tensorleap / helm-charts

Full resolved dependency set from the GitHub dependency graph: 22 direct and 173 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 195 packages, which also include development and test pins that never ship: 13 carry known advisories, of which 4 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 43272,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 282187,
        "HCL": 404,
        "Shell": 33593,
        "Python": 8280,
        "Makefile": 10051,
        "Go Template": 3176
      },
      "pushed_at": "2026-07-28T14:33:58Z",
      "created_at": "2022-06-06T15:23:40Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T14:33:49Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "master",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "tensorleap.ai",
      "name": "TensorLeap",
      "type": "Organization",
      "login": "tensorleap",
      "company": null,
      "location": "Tel Aviv, Israel",
      "followers": 4,
      "avatar_url": "https://avatars.githubusercontent.com/u/62375455?v=4",
      "created_at": "2020-03-19T08:10:30Z",
      "is_verified": null,
      "public_repos": 26,
      "account_age_days": 2322
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "tensorleap-1.6.57",
          "kind": "other",
          "published_at": "2026-07-28T14:10:58Z"
        },
        {
          "tag": "tensorleap-1.6.57-rc.0",
          "kind": "other",
          "published_at": "2026-07-28T14:04:19Z"
        },
        {
          "tag": "manifest-1.6.57",
          "kind": "other",
          "published_at": "2026-07-28T14:11:30Z"
        },
        {
          "tag": "1.6.57-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-28T14:04:54Z"
        },
        {
          "tag": "tensorleap-1.6.56-rc.0",
          "kind": "other",
          "published_at": "2026-07-28T12:45:14Z"
        },
        {
          "tag": "1.6.56-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-28T12:45:45Z"
        },
        {
          "tag": "tensorleap-1.6.55",
          "kind": "other",
          "published_at": "2026-07-27T18:28:36Z"
        },
        {
          "tag": "tensorleap-1.6.55-rc.1",
          "kind": "other",
          "published_at": "2026-07-27T18:25:40Z"
        },
        {
          "tag": "tensorleap-1.6.55-rc.0",
          "kind": "other",
          "published_at": "2026-07-27T18:20:22Z"
        },
        {
          "tag": "manifest-1.6.55",
          "kind": "other",
          "published_at": "2026-07-27T18:29:06Z"
        },
        {
          "tag": "1.6.55-rc.1",
          "kind": "prerelease",
          "published_at": "2026-07-27T18:26:13Z"
        },
        {
          "tag": "1.6.55-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-27T18:20:58Z"
        },
        {
          "tag": "tensorleap-1.6.54",
          "kind": "other",
          "published_at": "2026-07-26T20:07:30Z"
        },
        {
          "tag": "tensorleap-1.6.54-rc.1",
          "kind": "other",
          "published_at": "2026-07-26T20:02:16Z"
        },
        {
          "tag": "tensorleap-1.6.54-rc.0",
          "kind": "other",
          "published_at": "2026-07-26T19:59:41Z"
        },
        {
          "tag": "manifest-1.6.54",
          "kind": "other",
          "published_at": "2026-07-26T20:08:04Z"
        },
        {
          "tag": "1.6.54-rc.1",
          "kind": "prerelease",
          "published_at": "2026-07-26T20:02:49Z"
        },
        {
          "tag": "1.6.54-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-26T20:00:16Z"
        },
        {
          "tag": "tensorleap-1.6.53",
          "kind": "other",
          "published_at": "2026-07-26T19:31:27Z"
        },
        {
          "tag": "tensorleap-1.6.53-rc.0",
          "kind": "other",
          "published_at": "2026-07-26T14:18:40Z"
        },
        {
          "tag": "manifest-1.6.53",
          "kind": "other",
          "published_at": "2026-07-26T19:32:04Z"
        },
        {
          "tag": "1.6.53-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-26T14:19:18Z"
        },
        {
          "tag": "tensorleap-1.6.52-rc.0",
          "kind": "other",
          "published_at": "2026-07-26T08:36:59Z"
        },
        {
          "tag": "1.6.52-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-26T08:37:40Z"
        },
        {
          "tag": "tensorleap-1.6.51",
          "kind": "other",
          "published_at": "2026-07-21T12:27:16Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.6",
          "kind": "other",
          "published_at": "2026-07-21T09:29:41Z"
        },
        {
          "tag": "manifest-1.6.51",
          "kind": "other",
          "published_at": "2026-07-21T12:27:52Z"
        },
        {
          "tag": "1.6.39-rc.6",
          "kind": "prerelease",
          "published_at": "2026-07-21T09:30:16Z"
        },
        {
          "tag": "tensorleap-1.6.50-rc.0",
          "kind": "other",
          "published_at": "2026-07-20T14:29:37Z"
        },
        {
          "tag": "1.6.50-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-20T14:30:17Z"
        },
        {
          "tag": "tensorleap-1.6.45-rc.2",
          "kind": "other",
          "published_at": "2026-07-19T14:36:54Z"
        },
        {
          "tag": "1.6.45-rc.2",
          "kind": "prerelease",
          "published_at": "2026-07-19T14:37:30Z"
        },
        {
          "tag": "tensorleap-1.6.45-rc.1",
          "kind": "other",
          "published_at": "2026-07-16T16:02:24Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.5",
          "kind": "other",
          "published_at": "2026-07-16T12:23:54Z"
        },
        {
          "tag": "1.6.45-rc.1",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:02:55Z"
        },
        {
          "tag": "1.6.39-rc.5",
          "kind": "prerelease",
          "published_at": "2026-07-16T12:24:24Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.4",
          "kind": "other",
          "published_at": "2026-07-13T15:30:33Z"
        },
        {
          "tag": "tensorleap-1.6.45-rc.0",
          "kind": "other",
          "published_at": "2026-07-13T11:13:05Z"
        },
        {
          "tag": "1.6.39-rc.4",
          "kind": "prerelease",
          "published_at": "2026-07-13T15:31:05Z"
        },
        {
          "tag": "1.6.45-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-13T11:13:43Z"
        },
        {
          "tag": "tensorleap-1.6.44-rc.0",
          "kind": "other",
          "published_at": "2026-07-13T07:14:21Z"
        },
        {
          "tag": "1.6.44-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-13T07:14:52Z"
        },
        {
          "tag": "tensorleap-1.6.43-rc.0",
          "kind": "other",
          "published_at": "2026-07-09T15:41:59Z"
        },
        {
          "tag": "1.6.43-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-09T15:42:32Z"
        },
        {
          "tag": "tensorleap-1.6.42-rc.1",
          "kind": "other",
          "published_at": "2026-07-09T12:53:43Z"
        },
        {
          "tag": "tensorleap-1.6.42-rc.0",
          "kind": "other",
          "published_at": "2026-07-09T09:29:40Z"
        },
        {
          "tag": "1.6.42-rc.1",
          "kind": "prerelease",
          "published_at": "2026-07-09T12:54:23Z"
        },
        {
          "tag": "1.6.42-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-09T09:30:18Z"
        },
        {
          "tag": "tensorleap-1.6.41-rc.0",
          "kind": "other",
          "published_at": "2026-07-06T12:45:59Z"
        },
        {
          "tag": "1.6.41-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-06T12:46:37Z"
        },
        {
          "tag": "tensorleap-1.6.39",
          "kind": "other",
          "published_at": "2026-07-05T14:14:29Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.3",
          "kind": "other",
          "published_at": "2026-07-05T09:52:49Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.2",
          "kind": "other",
          "published_at": "2026-07-05T09:17:40Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.1",
          "kind": "other",
          "published_at": "2026-07-05T08:00:40Z"
        },
        {
          "tag": "tensorleap-1.6.39-rc.0",
          "kind": "other",
          "published_at": "2026-07-05T07:56:02Z"
        },
        {
          "tag": "manifest-1.6.39",
          "kind": "other",
          "published_at": "2026-07-05T14:14:54Z"
        },
        {
          "tag": "1.6.39-rc.3",
          "kind": "prerelease",
          "published_at": "2026-07-05T09:53:20Z"
        },
        {
          "tag": "1.6.39-rc.2",
          "kind": "prerelease",
          "published_at": "2026-07-05T09:18:11Z"
        },
        {
          "tag": "1.6.39-rc.1",
          "kind": "prerelease",
          "published_at": "2026-07-05T08:01:12Z"
        },
        {
          "tag": "1.6.39-rc.0",
          "kind": "prerelease",
          "published_at": "2026-07-05T07:56:33Z"
        },
        {
          "tag": "tensorleap-1.6.38",
          "kind": "other",
          "published_at": "2026-06-29T15:11:59Z"
        },
        {
          "tag": "manifest-1.6.38",
          "kind": "other",
          "published_at": "2026-06-29T15:12:30Z"
        },
        {
          "tag": "tensorleap-1.6.38-rc.0",
          "kind": "other",
          "published_at": "2026-06-29T13:14:00Z"
        },
        {
          "tag": "1.6.38-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-29T13:14:36Z"
        },
        {
          "tag": "tensorleap-1.6.26-rc.4",
          "kind": "other",
          "published_at": "2026-06-29T11:38:16Z"
        },
        {
          "tag": "tensorleap-1.6.37-rc.0",
          "kind": "other",
          "published_at": "2026-06-29T08:31:00Z"
        },
        {
          "tag": "1.6.26-rc.4",
          "kind": "prerelease",
          "published_at": "2026-06-29T11:38:54Z"
        },
        {
          "tag": "1.6.37-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-29T08:31:41Z"
        },
        {
          "tag": "tensorleap-1.6.34-rc.0",
          "kind": "other",
          "published_at": "2026-06-25T14:00:03Z"
        },
        {
          "tag": "1.6.34-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-25T14:00:36Z"
        },
        {
          "tag": "tensorleap-1.6.33",
          "kind": "other",
          "published_at": "2026-06-24T12:33:00Z"
        },
        {
          "tag": "tensorleap-1.6.33-rc.0",
          "kind": "other",
          "published_at": "2026-06-24T12:13:21Z"
        },
        {
          "tag": "manifest-1.6.33",
          "kind": "other",
          "published_at": "2026-06-24T12:33:38Z"
        },
        {
          "tag": "1.6.33-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-24T12:13:56Z"
        },
        {
          "tag": "tensorleap-1.6.31-rc.0",
          "kind": "other",
          "published_at": "2026-06-24T09:21:40Z"
        },
        {
          "tag": "1.6.31-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-24T09:22:16Z"
        },
        {
          "tag": "tensorleap-1.6.30-rc.0",
          "kind": "other",
          "published_at": "2026-06-24T06:28:18Z"
        },
        {
          "tag": "1.6.30-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-24T06:28:58Z"
        },
        {
          "tag": "tensorleap-1.6.29-rc.0",
          "kind": "other",
          "published_at": "2026-06-22T08:32:32Z"
        },
        {
          "tag": "1.6.29-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-22T08:33:07Z"
        },
        {
          "tag": "tensorleap-1.6.28-rc.0",
          "kind": "other",
          "published_at": "2026-06-18T12:21:47Z"
        },
        {
          "tag": "1.6.28-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-18T12:22:19Z"
        },
        {
          "tag": "tensorleap-1.6.26",
          "kind": "other",
          "published_at": "2026-06-10T09:34:07Z"
        },
        {
          "tag": "tensorleap-1.6.26-rc.3",
          "kind": "other",
          "published_at": "2026-06-10T08:31:24Z"
        },
        {
          "tag": "tensorleap-1.6.26-rc.2",
          "kind": "other",
          "published_at": "2026-06-09T16:44:11Z"
        },
        {
          "tag": "tensorleap-1.6.26-rc.1",
          "kind": "other",
          "published_at": "2026-06-09T12:36:37Z"
        },
        {
          "tag": "tensorleap-1.6.26-rc.0",
          "kind": "other",
          "published_at": "2026-06-09T09:02:39Z"
        },
        {
          "tag": "manifest-1.6.26",
          "kind": "other",
          "published_at": "2026-06-10T09:34:34Z"
        },
        {
          "tag": "1.6.26-rc.3",
          "kind": "prerelease",
          "published_at": "2026-06-10T08:31:59Z"
        },
        {
          "tag": "1.6.26-rc.2",
          "kind": "prerelease",
          "published_at": "2026-06-09T16:44:40Z"
        },
        {
          "tag": "1.6.26-rc.1",
          "kind": "prerelease",
          "published_at": "2026-06-09T12:37:17Z"
        },
        {
          "tag": "1.6.26-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-09T09:03:11Z"
        },
        {
          "tag": "tensorleap-1.6.25-rc.0",
          "kind": "other",
          "published_at": "2026-06-09T08:36:58Z"
        },
        {
          "tag": "1.6.25-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-09T08:37:30Z"
        },
        {
          "tag": "tensorleap-1.6.24-rc.0",
          "kind": "other",
          "published_at": "2026-06-08T10:25:04Z"
        },
        {
          "tag": "1.6.24-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-08T10:25:43Z"
        },
        {
          "tag": "tensorleap-1.6.20-rc.2",
          "kind": "other",
          "published_at": "2026-06-07T10:45:54Z"
        },
        {
          "tag": "tensorleap-1.6.23-rc.0",
          "kind": "other",
          "published_at": "2026-06-04T14:22:02Z"
        },
        {
          "tag": "1.6.20-rc.2",
          "kind": "prerelease",
          "published_at": "2026-06-07T10:46:20Z"
        },
        {
          "tag": "1.6.23-rc.0",
          "kind": "prerelease",
          "published_at": "2026-06-04T14:22:38Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "87dccb6d315edd173fc2a96f85fc958a36df71c4",
          "body": "checkout-rc-branch prints the branch name and the is_new_branch flag on\nseparate lines. The Patch workflow captured both into rc_branch, leaking\nthe stray flag line into $GITHUB_OUTPUT. Take only the first line, as\nrelease_candidate.yml already does.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix rc_branch capturing two-line output in patch workflow (#413)",
          "author_name": "Omri Yonatani",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-28T14:30:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8143d2efa847d43bfda04f88eeae7e424b88d4a4",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-28T14:03:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4745284e175a225a911bf131d376ec626347c1f",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-28T12:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06bc1c914128226ecb4451f60eb63c615f88eadd",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-27T18:18:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77a5a8381fe7b55c4ab666ebb1ae444ae0d4ff52",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-26T19:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3dd328b7a0d2a15b89f5e3ab32a4ea799a5d245",
          "body": null,
          "is_bot": false,
          "headline": "Add redis to external-images, fix Makefile",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-07-26T19:54:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7754840ea98aa0b4aaddba9cb957d6627ecd31b",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-26T14:17:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c888c8ea58c85bd509144d885049c1b9446c9499",
          "body": "Add install-time pip index URL flags routed to node-server\n\n--pip-index-url/--pip-extra-index-url (fallback: PIP_INDEX_URL/\nPIP_EXTRA_INDEX_URL env, then previous installation) are persisted in\nInstallationParams so upgrades keep them, and rendered into the\nnode-server env configmap (absent when uns\n[…]\nt for the engine settings pip values; UI-stored values still\nwin. The engine job template is untouched — node-server already injects\npip envs into the pippin init container from settings at job build.",
          "is_bot": false,
          "headline": "Install-time pip index URL flags routed to node-server (#412)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-07-26T09:34:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a58e54ae6a7ac41e377c916371b2d54c271d2bdf",
          "body": null,
          "is_bot": false,
          "headline": "Bump",
          "author_name": "Omri Yonatani",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-26T08:24:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b3c2322021e351a883d3074dedc93a246c6260d",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-26T08:13:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32b98bd48a58be21062d3810726d50346545a33a",
          "body": null,
          "is_bot": false,
          "headline": "Inc installer version",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-07-21T09:15:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7817cb8424cf46eea9ff24033df01aabb5e0ab00",
          "body": "The owner-only heal left the reported mixed-operator case broken: a\nsecond sudo-capable user (ssm-user) hitting a 0755 helm-cache dir owned\nby the installer (ubuntu) only got a warning, then failed writing the\nchart archive. Restore the intended sudo heal, but gate it: resolve\nsymlinks and require t\n[…]\nleap data dir, and chmod the resolved path. Dataset volumes and\nother arbitrary paths stay owner-heal + warn, and a symlink planted in\nthe world-writable tree can't redirect the sudo chmod outside it.",
          "is_bot": false,
          "headline": "Allow sudo heal for dirs resolving inside the data dir (#410)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-07-21T09:14:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a4d558a67ecd9dc595f7493f9b57a86532d2290",
          "body": null,
          "is_bot": false,
          "headline": "Bump",
          "author_name": "Omri Yonatani",
          "author_login": null,
          "committed_at": "2026-07-20T14:27:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c56267837535b2930cd72430b68797b8fad8a775",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-20T14:25:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "271ea97266753f75e434cc374d3069cdfb3f176c",
          "body": "…push issues (#408)\"\n\nThis reverts commit ee222b0c3a88e78f44b9c542f8ae95ff80a6e44d.",
          "is_bot": false,
          "headline": "Revert \"fix(airgap): resolve BuildKit registry DNS and manifest-list …",
          "author_name": "tensorleap",
          "author_login": "yotamazriel",
          "committed_at": "2026-07-20T09:23:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee222b0c3a88e78f44b9c542f8ae95ff80a6e44d",
          "body": "…ues (#408)\n\nFixes two blocking problems in the airgap `leap push` flow on k3d:\n\n1. **BuildKit cannot resolve tensorleap-registry:5000** (k8s Service DNS is\n   not available from the host-Docker network where BuildKit runs).\n   - Add `buildkit-helper-override-cm` ConfigMap containing a patched\n     \n[…]\natform manifest.\n\n4. Mount Docker socket into the k3d server node so pippin's initContainer\n   can access `docker buildx` on the host daemon.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(airgap): resolve BuildKit registry DNS and manifest-list push iss…",
          "author_name": "yotamazriel",
          "author_login": "yotamazriel",
          "committed_at": "2026-07-20T08:36:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bf9da72ebfbfad364e613b7acbf36882e3dd7c03",
          "body": "* Self-heal shared-dir perms without sudo-chmod of foreign paths\n\nEnsureDirExists returned early for existing dirs, so the perm self-heal\nadded in 059b204b (world-writable so a second local user can reinstall)\nnever ran. Remove the early return, but scope the heal safely:\n\n- only chmod an existing d\n[…]\nts destination parent when missing,\nso an existing system parent (/var/lib, a home dir) is never chmod'ed.\n\nRefs BF-1092 (found while investigating the multi-user EC2 case).\n\n* Drop tests from this PR",
          "is_bot": false,
          "headline": "Self-heal shared-dir perms without sudo-chmod of foreign paths (#407)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-07-19T14:44:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6464d115a78354ca5507b81ff8827232cef5dbd3",
          "body": null,
          "is_bot": false,
          "headline": "Remove migration split",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-07-19T08:39:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1927bb70f0d3942093a4b580dbbe084ce821887d",
          "body": "Restore the explicit ~/.kube/config write and add the shared kube file\nalongside it. chmod the shared file 777 (matches the data dir). Replace the\ntemp-file + sudo-mv with a single sudo sh -c that writes the profile.d export\ndirectly.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Keep original kubeconfig write, use 777, simplify profile.d drop",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-15T11:53:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "01dfdbf89d026fbc1873ad53dafbc7ea50121255",
          "body": "Write the shared kubeconfig file on both platforms (chmod via os.Chmod, no\nsudo needed since we own it). Keep the /etc/profile.d auto-export Linux-only\n(mac has no equivalent drop-in) and document the mac shell-rc path.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Write shared kubeconfig on mac too",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-15T11:53:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f8a15a1559599a3c5b42d29c09c2a8130e8507f",
          "body": "k3d only writes the kubeconfig into the installing user's ~/.kube/config,\nso other local users can't reach the cluster with kubectl/helm. Repurpose\nthe previously-redundant explicit write to instead emit a shared, world-\nreadable kubeconfig into the manifest dir and export KUBECONFIG system-wide\nvia /etc/profile.d. Add MULTI-USER.md guiding the TL_DATA_DIR + KUBECONFIG\nsetup. Bump installer to v0.10.11.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Write shared kubeconfig for multi-user Linux access",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-15T11:53:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b90ca93bf975b3e9944e1259b589ea89de2086aa",
          "body": null,
          "is_bot": false,
          "headline": "Add CPU request for RabbitMQ",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-07-14T07:53:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab5628d877292ca6ceaa34e61c344896a8d9d497",
          "body": "…t Agent (#396)\n\nDrop high-volume node-server logs at Datadog Agent to cut cost\n\nAdd global DD_LOGS_CONFIG_PROCESSING_RULES excluding per-request access\nlogs (\"request completed\", incl. kube-probe healthChecks) and expected\n401 \"No token provided\" errors (logged at ERROR with full stack traces).\nThese are ~2/3 of all log volume and pure noise.\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Reduce Datadog log volume: drop node-server access logs & 401 noise a…",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-07-14T07:48:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4b6ed2326f2859cb23538d9cdff55f493a65d105",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-13T11:10:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3979b3cc9ca9da04d308de6adc9e5121c4e3928f",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-13T07:12:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7a1d185a18ef6a9e7f0063515fb47976478e00e",
          "body": "… eval POC) (#402)\n\n* eval POC on feat-push-job: blob-mode payload store + per-job shared volumes\n\nSquashed development work for the feat-push-job evaluation POC:\n\n- Engine job pod & orchestrator mount a per-job shared volume (orphan pruning)\n- Add PAYLOAD_STORE flag and blob-mode capacity/Redis-siz\n[…]\ninter in CI.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Idan <idan@idan.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add blob-mode payload store and per-job shared volumes (feat-push-job…",
          "author_name": "Idan",
          "author_login": "tip3x",
          "committed_at": "2026-07-12T12:56:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3f2b438908a2087cae7ec1b73d7957098177c46b",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-09T15:41:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7267485528c6445f117b1804249481b1368f407",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-09T09:24:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "059b204bdf106438fb3b89863e9be0906996b9a2",
          "body": "EnsureDirExists returned early when the dir already existed, so the chmod\nnever ran on dirs left 0755 by a prior user — exactly the reinstall case.\nNow it chmods existing non-world-writable dirs too, using sudo when the dir\nisn't owned by the current user. Lets the owner (or an admin) unstick perms\non reinstall so a second, non-sudo user can then use the shared dirs.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Self-heal existing dir perms, not just newly created ones",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-09T07:56:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bf3bba4d649d32c207852213be3b9b84a40354c0",
          "body": "EnsureDirExists now chmods created dirs to 777 (mkdir honors umask, so\n0777 alone yields 0755). Route the dataset-volume dir through it instead\nof raw os.MkdirAll. Fixes permission-denied on the helm cache and dataset\nvolume when a second user without sudo runs reinstall.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Create shared dirs world-writable so non-sudo users can reinstall",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-09T07:56:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "01ae092138ad2615ee4db4f35b9282d3752b5fca",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump version to v0.10.9",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-06T10:19:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a2cafb2c78f4a29ab36daac9bde81d70476f5abb",
          "body": "Interactive install prompt for \"Enter dataset volume\" now uses the same\nfuzzy-picker experience as leap-cli's `leap push` model-path prompt:\ntype a path, ↑↓ to move, TAB to descend into a directory, ENTER to select\n(the leap-cli TUI loop ported into pkg/log with raw ANSI instead of lipgloss,\nso no n\n[…]\non (MarkFlagDirname) for the\n--data-dir and --dataset-volume flags, so shell completion (leap completion\nzsh) completes directories after them.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add local-directory autocomplete for dataset volume prompt & flags",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-06T10:19:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fe5e22c0136ca98bf9d927238ac22c3149db55e4",
          "body": "* Orchestrator job creation: RBAC create verb + ORCHESTRATOR_JOB_CREATION flag\n\nGrants the deployment-manager role batch/jobs create so the orchestrator can\napply engine job manifests, and wires the default-off ORCHESTRATOR_JOB_CREATION\nenv into node-server via the orchestratorJobCreation value.\n\n* \n[…]\n, so the\ntoggle is gone from both the chart values and the env configmap.\n\n* Bump engine chart past master after rebase\n\n---------\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>",
          "is_bot": false,
          "headline": "Orchestrator job creation: RBAC create verb, no rollout flag (#398)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-07-06T09:08:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb3040e4aed596ec960cd0c6f33e429b9411a450",
          "body": "…rebased on master)\"\n\nThis reverts commit 4610a7555a7d85497a6413c45960245bbbf35217.",
          "is_bot": false,
          "headline": "Revert \"Point engine/node-server/web-ui at metadata-revision images (…",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-06T06:19:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4610a7555a7d85497a6413c45960245bbbf35217",
          "body": "…on master)\n\nRe-derived on latest master to clear the conflict with the image-tag bot.\nFeature tags: engine d7aff4cc (+ generic py38-py312), node-server 0c85ebf7,\nweb-ui 1d6fd9e3. Dropped the engine-generic py311 line — the feature engine\nbuild doesn't produce py311 (deploy uses py38). pippin/base images unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Point engine/node-server/web-ui at metadata-revision images (rebased …",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-07-06T06:16:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a100e1180d88a6f33d7f23b197a23ec7ff000e60",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-05T14:42:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "adb6915bb33b76ffe9dc0173980d5f4f465b4392",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-07-05T07:53:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf5678e5b47b883a12777bef2a7587c349a66367",
          "body": null,
          "is_bot": false,
          "headline": "Supporting py 3.11 (#397)",
          "author_name": "amitcohen-tensorleap",
          "author_login": "amitcohen-tensorleap",
          "committed_at": "2026-07-02T08:56:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d012838a163e95b7f7c4c56733e27b9310ad6b47",
          "body": "A normal uninstall removes the cluster and (depending on --purge/--cleanup/\n--clear-data) wipes data in coarse, all-or-nothing groups. This adds a --custom\nflag that performs a normal uninstall (cluster removal) and then interactively\nasks which extra data to delete, per item:\n\n  - Application data,\n[…]\nwith --purge/--cleanup/\n  --clear-data), a survey multi-select menu, and a confirmation that lists\n  exactly what will be deleted.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "uninstall: add --custom flag to interactively pick extra data to delete",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-30T08:32:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f1d12980f0db8adbf3f8d6e505829b6eead3fdc0",
          "body": "…C) (#394)\n\nFills a coverage gap surfaced by BF-1060: the web-ui collection sample\nviewer grid was undocumented (no virtual-scroll/cache mechanics, and the\nensureCollectionIndex / getCollectionSampleOrder / generateStreamingSamplesVis\nendpoints were absent from the KB entirely).\n\n- 03-data-flows.md:\n[…]\ncs.\n- GAPS.md: dated run entry; flags what was code-read vs live-verified.\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(qa-knowledge): document the collection sample-viewer grid (Flow …",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-06-30T07:57:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3d79ed15cd3d14d4a374a7920170b85deb8f083d",
          "body": null,
          "is_bot": true,
          "headline": "Bump version to v0.10.8",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-29T15:00:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0216473a1a213f94ab0a2f83b297000356c938fe",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-29T13:09:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b63aaa3f92c7c215befab320e377b062dc8e61b9",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-29T08:25:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57be35129d06c52e32fbd83528d9ef18cb27cd11",
          "body": "The engine spawns engine-generic worker pods (as a Deployment) by code,\nand those pods source their env from the engine-cm ConfigMap via envFrom\n(deployment_manager.py), not from the engine container's own env. So add\nHTTP(S)_PROXY/NO_PROXY to engine-cm: one edit reaches the engine main\ncontainer, e\n[…]\nippin init container keeps\nits explicit proxy env since it has no envFrom.\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Propagate proxy env to engine-generic workers via engine-cm (#393)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-06-28T14:44:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "99e94bd8a8104680b04adf3f340a7227380d0689",
          "body": "The pippin image-dependencies-builder init container runs its own dind\ndaemon, which does not inherit the k3d node's containerd proxy/mirror\nconfig. Behind a corporate proxy this makes it fail to pull the\nengine-generic base image from public.ecr.aws (DNS + egress).\n\nCapture HTTP(S)_PROXY/NO_PROXY f\n[…]\nd never\nrebuilds the env list, so these chart-declared vars are preserved.\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Propagate proxy env to engine PUSH jobs (pippin builder) (#392)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-06-28T08:07:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a6a8e124699a0b6cd213c48dafec57cc6cae1711",
          "body": "* Add QA knowledge base and weekly maintenance workflow\n\nEvidence-based reference for testing a running Tensorleap install:\narchitecture, full job catalog, end-to-end data flows, failure modes,\nand a which-tool-when verification guide (kubectl/ES/Mongo/RabbitMQ/\nMinIO/Redis/Datadog/Playwright). Incl\n[…]\nepos).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add QA knowledge base and manual update-qa-knowledge skill (#391)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-06-28T08:01:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "49dc01472858295b4007fb245cf41c58cd393c0e",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-25T13:59:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05643d366e8afb5a20403b49fc5745a3a5c73c9e",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-24T12:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c50122c08d0485bd42fbe5ef98b9fd96c69786ab",
          "body": null,
          "is_bot": true,
          "headline": "Bump version to v0.10.7",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-24T11:02:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a74b0fa194e3cd659564ac35dd582d9df075d69d",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-24T09:59:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2950a36b8759edf3e08c3b5dd972d8e6721a79f",
          "body": "Fix airgap deadlock: don't wait on infra chart during bootstrap\n\ninstallInfraChart used client.Wait=true, blocking until all infra pods\nwere ready — including the ECK operator. But ECK operator's image is in\nserverImages, not pre-loaded into containerd, and Phase 2 (push images\nto Zot) runs after bo\n[…]\nse 2\npushes all images including ECK operator into Zot. By the time the\nserver chart installs, ECK operator has pulled its image and started.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix airgap bootstrap deadlock (ECK operator + pause image) (#390)",
          "author_name": "yotamazriel",
          "author_login": "yotamazriel",
          "committed_at": "2026-06-24T09:18:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5044890bf2a8cd6851d6603ede41ae981d3d1faf",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-24T08:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18de6362f5ddb127254aeb7ee8967544b0ac704c",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-24T06:25:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe82ec17d575b57c96332a05f26f627ed558c529",
          "body": "…rd (#389)\n\n* Fix airgap deadlock: import k3s system images into containerd before waiting for Zot\n\nThe cluster registries.yaml mirrors all docker.io pulls through the local Zot\nregistry at 127.0.0.1:5000. Zot runs as a k8s pod, but creating a pod sandbox\nrequires the pause image (rancher/mirrored-p\n[…]\no outbound\nconnections are attempted in a truly air-gapped environment.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix airgap install deadlock: pre-load k3s system images into containe…",
          "author_name": "yotamazriel",
          "author_login": "yotamazriel",
          "committed_at": "2026-06-22T14:48:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1ac99e3bfcb953aeea1c0d6d3c5e14667580fc4b",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-22T08:04:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cbe68cbb9364537d290076aa0c861545b44c714",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-18T12:21:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "978fc46ff38953dea56ce41686250895f30bcf96",
          "body": "Consolidate project-overview, go-code, and helm-charts Cursor rules into\na single repo-scoped CLAUDE.md and remove the .cursor/rules sources.\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>",
          "is_bot": false,
          "headline": "Add CLAUDE.md, migrate from .cursor/rules (#387)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-06-15T15:00:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18b09c1ea7c5b7dcc038c514f6e08f6de60346ec",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-15T08:29:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "636d50656642a43d5e9ce9d2e72d2ef9e2ce9ad1",
          "body": null,
          "is_bot": false,
          "headline": "Update version",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-14T12:37:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a78036fe88abb976b7ec1a72ec6bed19a12bb4c9",
          "body": "`leap server upgrade` (RunUpgradeCmd) shared the manifest-resolution\npath with install/reinstall, which prompts \"Do you want to use latest\nversion (latest: X, current: Y)?\" whenever there's a previous install\nand no explicit --tag. Worse, that prompt defaulted to *false* — hitting\nEnter kept the cur\n[…]\nt manifest (an explicit --tag is still honored). install and\nreinstall pass false, preserving their existing interactive behavior.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "upgrade: always use latest version, never prompt to stay on current",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-14T12:37:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7a54ec9034a6ddfb408c95b66a9b2fc1ffa0fc5d",
          "body": null,
          "is_bot": false,
          "headline": "Update version",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-11T07:47:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "594a746d41f7d8af53f32b49d538142a689f146f",
          "body": null,
          "is_bot": false,
          "headline": "Defualt false",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-11T07:47:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1232303c9c7f701463225a93872a990ebcd88a7d",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-09T09:01:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ab69c360dc339dc0426cdf006c57a29fa81cb45",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-09T08:28:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6539d4ab4ea2ef983f4a599d9b062e143588609d",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-08T08:59:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d39b9ae8fd36eecd6146fba0a05f91246b11990",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-04T14:20:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0790cb6269854d88318b3f0b7be1ac8f7c67d668",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-04T12:59:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05b40ae58881aef725277f0f20f604ad02cdd976",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-04T11:58:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61ab1d93d8dae531f92c770a65b457519dc61458",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Point engine at feat-push-job-437ec670 (generic-processor PUSH fix)",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-02T12:39:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "80079228a1b7cb9c7260ca64c1c61d27e2ac73fc",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Point engine + node-server at feat-push-job build tags",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-06-02T12:13:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e8ef9acd136ce43fd9d7c8a3f6e12212a8ae1c4d",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-02T06:45:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbb237f6e436b3d0c7d35ac387b0adb94afa888d",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-01T10:25:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b81f8dbb2884897916ffc00296a179df1901deeb",
          "body": "`leap server install --disable-auth` already sets enableKeycloak=false\n(and stops deploying Keycloak), but that only switches node-server to\nlocal auth, which still requires a real login/api-key. The leap CLI\nvalidates the session via POST /api/v2/auth/whoAmI before every operation\nand aborts when n\n[…]\nr container,\nunblocking the leap-runner on-prem CI workflow.\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Plumb --disable-auth to node-server DISABLE_AUTH env var (#382)",
          "author_name": "Omri Yonatani",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-06-01T09:57:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1bae84b12a8f3d66f4dd4f93090657e3bd2554f6",
          "body": null,
          "is_bot": false,
          "headline": "Add pinned redis image to engine configmap",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-05-31T15:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84af04500b33a03933fec95d05be90c353a6ccdd",
          "body": "REDIS_HOST no longer exists in engine-cm.yaml; reference RABBIT_HOST\nand STORAGE_ENDPOINT instead to illustrate namespace templating.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Update INSTALL-MODES.md after global Redis removal",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-05-31T15:43:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8a092b47cc244c47cf53e94ec22bc16ef784f4e1",
          "body": null,
          "is_bot": false,
          "headline": "Per-job streaming handler",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-05-31T15:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c250c0a43fec11387b96ddd9b4f4d81459f2c930",
          "body": null,
          "is_bot": false,
          "headline": "Remove global redis",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-05-31T15:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1030889cb1980cffbab301acd1781ac571331798",
          "body": null,
          "is_bot": false,
          "headline": "Permissions",
          "author_name": "Roy Ben Abraham",
          "author_login": "roytl",
          "committed_at": "2026-05-31T15:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29d38458420f4e8d6072cca1fb9ce331638c6a48",
          "body": "* Default 'leap server upgrade' confirmation to Yes\n\nThe 'Do you want to use latest version?' prompt defaulted to No (y/N).\nSince the user explicitly invoked the upgrade command, default to Yes\n(Y/n). Also makes the non-interactive (-y) path actually upgrade to\nlatest instead of staying on the current tag.\n\nEN-2254\n\n* Bump version to v0.10.4\n\n---------\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>",
          "is_bot": false,
          "headline": "Default 'leap server upgrade' confirmation to Yes (#379)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-05-28T13:12:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ba52ffe06f1c83fb319bdfbe23e98fb3f3a1860",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-27T14:30:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75e9f4ca72d96887e4fe137a545334c800f757df",
          "body": "…overy path)\n\nThe wait loop now reads two fields off the\n`_migrations.sessions-to-versions-v1` doc:\n\n- `completedAt` — absent → marker missing, warn-and-proceed.\n- `rehydratedAt` — present → migrate-sessions-to-versions hit the\n                    marker-already-set branch and re-queued storage\n    \n[…]\nll through to the regular MOVE/COPY wait.\n\nFresh-install runs never enter the rehydrate branch, so\n`rehydratedAt` stays unset and migration 133 still gets to see the\nnew storage layout before it runs.",
          "is_bot": false,
          "headline": "db-migration-post: skip wait when marker has `rehydratedAt` (PROD-rec…",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-05-27T13:17:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06219673e1f930da8e478ab884bf8ccc9b17db2c",
          "body": "Three behaviours rolled into one wait-loop refactor:\n\n1. **Only wait for priority ≤ 2 (MOVE + COPY).** Those relocate files\n   the engine reads at the new layout. Tasks at priority ≥ 3 (CLEANUP\n   removes empty old dirs, REWRITE rewrites embedded paths inside file\n   content) don't gate post-boundar\n[…]\nound work** in both\n   the progress lines and the terminal message.\n\nThe timeout-after-WAIT_TIMEOUT_SECONDS branch still `exit 1`s for the\ncase where MOVE/COPY are genuinely stuck pending/in_progress.",
          "is_bot": false,
          "headline": "db-migration-post: only block on MOVE/COPY tasks, surface skipped/failed",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-05-27T13:17:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2138965c51bbfdf99f4c398229987dd8d4f27ebb",
          "body": "Migration 133 (`versions-graph-validation-available-latent-spaces`)\nruns in `db-migration-pre` today — before sessions-to-versions — but\nit reads data only that special migration produces:\n\n- `version.inferenceArtifactId`, set by sessions-to-versions when\n  absorbing a sessionRun\n- PCA manifest at t\n[…]\nesentation` references) so it rides along\nto keep consecutive numbered files together in one phase.\n\nBoth call sites updated (MIGRATION_TO in pre, MIGRATION_FROM in post)\nso the defaults stay in sync.",
          "is_bot": false,
          "headline": "node-server: lower db-migration boundary 134 → 132",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-05-27T13:17:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b870152076f7f6546a91d81f828d1131156f2b68",
          "body": null,
          "is_bot": false,
          "headline": "Better error handling of github api",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-05-27T13:17:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9593da05a6db47a60df8e345af2364c3696a7e5",
          "body": "Old order — one db-migration container running 001..LATEST — breaks\nupgrades from an environment that hasn't yet run the sessions-to-versions\nspecial migration: post-special migrations like 135-update-evaluate-feature-version-fields\nassume the new resources.* shape that the special migration produce\n[…]\namps schemaVersion to the global LATEST, special is a no-op via its\nown marker check, post early-exits at the schemaVersion check.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "node-server: split db-migration around the special migration",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-05-27T13:17:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cc4d3001e72120dc241e39d2099196d8b1c32e2b",
          "body": "…IGRATION_TO\n\nAdds bash env-var bounds to the db-migration init container so the same\nimage can run only a slice of the migration set instead of always\n1..LATEST. Defaults are wide open (FROM=1, TO=99999), so behavior is\nunchanged when the env vars are not set.\n\nLets us split the migration step into\n[…]\ner in a follow-up: the pre pass\ncaps at the special-migration boundary, and the post pass picks up\nfrom the next migration onward.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "node-server: parameterize db-migration with optional MIGRATION_FROM/M…",
          "author_name": "Moshe Kabala",
          "author_login": "moshe-kabala",
          "committed_at": "2026-05-27T13:17:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0fd34585933ba5969891eb4a8d9def797db04081",
          "body": null,
          "is_bot": true,
          "headline": "bump",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-27T06:38:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6e7f4acd6acab2066639a2b7ed3dc7ba1cc2f99",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-27T05:39:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f8276b38358c0e21ebe551bdd6a2286aac6d4b5",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-26T13:29:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "539c0c7ecee032b2409db1ccd5addf2e39f9fd56",
          "body": "* Add optional cli_tag input to _install_server.yml\n\nLets callers pin the leap-cli version installed by the reusable workflow\n(via the install.sh TAG env var). Default remains empty = latest, so the\nexisting callers (release_candidate, release_production, patch) keep their\ncurrent behavior. Needed b\n[…]\nhored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add optional cli_tag input to _install_server.yml (#376)",
          "author_name": "Omri Yonatani",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-24T07:22:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "40f97f8ce150f93659f73dd082a6616114d45e54",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-20T07:50:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0d605bec62ac357182063824dea3a27d1b0d577",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-18T13:47:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ae9dfba0b9935adb0598d9d7e0c0fd86bc5204f",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-17T12:37:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "107df1b16548c010f166b5ff64f3b7e28e9031ce",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-17T10:08:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e779f20df1fc2c7cc0ba63a7bf1bf268f2617b57",
          "body": "The install path calls LoadManifestOnly to pre-check reinstall before\nloading heavy assets, then calls InitInstallationProcess which also\nlogs the resolved tag. Drop the log here so install no longer prints\n\"Using tag: ...\" twice. Fixes EN-2205.\n\nCo-authored-by: Asaf Yehezkel <asafyehezkel@Asafs-MacBook-Pro.local>",
          "is_bot": false,
          "headline": "Remove duplicate \"Using tag\" log from LoadManifestOnly (#375)",
          "author_name": "Asaf Yehezkel",
          "author_login": "asafyehezkel",
          "committed_at": "2026-05-14T12:54:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "054fc61be424a7313e215adacb816c123211e515",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-14T12:41:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "464a712c5d4fee5b5bfb1e4189e945774219b4a0",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-13T11:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36a101af5bbfa33549ba5400abd1b6a92b9a06c3",
          "body": null,
          "is_bot": true,
          "headline": "Bump",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-12T11:27:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85bd9aead1608a57eef71229d1852007f0e8a832",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-12T11:04:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f43476d4bc9a9a4e392271433e3b41037b5ec54f",
          "body": null,
          "is_bot": false,
          "headline": "Update image tags",
          "author_name": "omriyonatani-tl",
          "author_login": "omriyonatani-tl",
          "committed_at": "2026-05-12T08:27:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 557,
      "latest_release_at": "2026-07-28T14:10:58Z",
      "latest_release_tag": "tensorleap-1.6.57",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 51,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 0.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/tensorleap/helm-charts",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/tensorleap/helm-charts",
          "is_deprecated": false,
          "latest_version": "v1.0.4",
          "repository_url": "https://github.com/tensorleap/helm-charts",
          "versions_count": 83,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2024-06-05T12:10:11Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 783
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2022-06-13",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 32569,
      "source_files_sampled": 75,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7646
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/docker/docker",
            "direct": true,
            "version": "v27.0.3+incompatible",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.9,
            "advisory_ids": [
              "GHSA-4vq8-7jfc-9cvp",
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-v23v-6jw2-98fq",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2024-3005",
              "GO-2026-4883",
              "GO-2026-4887"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 13,
            "oldest_advisory_days": 728
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.43.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-f6x5-jh6r-wrfv",
              "GHSA-j5w8-q4qc-rx2x",
              "GHSA-jppx-rxg9-jmrx",
              "GHSA-q4h4-gmj2-qvw2"
            ],
            "fixed_version": "0.52.0",
            "advisory_count": 31,
            "oldest_advisory_days": 250
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.72.1",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GHSA-p77j-4mvh-x3m3",
              "GO-2026-4762",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 4,
            "oldest_advisory_days": 131
          },
          {
            "name": "github.com/docker/cli",
            "direct": true,
            "version": "v27.0.3+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-p436-gjf2-799p",
              "GO-2026-4610"
            ],
            "fixed_version": "29.2.0+incompatible",
            "advisory_count": 2,
            "oldest_advisory_days": 145
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.29",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-fqw6-gf59-qr4w",
              "GHSA-jpcc-p29g-p8mq",
              "GHSA-xhf5-7wjv-pqxp",
              "GO-2026-5064",
              "GO-2026-5338",
              "GO-2026-5378",
              "GO-2026-5475",
              "GO-2026-5622",
              "GO-2026-5758"
            ],
            "fixed_version": "2.3.2",
            "advisory_count": 9,
            "oldest_advisory_days": 67
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": false,
            "version": "v0.5.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-pc3f-x583-g7j2",
              "GO-2026-4958"
            ],
            "fixed_version": "0.5.1",
            "advisory_count": 2,
            "oldest_advisory_days": 102
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.34.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-9h8m-3fm2-qjrq",
              "GHSA-hfvc-g4fc-pqhx",
              "GO-2026-4394",
              "GO-2026-5426"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 4,
            "oldest_advisory_days": 175
          },
          {
            "name": "oras.land/oras-go/v2",
            "direct": false,
            "version": "v2.6.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-8xwf-rjm4-xvhv",
              "GHSA-fxhp-mv3v-67qp",
              "GHSA-jxpm-75mh-9fp7",
              "GHSA-vh4v-2xq2-g5cg",
              "GHSA-xf85-363p-868w",
              "GO-2026-5879",
              "GO-2026-5880",
              "GO-2026-5882",
              "GO-2026-5884",
              "GO-2026-5885"
            ],
            "fixed_version": "2.6.2",
            "advisory_count": 10,
            "oldest_advisory_days": 26
          },
          {
            "name": "helm.sh/helm/v3",
            "direct": true,
            "version": "v3.19.2",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-hr2v-4r36-88hr",
              "GO-2026-5435"
            ],
            "fixed_version": "4.1.4",
            "advisory_count": 2,
            "oldest_advisory_days": 108
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.45.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-4918",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030",
              "GO-2026-5942"
            ],
            "fixed_version": "1.26.3",
            "advisory_count": 9,
            "oldest_advisory_days": 81
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 66
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.30.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 13
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 5,
          "unknown": 3,
          "critical": 3,
          "moderate": 2
        },
        "advisory_count": 89,
        "affected_count": 13,
        "assessed_count": 195,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 4
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/AlecAivazis/survey/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.3.7"
        },
        {
          "name": "github.com/briandowns/spinner",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.0"
        },
        {
          "name": "github.com/docker/cli",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v27.0.3+incompatible"
        },
        {
          "name": "github.com/docker/docker",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v27.0.3+incompatible"
        },
        {
          "name": "github.com/go-logr/logr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.2"
        },
        {
          "name": "github.com/google/go-containerregistry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.19.1"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/k3d-io/k3d/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.8.3"
        },
        {
          "name": "github.com/sirupsen/logrus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.3"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.1"
        },
        {
          "name": "github.com/spf13/pflag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.10"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.37.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "helm.sh/helm/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.19.2"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.34.0"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.34.0"
        },
        {
          "name": "k8s.io/cli-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.34.0"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.34.0"
        },
        {
          "name": "k8s.io/klog/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.130.1"
        },
        {
          "name": "k8s.io/kubectl",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.34.0"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250604170112-4c0f3b243397"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/alecaivazis/survey/v2",
            "direct": true,
            "version": "v2.3.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/briandowns/spinner",
            "direct": true,
            "version": "v1.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": true,
            "version": "v27.0.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": true,
            "version": "v27.0.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": true,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": true,
            "version": "v0.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/k3d-io/k3d/v5",
            "direct": true,
            "version": "v5.8.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": true,
            "version": "v1.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": true,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "helm.sh/helm/v3",
            "direct": true,
            "version": "v3.19.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/cli-runtime",
            "direct": true,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": true,
            "version": "v2.130.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kubectl",
            "direct": true,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20250604170112-4c0f3b243397",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20230301143203-a9d515a09cc2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chai2010/gettext-go",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.29",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/stargz-snapshotter/estargz",
            "direct": false,
            "version": "v0.14.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dimchansky/utfbom",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/distribution",
            "direct": false,
            "version": "v2.8.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go",
            "direct": false,
            "version": "v1.5.1-1.0.20160303222718-d30aec9fd63c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-metrics",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.9.11+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/exponent-io/jsonpath",
            "direct": false,
            "version": "v0.0.0-20210407135951-1de76d718b3f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/camelcase",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fvbommel/sortorder",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-errors/errors",
            "direct": false,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-gorp/gorp/v3",
            "direct": false,
            "version": "v3.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-test/deep",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobwas/glob",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goodhosts/hostsfile",
            "direct": false,
            "version": "v0.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.4-0.20250319132907-e064f32e3674",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gosuri/uitable",
            "direct": false,
            "version": "v0.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gregjones/httpcache",
            "direct": false,
            "version": "v0.0.0-20190611155906-901d90724c79",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.26.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/imdario/mergo",
            "direct": false,
            "version": "v0.3.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmoiron/sqlx",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jonboulle/clockwork",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kballard/go-shellquote",
            "direct": false,
            "version": "v0.0.0-20180428030007-95032a82bc51",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/builder",
            "direct": false,
            "version": "v0.0.0-20180802200727-47ae307949d0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/ps",
            "direct": false,
            "version": "v0.0.0-20150810152359-62de8c46ede0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lib/pq",
            "direct": false,
            "version": "v1.10.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/liggitt/tabwriter",
            "direct": false,
            "version": "v0.0.0-20181228230101-89fcab3d43de",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lithammer/dedent",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magefile/mage",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/makenowjust/heredoc",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/goutils",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig/v3",
            "direct": false,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/squirrel",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mgutz/ansi",
            "direct": false,
            "version": "v0.0.0-20170206155736-9520e82c474b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/miekg/pkcs11",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/monochromegane/go-gitignore",
            "direct": false,
            "version": "v0.0.0-20200626010858-205db1a8cc00",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mxk/go-flowrate",
            "direct": false,
            "version": "v0.0.0-20140419014527-cca7078d478f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/peterbourgon/diskv",
            "direct": false,
            "version": "v2.0.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.62.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.15.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rancher/wharfie",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rubenv/sql-migrate",
            "direct": false,
            "version": "v1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/slog-shim",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": false,
            "version": "v1.18.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/theupdateframework/notary",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vbatts/tar-split",
            "direct": false,
            "version": "v0.11.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonpointer",
            "direct": false,
            "version": "v0.0.0-20190905194746-02993c407bfb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonreference",
            "direct": false,
            "version": "v0.0.0-20180127040603-bd5ef7bd5415",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonschema",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xlab/treeprint",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.58.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.35.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
            "direct": false,
            "version": "v1.32.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.34.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.34.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.35.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.34.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.34.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.35.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.2",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "go4.org/netipx",
            "direct": false,
            "version": "v0.0.0-20231129151722-fdeea329fbba",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20240719175910-8a7402abbf56",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.30.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.17.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.30.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20250303144028-a0af3efb3deb",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20250303144028-a0af3efb3deb",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.72.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.5",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.12.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/ini.v1",
            "direct": false,
            "version": "v1.67.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-helpers",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20250710124328-f3f2b991d03b",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/metrics",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "oras.land/oras-go/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20241014173422-cfa47c3a1cc8",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/api",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/kustomize/v5",
            "direct": false,
            "version": "v5.7.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/kyaml",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 195,
        "direct_count": 22,
        "indirect_count": 173
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 335,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 74
      },
      "bus_factor": 2,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "yotamazriel",
          "commits": 526,
          "avatar_url": "https://avatars.githubusercontent.com/u/62242836?v=4"
        },
        {
          "type": "User",
          "login": "omriyonatani-tl",
          "commits": 318,
          "avatar_url": "https://avatars.githubusercontent.com/u/238181993?v=4"
        },
        {
          "type": "User",
          "login": "moshe-kabala",
          "commits": 308,
          "avatar_url": "https://avatars.githubusercontent.com/u/31233967?v=4"
        },
        {
          "type": "User",
          "login": "asafyehezkel",
          "commits": 82,
          "avatar_url": "https://avatars.githubusercontent.com/u/62377952?v=4"
        },
        {
          "type": "User",
          "login": "tip3x",
          "commits": 34,
          "avatar_url": "https://avatars.githubusercontent.com/u/46688952?v=4"
        },
        {
          "type": "User",
          "login": "YuvalFeldman",
          "commits": 33,
          "avatar_url": "https://avatars.githubusercontent.com/u/12029761?v=4"
        },
        {
          "type": "User",
          "login": "doronHarnoy",
          "commits": 32,
          "avatar_url": "https://avatars.githubusercontent.com/u/62376065?v=4"
        },
        {
          "type": "User",
          "login": "tomkoren21",
          "commits": 25,
          "avatar_url": "https://avatars.githubusercontent.com/u/95576526?v=4"
        },
        {
          "type": "User",
          "login": "snir-shem-tov",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/96002046?v=4"
        },
        {
          "type": "User",
          "login": "roytl",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/217754154?v=4"
        }
      ],
      "contributors_sampled": 17,
      "top_contributor_share": 0.366
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "_install_server.yml",
        "ci.yml",
        "go_ci.yml",
        "patch.yml",
        "release_airgap_pack.yml",
        "release_candidate.yml",
        "release_production.yml",
        "update_images.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 6,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 6,
            "reason": "7 out of 11 merged PRs checked by a CI test -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 10/27 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "52 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "87dccb6d315edd173fc2a96f85fc958a36df71c4",
        "ran_at": "2026-07-28T15:26:59Z",
        "aggregate_score": 3.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T14:33:42Z",
      "oldest_open_prs": [
        {
          "number": 353,
          "created_at": "2026-03-16T20:42:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 383,
          "created_at": "2026-06-03T05:34:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 385,
          "created_at": "2026-06-11T08:30:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 411,
          "created_at": "2026-07-22T12:25:38Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-28T14:30:13Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/tensorleap/helm-charts",
    "host": "github.com",
    "name": "helm-charts",
    "owner": "tensorleap"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 39,
        "vitality": 95,
        "community": 21,
        "governance": 64,
        "engineering": 58
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 95,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "commits_last_year": 557,
              "human_commit_share": 0.96,
              "days_since_last_push": 0,
              "active_weeks_last_year": 51
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "51/52 weeks with commits",
                "points": 35.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 51
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "557 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 557
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "tensorleap-1.6.57",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 0.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 21,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 17,
              "top_contributor_share": 0.366
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 37% of commits",
                "points": 14.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 37
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "17 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "merged_prs": 335,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 74
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "335/409 decided PRs merged",
                "points": 31.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 335,
                      "decided": 409
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 10/27 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "followers": 4,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "tensorleap",
              "public_repos": 26,
              "account_age_days": 2322
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "4 followers of tensorleap",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 4,
                      "login": "tensorleap"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "26 public repos, account ~6 yr old",
                "points": 22.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 26
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "moderate",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "packages": [
                "github.com/tensorleap/helm-charts"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 783
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 783 days ago",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 783
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "83 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 83
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 58,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "7 out of 11 merged PRs checked by a CI test -- score normalized to 6",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 39,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 38,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 3.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "7 out of 11 merged PRs checked by a CI test -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 10/27 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "52 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "at_risk",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 195 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 195
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 43,
            "inputs": {
              "source": "osv",
              "advisories": 89,
              "affected_packages": 13,
              "assessed_packages": 195,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 3, high 5, moderate 2, unknown 3",
              "direct_affected_packages": 4
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "4 affected: github.com/docker/docker v27.0.3+incompatible (critical 9.9), github.com/docker/cli v27.0.3+incompatible (high), helm.sh/helm/v3 v3.19.2 (moderate), +1 more",
                "points": 5.5,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 4,
                      "packages": "github.com/docker/docker v27.0.3+incompatible (critical 9.9), github.com/docker/cli v27.0.3+incompatible (high), helm.sh/helm/v3 v3.19.2 (moderate)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "3 advisory-carrying package(s) unaddressed past 90 days; oldest published 728 days ago",
                "points": 26.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 3,
                      "oldest": 728
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 195,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 69,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "moderate",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.385,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7646
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "37 of 96 human commits state their intent (structured subject or explanatory body)",
                "points": 20.6,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 37,
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.27,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "27 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 27,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 32569,
              "source_files_sampled": 75,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/75 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 75,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T15:27:18.805090Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tensorleap/helm-charts.svg",
  "full_name": "tensorleap/helm-charts",
  "license_state": "custom",
  "license_spdx": null
}