency to v0.5.2, update copyright in LICENSE, and enhance README with related projects",
"is_bot": false,
"headline": "Update Docs (#119)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-03-05T22:33:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fdb96978b1321576a88768bd182f9fe4b393273",
"body": null,
"is_bot": false,
"headline": "gh action fix (#118)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-03-04T22:40:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25793b4520f22c672a367199bd558e54deeef843",
"body": "…ng workflow owner address (#116)",
"is_bot": false,
"headline": "Refactor event verification methods to use organization ID for derivi…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-03-02T19:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a6d09c40e891943dcc2bfa254a91129cebe6162",
"body": null,
"is_bot": false,
"headline": "service-config (#117)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-02-26T21:00:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcdb25250a6bb4f3be562e20e57d73ca16f797c2",
"body": "…tructure to replace contracts with address field (#115)",
"is_bot": false,
"headline": "Update crec-api-go dependency to v0.4.14 and refactor watcher input s…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-02-25T18:15:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e61500e12b0be4ff89cadaed48a73d7ec7111973",
"body": null,
"is_bot": false,
"headline": "Update to default config (#114)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-02-24T19:23:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a15a50096b94de91c0071e41282cbbb11b9129",
"body": null,
"is_bot": false,
"headline": "feat: channel and wallet archiving logic (#113)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-20T20:58:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f7ddb1fd89f378cedc9224012133be73b7c3907",
"body": null,
"is_bot": false,
"headline": "Add extension bundle and crec-api-go v0.4.10 support (#112)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-02-17T22:58:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d566167a252f5f6ab102f157f0ca576d84bb2c0e",
"body": null,
"is_bot": false,
"headline": "chore: adjust test for chain selectors (#111)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-13T13:58:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2327c613cb5b1f53187786cc627551cd06dcdd97",
"body": null,
"is_bot": false,
"headline": "refactor: wallet name handling in tests to remove pointer usage (#110)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-11T15:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfde99d1e5d01d70663f86103d2e98ab3e36823e",
"body": null,
"is_bot": false,
"headline": "dependabot and codeql fixes (#108)",
"author_name": "Rishabh Rawat",
"author_login": "Rishabh570",
"committed_at": "2026-02-10T17:34:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50bbee2e888aba625b395308603d33335e9bee1a",
"body": "…d implementations (#107)",
"is_bot": false,
"headline": "refactor API key handling to use Authorization header across tests an…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-02-09T18:27:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e9983aba0d07874d00bc30c2309272c4960957c",
"body": null,
"is_bot": false,
"headline": "chore: refactor channel status handling in tests (#106)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-09T14:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39d1028f400a8f0f45f9e3534a0e867236172abf",
"body": null,
"is_bot": false,
"headline": "refactor: improve channel status documentation (#105)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-09T12:57:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e83c4f1ebfafa0627ec01ef0cd366b0b0158243",
"body": null,
"is_bot": false,
"headline": "feat: enhance channel status handling in tests (#104)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-06T15:40:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9ba87e59e2a2e23a253b6e5ce5948aa4d6fd12a",
"body": "…d enhance related tests (#103)",
"is_bot": false,
"headline": "refactor: Update watcher creation to use service instead of domain an…",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-05T00:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce218bc87a2ae6aa0b2e8cba2063a5a012ce3ecd",
"body": "* backup commit, on going changes to have base64 event decoding\n\n* decode verifiable events & sdk upgrades for types.\n\n* crec api go correct version\n\n* some more fixes\n\n* tests adapted to work with new enums and models\n\n* removed internal operation status type",
"is_bot": false,
"headline": "feat: Decode verifiable events & upgrade sdk to use typed status. (#102)",
"author_name": "Uriel Kelman",
"author_login": "urielkelman",
"committed_at": "2026-02-04T18:27:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c053d7ba7942792c6dfc72e1aa192a2009ce24a",
"body": "…#98)",
"is_bot": false,
"headline": "feat: Implement networks client for listing available CREC networks (…",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-02-03T12:15:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6915f7061b01d4ec3faa3da3866f1c61b959f111",
"body": null,
"is_bot": false,
"headline": "Add VerifyOCRSignatures method (#100)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-02-02T18:20:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9be20e5da9d8695a7dd442033de8735ba20d1f76",
"body": null,
"is_bot": false,
"headline": "fix (#99)",
"author_name": "Uriel Kelman",
"author_login": "urielkelman",
"committed_at": "2026-01-30T17:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdc29485a4d8d9b75ae24a7498af3220a2bcd12a",
"body": null,
"is_bot": false,
"headline": "Update dependencies and enhance wallet filtering functionality (#95)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-29T17:01:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ebffcaf99668928dc71d66c19d1c523fda9ae3c",
"body": "* event schema update\n\n* fix test to match schema\n\n---------\n\nCo-authored-by: masha256 <mike.machado@smartcontract.com>",
"is_bot": false,
"headline": "Event schema cleanup (#97)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-01-28T19:36:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9ff6552543409d2ed4538a669183d91cb889396",
"body": null,
"is_bot": false,
"headline": "CreatedAt field to wallet creation in MockServer (#94)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-22T20:05:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f3d636c81eb290fe70b40da4805b62c661e823a",
"body": "…id (#93)",
"is_bot": false,
"headline": "Update SDK to verify events using workflow owner instead of workflow …",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-01-22T19:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a8b4a3ab1e41fe035f0990ebcc01ad959e8ce9a",
"body": "…#92)",
"is_bot": false,
"headline": "Modify watcher data structure in tests to include additional fields (…",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-22T19:22:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c09c8d03dea94235651fc9550553753c7d1f240",
"body": null,
"is_bot": false,
"headline": "Enhance event search tests with operation ID validation (#91)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-20T20:20:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2d79d16f8832dab59c1d6ce10473c3a351b4943",
"body": null,
"is_bot": false,
"headline": "BCM-1790: add StatusChannelId to wallet creation input (#90)",
"author_name": "Ilja Pavlovs",
"author_login": "iljapavlovs",
"committed_at": "2026-01-20T15:26:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00df1f1347daf4d62a99f3cbf652bb9328b79abb",
"body": null,
"is_bot": false,
"headline": "feat: implement wallet deletion functionality (#89)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-15T18:06:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b514f07b6eb4fabbe57acb848a4977962e672701",
"body": null,
"is_bot": false,
"headline": "feat: add channel update functionality (#88)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-14T17:47:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff4dd1e358f2a3cefc23b2ccb44c8375ff88cbdd",
"body": null,
"is_bot": false,
"headline": "feat: description field added into channels (#87)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-13T16:13:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a55578a0d74e680d687b920c7dbf0fc5fa7a4cdd",
"body": "- Add event verification options and default configuration\n- Introduced `WithoutEventVerification` option to disable event verification.\n- Added default event verification settings using production DON public keys.\n- Updated README to reflect new event verification features and default configuration\n[…]\ned tests to cover new event verification scenarios and ensure correct behavior.\n- Update event verification configuration and documentation\n- Update README to correct event verification keys reference",
"is_bot": false,
"headline": "Add event verification options and default configuration (#85)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2026-01-12T21:24:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "95ee904026100e0fc98ea411e24e319ffbd56087",
"body": null,
"is_bot": false,
"headline": "feat: wallets filters added (#86)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-09T16:22:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea78c2d874389359618efacbe6498afb35a07ad2",
"body": "* match crec-api-go v0.3.8 changes\n\n* hash event without domain when nil",
"is_bot": false,
"headline": "match crec-api-go v0.3.8 changes (#84)",
"author_name": "dkneisly",
"author_login": "dkneisly",
"committed_at": "2026-01-05T23:35:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70c6c624d330d7b45ae4a5fb3e00e3c634c59a23",
"body": null,
"is_bot": false,
"headline": "feat: verify operation status events function added (#82)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2026-01-05T16:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f938b509594fbd44620420fa9525a25bb64bedd",
"body": "* adds wallets client\n\n* update doc and add validation in create wallet\n\n* update the wallet type validation in createWallet\n\n* updates",
"is_bot": false,
"headline": "bcm-1544: adds wallets client (#81)",
"author_name": "Rishabh Rawat",
"author_login": "Rishabh570",
"committed_at": "2025-12-30T14:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b9e55243fb5fbf64fa71eff5d328c85cddfc2dd",
"body": "* decouple opereation hashing and signing from API client\n\n* updates PR\n\n* update comments and doc",
"is_bot": false,
"headline": "bcm-1510: decouple operation hashing and signing from API client (#77)",
"author_name": "Rishabh Rawat",
"author_login": "Rishabh570",
"committed_at": "2025-12-30T07:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9aeca064324c4f3386eac702044b4584600559b",
"body": null,
"is_bot": false,
"headline": "BCM-1553: update crec-api-go version (#80)",
"author_name": "Ilja Pavlovs",
"author_login": "iljapavlovs",
"committed_at": "2025-12-18T13:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83708f49c9e372b2b5df014279f9f04497b71da8",
"body": null,
"is_bot": false,
"headline": "chore: events docs updated (#78)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2025-12-18T13:10:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9168271291edb7e992f5f18629c358b5e4c0922b",
"body": "This reverts commit b179a68125f5edfcef7716d9a31f52997deedb84.",
"is_bot": false,
"headline": "Revert \"Move common workflow code to SDK (#75)\" (#79)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-12-16T16:38:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b179a68125f5edfcef7716d9a31f52997deedb84",
"body": "* Move common workflow code from courier to sdk\n\n* fix",
"is_bot": false,
"headline": "Move common workflow code to SDK (#75)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-12-15T22:30:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f99b42eb56f52c4b10f3369e250143ea338980d7",
"body": null,
"is_bot": false,
"headline": "Move parsing from DTA to sdk (#74)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-12-15T20:20:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b92c1f5ce74a77a55120318071981ad4322bc43",
"body": null,
"is_bot": false,
"headline": "Feat [BCM 1436] offset optional events endpoint (#72)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2025-12-15T20:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a96ea0de2e935b6744eb165abea650c95155015d",
"body": null,
"is_bot": false,
"headline": "feat [BCM 1384]: SearchEvents method added (#70)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2025-12-15T20:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c4c63f2fc698498660faea709533eccd95c7bd9",
"body": null,
"is_bot": false,
"headline": "bumps crec-api-go version to support strict server (#73)",
"author_name": "Rishabh Rawat",
"author_login": "Rishabh570",
"committed_at": "2025-12-10T06:11:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0aaf99bb402a8546ab140b827b089ea66b19e4ae",
"body": "…k's signer module (#71)\n\n* Add Fireblocks signer implementation and documentation\n* Enhance signer functionality with options for custom clients and base URLs\n- Updated Privy signer to support functional options for custom HTTP clients and base URLs.\n- Refactored NewSigner and NewSignerFromEnv to u\n[…]\n error handling in various signer methods.\n- Updated Fireblocks signer tests to validate timeout error messages more robustly.\n\n* Add TypedDataSigner interface and EIP-712 support in Fireblocks signer",
"is_bot": false,
"headline": "BCM-1425 Create a Fireblocks EIP-712 signer implementation in crec-sd…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-12-09T19:40:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba0180ad7e7a4c614dcc36d3475261ad29573432",
"body": "* Remove services that are moving to their own extension repos\n* restructure packages & logging update\n1. crec.go at root is now the main client\n2. moved channels out of services to the top level\n3. moved watchers out of services to the top level\n4. moved operations out of services to transact\n5. create godocs for all packages\n6. update logging to use go standard library slog\n\n* Implement NewAPIClient for creating sub-clients without full Client instantiation",
"is_bot": false,
"headline": "BCM-1412 Split crec-sdk between clients and extensions Part 2 (#69)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-12-02T19:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9804f4bc511bcc5525e9526dbd2961a867714bb",
"body": null,
"is_bot": false,
"headline": "feat: workflowId verification added (#68)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2025-12-01T20:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b352e96a0924e8490b39cf04cf8009a106fb89d",
"body": "* Remove services that are moving to to their own extension repos\n\n* remove vendor\n\n* remove accounts",
"is_bot": false,
"headline": "Remove services that are moving to to their own extension repos (#67)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-11-26T16:16:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c99c51014ca79718e2d3be8d90f4e7e06004f122",
"body": "…(#65)\n\n* BCM-1365: Modify channel events API to include querying context info\n\n* BCM-1365: update crec-api-go version",
"is_bot": false,
"headline": "BCM-1365: Modify channel events API to include querying context info …",
"author_name": "Ilja Pavlovs",
"author_login": "iljapavlovs",
"committed_at": "2025-11-25T19:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ace96875e6e2aea09bef3586a3cd686824d6ca9",
"body": null,
"is_bot": false,
"headline": "Update crec-api-go to avoid polymorphic type for CreateWallet (#66)",
"author_name": "Sri Kidambi",
"author_login": "kidambisrinivas",
"committed_at": "2025-11-24T19:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4587eebe8081051fe0bfed2e40fc8333694bddc5",
"body": "* BCM-1289: migrate Events to new CREC API",
"is_bot": false,
"headline": "Chore/bcm 1289 - Migrating Events to new CREC API (#61)",
"author_name": "Ilja Pavlovs",
"author_login": "iljapavlovs",
"committed_at": "2025-11-21T14:16:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72a64174291348f3c42f6e3b6ef04422fee45487",
"body": "* bumps crec-api-go version to make chainSelector a string\n\n* fix tests",
"is_bot": false,
"headline": "bumps crec-api-go version to make chainSelector a string (#64)",
"author_name": "Rishabh Rawat",
"author_login": "Rishabh570",
"committed_at": "2025-11-20T16:29:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7830d86396a693738fd30add99082bd41859f85a",
"body": null,
"is_bot": false,
"headline": "Updating crec-api-go (#63)",
"author_name": "Sri Kidambi",
"author_login": "kidambisrinivas",
"committed_at": "2025-11-19T17:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a1d9afdeb6b4791212bb25a320eb23dfbd3fdad",
"body": null,
"is_bot": false,
"headline": "Update PostWallets endpoint from crec-api-go and fix mock tests (#62)",
"author_name": "Sri Kidambi",
"author_login": "kidambisrinivas",
"committed_at": "2025-11-19T15:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edae65c5072e0eb1c82c8d92f72c4f0af1f20160",
"body": "* Update APIs to use chainSelector instead of chainId and chain-selectors pkg to resolve chainSelector\n\n* Fix unit tests\n\n* Resolve chainId in HashOperation to expose uniform chainSelector APIs to external libraries\n\n* Update comments\n\n* Addressed PR comments",
"is_bot": false,
"headline": "Update APIs to use chainSelector instead of chainId (#60)",
"author_name": "Sri Kidambi",
"author_login": "kidambisrinivas",
"committed_at": "2025-11-13T22:57:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfb066dcc57c6c308679892e7cb8fd8d2ebbdc8d",
"body": "We need to start using CRE Connect SDK as the name to avoid confusion going forward.",
"is_bot": false,
"headline": "Update README.md with CRE Connect SDK vs CRELib (#55)",
"author_name": "rrinaudo",
"author_login": "rrinaudo",
"committed_at": "2025-11-13T15:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d055a4175a434bff1da56d3c052cdb5d60fb1be",
"body": null,
"is_bot": false,
"headline": "feat: channels added (#53)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2025-11-13T13:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a83e949593dd7ae3d6374a7126363769cf7e2164",
"body": "…y, simplifying event decoding. (#57)",
"is_bot": false,
"headline": "Refactor `Decode` function to accept a VerifiableEvent string directl…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-10-30T17:54:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af8c732ca9867dd85f8f794d829a074bee8004a6",
"body": "…rs` instead of nested `Metadata.WorkflowEvent.Attributes`. Simplify field mappings and improve consistency in event processing. (#56)",
"is_bot": false,
"headline": "Update `decode.go` parameter handling to directly use `Event.Paramete…",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-10-29T17:37:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b020b4d6429580e8b2b7d5b8ea272042bf1d444",
"body": "* refactored transact client to parametrize chainId\n\n* avoid overflow possibility",
"is_bot": false,
"headline": "feat: [BCM-1098] Refactored transact client to parametrize chainId (#52)",
"author_name": "Uriel Kelman",
"author_login": "urielkelman",
"committed_at": "2025-10-21T13:00:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b602b159738ff6dc093319ee01ac0251d4bcdc",
"body": "* renaming\n\n* CREc replaced with CREC\n\n* moved so github ci can run with correct remote",
"is_bot": false,
"headline": "feat: [BCM-1009] renaming cvn -> crec (#50)",
"author_name": "Uriel Kelman",
"author_login": "urielkelman",
"committed_at": "2025-10-17T18:42:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6ffd75b7dfcc9224fc89e666eb9d35d32e1bc45",
"body": null,
"is_bot": false,
"headline": "feat: Edit account endpoint added (#51)",
"author_name": "Lucas Fleischer",
"author_login": "lucasfleischer7",
"committed_at": "2025-10-15T16:02:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15eed054de9aa447cacf4473abd17c8d77050dd5",
"body": null,
"is_bot": false,
"headline": "Add more sci notation (#47)",
"author_name": "Chris Malec",
"author_login": "cmalec",
"committed_at": "2025-10-15T15:47:07Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 53,
"commits_last_year": 130,
"latest_release_at": "2026-07-21T16:01:23Z",
"latest_release_tag": "v0.7.10",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 47,
"days_since_latest_release": 0,
"mean_days_between_releases": 10.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/smartcontractkit/crec-sdk",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/smartcontractkit/crec-sdk",
"is_deprecated": false,
"latest_version": "v0.7.10",
"repository_url": "https://github.com/smartcontractkit/crec-sdk",
"versions_count": 64,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-21T16:00:48Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 1,
"stars": 0,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2026-07-12",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 14
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"Taskfile.yaml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 80678,
"source_files_sampled": 73,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.47.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-jppx-rxg9-jmrx",
"GHSA-q4h4-gmj2-qvw2",
"GHSA-qpw4-5x99-6vjp",
"GHSA-rm3j-f69w-wqmq"
],
"fixed_version": "0.52.0",
"advisory_count": 27,
"oldest_advisory_days": 61
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.78.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GHSA-p77j-4mvh-x3m3",
"GO-2026-4762"
],
"fixed_version": "1.82.1",
"advisory_count": 3,
"oldest_advisory_days": 125
},
{
"name": "github.com/ethereum/go-ethereum",
"direct": true,
"version": "v1.16.8",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2gjw-fg97-vg3r",
"GHSA-689v-6xwf-5jf3",
"GHSA-m6j8-rg6r-7mv8",
"GO-2026-4507",
"GO-2026-4508",
"GO-2026-4511"
],
"fixed_version": "1.17.0",
"advisory_count": 6,
"oldest_advisory_days": 153
},
{
"name": "github.com/buger/jsonparser",
"direct": false,
"version": "v1.1.1",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-6g7g-w4f8-9c9x",
"GO-2026-4514"
],
"fixed_version": "1.1.2",
"advisory_count": 2,
"oldest_advisory_days": 127
},
{
"name": "github.com/docker/docker",
"direct": false,
"version": "v28.3.3+incompatible",
"severity": "high",
"ecosystem": "go",
"cvss_score": 8.8,
"advisory_ids": [
"GHSA-pxq6-2prw-chj9",
"GHSA-rg2x-37c3-w2rh",
"GHSA-vp62-88p7-qqf5",
"GHSA-x744-4wpc-v9h2",
"GHSA-x86f-5xw2-fm2r",
"GO-2026-4883",
"GO-2026-4887",
"GO-2026-5617",
"GO-2026-5668",
"GO-2026-5746"
],
"fixed_version": "29.3.1",
"advisory_count": 10,
"oldest_advisory_days": 116
},
{
"name": "github.com/go-jose/go-jose/v4",
"direct": false,
"version": "v4.1.3",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-78h2-9frx-2jm8",
"GO-2026-4945"
],
"fixed_version": "4.1.4",
"advisory_count": 2,
"oldest_advisory_days": 110
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.39.0",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mh2q-q3fh-2475"
],
"fixed_version": "1.41.0",
"advisory_count": 1,
"oldest_advisory_days": 105
},
{
"name": "github.com/pion/dtls/v2",
"direct": false,
"version": "v2.2.7",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-9f3f-wv7r-qc8r",
"GO-2026-4479"
],
"fixed_version": "3.1.1",
"advisory_count": 2,
"oldest_advisory_days": 160
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.49.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GO-2026-4918",
"GO-2026-5025",
"GO-2026-5026",
"GO-2026-5027",
"GO-2026-5028",
"GO-2026-5029",
"GO-2026-5030",
"GO-2026-5942"
],
"fixed_version": "1.26.3",
"advisory_count": 9,
"oldest_advisory_days": 75
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.40.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 60
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.33.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 7
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 5,
"unknown": 2,
"critical": 2,
"moderate": 2
},
"advisory_count": 64,
"affected_count": 11,
"assessed_count": 200,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/aws/aws-sdk-go-v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.38.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.31.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/kms",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "github.com/ethereum/go-ethereum",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.16.8"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/hashicorp/vault/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.20.0"
},
{
"name": "github.com/oapi-codegen/runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.2"
},
{
"name": "github.com/smartcontractkit/chain-selectors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.89"
},
{
"name": "github.com/smartcontractkit/chainlink-common",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.10.0"
},
{
"name": "github.com/smartcontractkit/crec-api-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.10"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/testcontainers/testcontainers-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.38.0"
},
{
"name": "github.com/testcontainers/testcontainers-go/modules/vault",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.38.0"
},
{
"name": "github.com/golang-jwt/jwt/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.5.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/aws/aws-sdk-go-v2",
"direct": true,
"version": "v1.38.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"direct": true,
"version": "v1.31.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/kms",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "github.com/ethereum/go-ethereum",
"direct": true,
"version": "v1.16.8",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt/v4",
"direct": true,
"version": "v4.5.2",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/vault/api",
"direct": true,
"version": "v1.20.0",
"ecosystem": "go"
},
{
"name": "github.com/oapi-codegen/runtime",
"direct": true,
"version": "v1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/smartcontractkit/chain-selectors",
"direct": true,
"version": "v1.0.89",
"ecosystem": "go"
},
{
"name": "github.com/smartcontractkit/chainlink-common",
"direct": true,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/smartcontractkit/crec-api-go",
"direct": true,
"version": "v0.7.10",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/testcontainers/testcontainers-go",
"direct": true,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "github.com/testcontainers/testcontainers-go/modules/vault",
"direct": true,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/apapsch/go-jsonmerge/v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"direct": false,
"version": "v1.18.4",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
"direct": false,
"version": "v1.18.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
"direct": false,
"version": "v2.7.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/ini",
"direct": false,
"version": "v1.8.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
"direct": false,
"version": "v1.13.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
"direct": false,
"version": "v1.13.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sso",
"direct": false,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
"direct": false,
"version": "v1.33.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sts",
"direct": false,
"version": "v1.37.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/smithy-go",
"direct": false,
"version": "v1.22.5",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-ansiterm",
"direct": false,
"version": "v0.0.0-20210617225240-d185dfc1b5a1",
"ecosystem": "go"
},
{
"name": "github.com/bahlo/generic-list-go",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/bits-and-blooms/bitset",
"direct": false,
"version": "v1.20.0",
"ecosystem": "go"
},
{
"name": "github.com/buger/jsonparser",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/chigopher/pathlib",
"direct": false,
"version": "v0.19.1",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/errors",
"direct": false,
"version": "v1.11.3",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/fifo",
"direct": false,
"version": "v0.0.0-20240606204812-0bbfbd93a7ce",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/logtags",
"direct": false,
"version": "v0.0.0-20230118201751-21c54148d20b",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/pebble",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/redact",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/tokenbucket",
"direct": false,
"version": "v0.0.0-20230807174530-cc333fc44b06",
"ecosystem": "go"
},
{
"name": "github.com/consensys/gnark-crypto",
"direct": false,
"version": "v0.18.1",
"ecosystem": "go"
},
{
"name": "github.com/containerd/errdefs",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/errdefs/pkg",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/log",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/platforms",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/cpuguy83/dockercfg",
"direct": false,
"version": "v0.3.2",
"ecosystem": "go"
},
{
"name": "github.com/cpuguy83/go-md2man/v2",
"direct": false,
"version": "v2.0.5",
"ecosystem": "go"
},
{
"name": "github.com/crate-crypto/go-eth-kzg",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/crate-crypto/go-ipa",
"direct": false,
"version": "v0.0.0-20240724233137-53bbb0ceb27a",
"ecosystem": "go"
},
{
"name": "github.com/datadog/zstd",
"direct": false,
"version": "v1.5.2",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/dchest/siphash",
"direct": false,
"version": "v1.2.3",
"ecosystem": "go"
},
{
"name": "github.com/deckarep/golang-set/v2",
"direct": false,
"version": "v2.6.0",
"ecosystem": "go"
},
{
"name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/distribution/reference",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/docker",
"direct": false,
"version": "v28.3.3+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-connections",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-units",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/dominikbraun/graph",
"direct": false,
"version": "v0.23.0",
"ecosystem": "go"
},
{
"name": "github.com/ebitengine/purego",
"direct": false,
"version": "v0.8.4",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/dot",
"direct": false,
"version": "v1.6.2",
"ecosystem": "go"
},
{
"name": "github.com/ethereum/c-kzg-4844/v2",
"direct": false,
"version": "v2.1.5",
"ecosystem": "go"
},
{
"name": "github.com/ethereum/go-bigmodexpfix",
"direct": false,
"version": "v0.0.0-20250911101455-f9e208c548ab",
"ecosystem": "go"
},
{
"name": "github.com/ethereum/go-verkle",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/ferranbt/fastssz",
"direct": false,
"version": "v0.1.4",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.8.0",
"ecosystem": "go"
},
{
"name": "github.com/getsentry/sentry-go",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-jose/go-jose/v4",
"direct": false,
"version": "v4.1.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-ole/go-ole",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-test/deep",
"direct": false,
"version": "v1.0.8",
"ecosystem": "go"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/gofrs/flock",
"direct": false,
"version": "v0.12.1",
"ecosystem": "go"
},
{
"name": "github.com/gogo/protobuf",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": false,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/graph-gophers/graphql-go",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.27.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/errwrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-bexpr",
"direct": false,
"version": "v0.1.10",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-cleanhttp",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-multierror",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"direct": false,
"version": "v0.7.7",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-rootcerts",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-secure-stdlib/parseutil",
"direct": false,
"version": "v0.1.6",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-secure-stdlib/strutil",
"direct": false,
"version": "v0.1.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-sockaddr",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hcl",
"direct": false,
"version": "v1.0.1-vault-7",
"ecosystem": "go"
},
{
"name": "github.com/holiman/billy",
"direct": false,
"version": "v0.0.0-20250707135307-f2f9b9aae7db",
"ecosystem": "go"
},
{
"name": "github.com/holiman/bloomfilter/v2",
"direct": false,
"version": "v2.0.3",
"ecosystem": "go"
},
{
"name": "github.com/holiman/uint256",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/huandu/xstrings",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/huin/goupnp",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/iancoleman/strcase",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/invopop/jsonschema",
"direct": false,
"version": "v0.13.0",
"ecosystem": "go"
},
{
"name": "github.com/jackpal/go-nat-pmp",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/jinzhu/copier",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.2.10",
"ecosystem": "go"
},
{
"name": "github.com/kr/pretty",
"direct": false,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "github.com/kr/text",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/lufia/plan9stats",
"direct": false,
"version": "v0.0.0-20211012122336-39d0f177ccd0",
"ecosystem": "go"
},
{
"name": "github.com/magiconair/properties",
"direct": false,
"version": "v1.8.10",
"ecosystem": "go"
},
{
"name": "github.com/mailru/easyjson",
"direct": false,
"version": "v0.9.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/minio/sha256-simd",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-homedir",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/pointerstructure",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/docker-image-spec",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/go-archive",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/patternmatcher",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/sequential",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/user",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/userns",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/term",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/morikuni/aec",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/mr-tron/base58",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/olekukonko/tablewriter",
"direct": false,
"version": "v0.0.5",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/go-digest",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/image-spec",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.4",
"ecosystem": "go"
},
{
"name": "github.com/pion/dtls/v2",
"direct": false,
"version": "v2.2.7",
"ecosystem": "go"
},
{
"name": "github.com/pion/logging",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/pion/stun/v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/pion/transport/v2",
"direct": false,
"version": "v2.2.1",
"ecosystem": "go"
},
{
"name": "github.com/pion/transport/v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
"ecosystem": "go"
},
{
"name": "github.com/power-devops/perfstat",
"direct": false,
"version": "v0.0.0-20210106213030-5aafc221ea8c",
"ecosystem": "go"
},
{
"name": "github.com/projectzkm/ziren/crates/go-runtime/zkvm_runtime",
"direct": false,
"version": "v0.0.0-20251001021608-1fe7b43fc4d6",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": false,
"version": "v1.22.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.65.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.16.1",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.4.7",
"ecosystem": "go"
},
{
"name": "github.com/rogpeppe/go-internal",
"direct": false,
"version": "v1.14.1",
"ecosystem": "go"
},
{
"name": "github.com/rs/cors",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/rs/zerolog",
"direct": false,
"version": "v1.34.0",
"ecosystem": "go"
},
{
"name": "github.com/russross/blackfriday/v2",
"direct": false,
"version": "v2.1.0",
"ecosystem": "go"
},
{
"name": "github.com/ryanuber/go-glob",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/sagikazarmark/locafero",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"direct": false,
"version": "v5.3.1",
"ecosystem": "go"
},
{
"name": "github.com/shirou/gopsutil",
"direct": false,
"version": "v3.21.11+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/shirou/gopsutil/v4",
"direct": false,
"version": "v4.25.5",
"ecosystem": "go"
},
{
"name": "github.com/shopspring/decimal",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/sirupsen/logrus",
"direct": false,
"version": "v1.9.3",
"ecosystem": "go"
},
{
"name": "github.com/smartcontractkit/chainlink-protos/cre/go",
"direct": false,
"version": "v0.0.0-20260210221717-2546aed27ebe",
"ecosystem": "go"
},
{
"name": "github.com/smartcontractkit/libocr",
"direct": false,
"version": "v0.0.0-20250912173940-f3ab0246e23d",
"ecosystem": "go"
},
{
"name": "github.com/sourcegraph/conc",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": false,
"version": "v1.12.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "v1.7.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.8.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.6",
"ecosystem": "go"
},
{
"name": "github.com/spf13/viper",
"direct": false,
"version": "v1.20.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/objx",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/subosito/gotenv",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/supranational/blst",
"direct": false,
"version": "v0.3.16-0.20250831170142-f48500c1fdbe",
"ecosystem": "go"
},
{
"name": "github.com/syndtr/goleveldb",
"direct": false,
"version": "v1.0.1-0.20220721030215-126854af5e6d",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/gjson",
"direct": false,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/tklauser/go-sysconf",
"direct": false,
"version": "v0.3.15",
"ecosystem": "go"
},
{
"name": "github.com/tklauser/numcpus",
"direct": false,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/urfave/cli/v2",
"direct": false,
"version": "v2.27.5",
"ecosystem": "go"
},
{
"name": "github.com/vektra/mockery/v2",
"direct": false,
"version": "v2.53.4",
"ecosystem": "go"
},
{
"name": "github.com/victoriametrics/fastcache",
"direct": false,
"version": "v1.13.0",
"ecosystem": "go"
},
{
"name": "github.com/wk8/go-ordered-map/v2",
"direct": false,
"version": "v2.1.8",
"ecosystem": "go"
},
{
"name": "github.com/xrash/smetrics",
"direct": false,
"version": "v0.0.0-20240521201337-686a1a2994c1",
"ecosystem": "go"
},
{
"name": "github.com/yusufpapurcu/wmi",
"direct": false,
"version": "v1.2.4",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.39.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.39.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.39.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": false,
"version": "v1.27.1",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20260112195511-716be5621a96",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.32.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.49.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.19.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.39.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.33.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.14.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.41.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20251029180050-ab9386a59fda",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.78.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/natefinch/lumberjack.v2",
"direct": false,
"version": "v2.2.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 200,
"direct_count": 14,
"indirect_count": 186
}
},
"maintainership": {
"issues": {
"open_prs": 14,
"merged_prs": 144,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 19
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "masha256",
"commits": 41,
"avatar_url": "https://avatars.githubusercontent.com/u/1002843?v=4"
},
{
"type": "User",
"login": "cmalec",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/9370134?v=4"
},
{
"type": "User",
"login": "lucasfleischer7",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/202883171?v=4"
},
{
"type": "User",
"login": "urielkelman",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/29047378?v=4"
},
{
"type": "User",
"login": "Rishabh570",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/25483260?v=4"
},
{
"type": "User",
"login": "kidambisrinivas",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/1702865?v=4"
},
{
"type": "User",
"login": "iljapavlovs",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/5300706?v=4"
},
{
"type": "User",
"login": "mounzer-masri",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/9269876?v=4"
},
{
"type": "User",
"login": "dkneisly",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/11035685?v=4"
},
{
"type": "User",
"login": "jinhoonbang",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/15108858?v=4"
}
],
"contributors_sampled": 14,
"top_contributor_share": 0.261
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"go-unit-test.yaml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 4,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "38 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "162a8b42a90ec7d7e93603f0eaa466a1da2fe639",
"ran_at": "2026-07-22T06:28:21Z",
"aggregate_score": 7.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T16:03:08Z",
"oldest_open_prs": [
{
"number": 128,
"created_at": "2026-04-07T20:40:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 130,
"created_at": "2026-04-08T18:28:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 131,
"created_at": "2026-04-08T18:29:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 132,
"created_at": "2026-04-08T18:31:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 133,
"created_at": "2026-04-08T18:31:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 135,
"created_at": "2026-04-15T18:27:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 143,
"created_at": "2026-04-20T18:32:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 144,
"created_at": "2026-04-20T18:32:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 145,
"created_at": "2026-04-20T18:32:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 151,
"created_at": "2026-04-24T20:42:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 172,
"created_at": "2026-07-01T18:27:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 173,
"created_at": "2026-07-01T18:27:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 174,
"created_at": "2026-07-03T13:18:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 175,
"created_at": "2026-07-15T13:00:26Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-21T16:00:49Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/smartcontractkit/crec-sdk",
"host": "github.com",
"name": "crec-sdk",
"owner": "smartcontractkit"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"security": 70,
"vitality": 98,
"community": 22,
"governance": 82,
"engineering": 53
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 98,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"commits_last_year": 130,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 47
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "47/52 weeks with commits",
"points": 32.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 47
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "130 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 130
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 53,
"latest_release_tag": "v0.7.10",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 10.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "53 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 53
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~10.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 10.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 22,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 3,
"inputs": {
"forks": 1,
"stars": 0,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 82,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 14,
"top_contributor_share": 0.261
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 26% of commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 26
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "14 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 14
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"merged_prs": 144,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 19
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "144/163 decided PRs merged",
"points": 33.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 144,
"decided": 163
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 4155,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "smartcontractkit",
"public_repos": 381,
"account_age_days": 3476
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4,155 followers of smartcontractkit",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4155,
"login": "smartcontractkit"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "381 public repos, account ~9 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 381
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/smartcontractkit/crec-sdk"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "64 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 64
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 53,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 70,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 7.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "38 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 200 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 200
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 64,
"inputs": {
"source": "osv",
"advisories": 64,
"affected_packages": 11,
"assessed_packages": 200,
"unassessed_packages": 0,
"affected_by_severity": "critical 2, high 5, moderate 2, unknown 2",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: github.com/ethereum/go-ethereum v1.16.8 (high 7.5)",
"points": 14,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "github.com/ethereum/go-ethereum v1.16.8 (high 7.5)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 153 days ago",
"points": 33.7,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 153
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 200,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 67,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.88,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "88 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 88,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"Taskfile.yaml"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, Taskfile.yaml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, Taskfile.yaml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "dependency automation configured, none observed in the sampled commits",
"points": 5,
"status": "partial",
"details": [
{
"code": "dependency_bot_config_only",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 80678,
"source_files_sampled": 73,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/73 source files over 60KB",
"points": 54.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 73,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T06:28:43.950010Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/smartcontractkit/crec-sdk.svg",
"full_name": "smartcontractkit/crec-sdk",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.