Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 19:10 UTC
tgamblin / spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
tgamblin/spack holds a health index of 37 out of 100, placing it in the At risk band. It scores highest on AI Readiness (69/100) and lowest on Community & Adoption (9/100). It was last updated 30 days ago. 10 contributors account for most of its recent work.
37
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
37
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Abandonment Policy applies a 85% multiplier to weighted overall health.
Ownership
Todd GamblinPersonal account
272 followers78 public repossince Jun 2010@LLNL
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
37
Development activity
29Critical
Abandonment alert
Work has arrived and nobody has attended to it
no human commit in 1248 daysautomated commits excludedreleases stalledOpenSSF Scorecard reports it unmaintained
Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.
How abandonment is assessedHow it's scored
| 28.8/36 | Push recency — last push 30 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 1 |
| days_since_last_push | 30 |
| active_weeks_last_year | 0 |
Release discipline
48At risk
How it's scored
| 16.2/27 | Ships releases — 27 version tags (no GitHub releases) |
| 0/36 | Release recency — latest release 2,076 days ago |
| 27/27 | Release cadence — a release every ~31.6 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 27 |
| latest_release_tag | v0.16.0 |
| releases_from_tags | yes |
| days_since_latest_release | 2,076 |
| mean_days_between_releases | 31.6 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
9
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
19Critical
How it's scored
| 0/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
57
Maintainer resilience (bus factor)
97Excellent
How it's scored
| 54/54 | Bus factor — 10 contributor(s) cover half of all commits |
| 19.7/22.5 | Commit distribution — top contributor authored 12% of commits |
| 13.5/13.5 | Contributor breadth — 99 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 90 contributing companies or organizations |
Inputs used
| bus_factor | 10 |
| contributors_sampled | 99 |
| top_contributor_share | 0.124 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
66Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 17.5/25 | Owner reach — 272 followers of tgamblin |
| 25/25 | Track record — 78 public repos, account ~16 yr old |
Inputs used
| followers | 272 |
| owner_type | User |
| is_verified | — |
| owner_login | tgamblin |
| public_repos | 78 |
| account_age_days | 5,892 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
58
Engineering practices
80Good
How it's scored
| 24/24 | CI workflows — 7 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .flake8 |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
25Critical
How it's scored
| 0/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://spack.io |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://spack.io |
| has_readme | no |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
47
Security posture
47At risk
How it's scored
| 6.8/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 90 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6/7.5 | Vulnerabilities — 2 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 4.7 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, pinned_dependencies, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
69
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 98 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.98 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
86Excellent
How it's scored
| 18/18 | One-command bootstrap — lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .flake8 |
| 11/11 | Static type checking — lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed |
| 10/10 | Reproducible environment — Dockerfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 5/8 | Automated maintenance — dependency automation configured, none observed in the sampled commits |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | no |
| bootstrap_files | lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
How it's scored
| 27/45 | Type-checkable code — Python with type-check config (lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed) |
| 54.9/55 | Manageable file sizes — 17/7,980 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 204,739 |
| source_files_sampled | 7,980 |
| oversized_source_files | 17 |
Key facts
0GitHub stars
99contributors
0commits, last 12 months
30days since last push
27releases
10bus factor
0open issues
PyPIpackage ecosystems
Data collection warnings
- Community profile unavailable
- Could not fetch pypi package 'spack' from its registry
More detail
OpenSSF Scorecard 4.7 / 10
4.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 9 | Binary-Artifacts | binaries present in source code |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 90 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | internal error: internal error: invalid Dockerfile |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 8 | Vulnerabilities | 2 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| PyPI | clingo | — | pyproject.toml |
| PyPI | setuptools | — | pyproject.toml |
All dependencies 0
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 230239,
"has_wiki": true,
"homepage": "https://spack.io",
"languages": {
"C": 50037,
"M4": 2111,
"C++": 3916,
"Lua": 2649,
"Tcl": 2434,
"HTML": 1619,
"Perl": 615,
"CMake": 13373,
"Shell": 194507,
"Prolog": 58872,
"Python": 20229096,
"Fortran": 561,
"Makefile": 11922,
"Batchfile": 9138,
"Dockerfile": 9365,
"PowerShell": 2960,
"Standard ML": 2592,
"RouterOS Script": 37
},
"pushed_at": "2026-06-26T15:04:38Z",
"created_at": "2021-07-19T21:14:14Z",
"owner_type": "User",
"updated_at": "2021-11-30T18:06:16Z",
"description": "A flexible package manager that supports multiple versions, configurations, platforms, and compilers.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "develop",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://people.llnl.gov/tgamblin",
"name": "Todd Gamblin",
"type": "User",
"login": "tgamblin",
"company": "@LLNL",
"location": "Livermore, California",
"followers": 272,
"avatar_url": "https://avatars.githubusercontent.com/u/299842?v=4",
"created_at": "2010-06-08T12:55:04Z",
"is_verified": null,
"public_repos": 78,
"account_age_days": 5892
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2020-11-18T12:22:09Z"
},
{
"tag": "v0.15.4",
"kind": "patch",
"published_at": "2020-08-13T07:41:59Z"
},
{
"tag": "v0.15.3",
"kind": "patch",
"published_at": "2020-07-28T09:11:06Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2020-07-23T23:04:26Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2020-07-10T23:54:49Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2020-06-30T23:21:32Z"
},
{
"tag": "v0.14.2",
"kind": "patch",
"published_at": "2020-04-15T21:32:01Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2020-03-20T19:29:44Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2020-02-24T01:08:15Z"
},
{
"tag": "v0.13.4",
"kind": "patch",
"published_at": "2020-02-07T22:52:07Z"
},
{
"tag": "v0.13.3",
"kind": "patch",
"published_at": "2019-12-24T07:48:11Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2019-12-05T06:02:41Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2019-11-05T09:49:17Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2019-10-26T06:19:36Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2019-01-13T22:29:07Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2018-11-13T17:05:17Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2018-02-07T16:45:29Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2018-01-19T21:28:26Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2018-01-17T22:14:45Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2017-01-17T09:36:03Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2016-05-18T15:30:13Z"
},
{
"tag": "v0.8.17",
"kind": "patch",
"published_at": "2015-03-24T17:17:18Z"
},
{
"tag": "v0.8.16",
"kind": "patch",
"published_at": "2015-03-14T03:41:59Z"
},
{
"tag": "v0.8.15",
"kind": "patch",
"published_at": "2015-02-24T18:42:58Z"
},
{
"tag": "v0.8.11",
"kind": "patch",
"published_at": "2014-11-06T21:22:15Z"
},
{
"tag": "v0.8.10",
"kind": "patch",
"published_at": "2014-10-28T06:04:47Z"
},
{
"tag": "v0.8.5",
"kind": "patch",
"published_at": "2014-09-19T16:56:00Z"
}
],
"recent_commits": [
{
"oid": "6b27aebeb429d1f7c2bb450c49cd43270d1d007e",
"body": "`colify` is an old module in Spack that still uses `**kwargs` liberally. \r\n\r\nWe should be more explicit. Doing this eliminates the need for many \r\nchecks (can't pass the wrong arg if it isn't allowed) and makes the \r\nfunction documentation more clear.",
"is_bot": false,
"headline": "colify.py: get rid of **kwargs (#35641)",
"author_name": "Todd Gamblin",
"author_login": "tgamblin",
"committed_at": "2023-02-23T19:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c7cccd052e0c899aab3c2a7918c5e3b554abe4a",
"body": null,
"is_bot": false,
"headline": "p7zip: Add new versions from fork (#35627)",
"author_name": "Mosè Giordano",
"author_login": "giordano",
"committed_at": "2023-02-23T12:10:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26c314f04f79da879a486a1cdc9833082435d2cc",
"body": null,
"is_bot": false,
"headline": "htop: Add version 3.2.2 (#35621)",
"author_name": "Rémi Lacroix",
"author_login": "RemiLacroix-IDRIS",
"committed_at": "2023-02-23T11:22:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9982d76bb1685270cee84a6c449ec8f92cca3280",
"body": null,
"is_bot": false,
"headline": "ncdu: Add version 1.18.1 (#35620)",
"author_name": "Rémi Lacroix",
"author_login": "RemiLacroix-IDRIS",
"committed_at": "2023-02-23T11:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d41b71664c626e3f30c10e1670c5d07fee252a7",
"body": "Fixes a bug introduced in 44ed0de8c077630148c213d3c7f40a8965eb6f94\r\nwhere the push method of binary_distribution now takes named args\r\ninclude_root and include_depedencies, to avoid the **kwarg hole.\r\n\r\nBut the call site wasn't update and we passed a dict of keys/values instead\r\nof arguments, which resulted in a call like this:\r\n\r\n```\r\npush(include_root={\"include_root\": True, \"include_dependencies\": False})\r\n```\r\n\r\nThis commit fixes that, and adds a test to see if we push the correct packages.",
"is_bot": false,
"headline": "buildcache push: ensure bool arguments for include_* (#35632)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-23T00:44:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e27d3c4f754e2d3d67f6e4c2754e8acb4e655754",
"body": "Additional functionality, per https://collier.hepforge.org/releasehist.html. No mention of build changes.",
"is_bot": false,
"headline": "collier: new versions 1.2.6, 1.2.7 (#35580)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-22T21:18:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5545fd34c071fd699b1c1d88fe9e335d46668a7c",
"body": "* py-mpi4jax: add new package\r\n* [@spackbot] updating style on behalf of adamjstewart\r\n\r\n---------\r\n\r\nCo-authored-by: adamjstewart <adamjstewart@users.noreply.github.com>",
"is_bot": false,
"headline": "py-mpi4jax: add new package (#35551)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-22T21:12:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ebf9f65c0f5642e597bd190e4d6d48f2f813dea",
"body": "* Add CCE support to hipfort\r\n* Update package.py",
"is_bot": false,
"headline": "Add CCE support to hipfort (#35609)",
"author_name": "luker",
"author_login": "lukebroskop",
"committed_at": "2023-02-22T18:59:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3be9af8c135e1d55697fa67d1d6e3a2a0fd7909d",
"body": "This error shows up a lot, typically it's harmless because an error\r\nhappened before the source build even started, in which case we don't\r\nhave build logs to copy. So, warn instead of error, cause it distracts\r\nfrom the actual CI error.",
"is_bot": false,
"headline": "copy_files_to_artifacts: error -> warning (#35613)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-22T11:53:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e477d547d82ef1407c55aec1ec8044303f99de4",
"body": null,
"is_bot": false,
"headline": "add cdash arg to source build only (#35565)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-22T10:08:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d6630e24530ce981378378f9a138e3dc52ad96f",
"body": "Currently we attempt to setup the build environment even when\r\ndependencies are not installed, which typically results in error while\r\nsearching for libraries or executables in a dependency's prefix.\r\n\r\nWith this change, we get a more user friendly error:\r\n\r\n```\r\n$ spack build-env perl\r\n==> Error: N\n[…]\ntem=generic arch=darwin-ventura-m1\r\n - jq2plbe ^berkeley-db@18.1.40%apple-clang@14.0.0+cxx~docs+stl build_system=autotools patches=26090f4,b231fcc arch=darwin-ventura-m1\r\n...\r\n$ echo $?\r\n1\r\n```",
"is_bot": false,
"headline": "spack build-env: error when deps are not installed (#35533)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-22T09:35:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8d15e816bf7388774e65ca59daf3831b4fa4180",
"body": "* Allow users to specify root env dir\r\n\r\nEnvironments managed by spack have some advantages over anonymous Environments\r\nbut they are tucked away inside spack's directory tree. This PR gives\r\nusers the ability to specify where the environments should live.\r\n\r\nSee #32823\r\n\r\nThis is also taken as an o\n[…]\ntter persisted.\r\n\r\nCo-authored-by: Tom Scogland <scogland1@llnl.gov>\r\nCo-authored-by: Tamara Dahlgren <35777542+tldahlgren@users.noreply.github.com>\r\nCo-authored-by: Gregory Becker <becker33@llnl.gov>",
"is_bot": false,
"headline": "Allow users to specify root env dir (#32836)",
"author_name": "psakievich",
"author_login": "psakievich",
"committed_at": "2023-02-22T00:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a233ce83a82e75d6a83568fb36460f5d62eb857",
"body": "* Update exago w/ 1.5.1 and small updates to hiop.\r\n* Fix styling.\r\n* Add RAJA back to ExaGO package.\r\n* Update RAJA requirement for ExaGO and HiOp.\r\n* Update last RAJA requirement in HiOp.",
"is_bot": false,
"headline": "ExaGO 1.5.1 release (#35595)",
"author_name": "Cameron Rutherford",
"author_login": null,
"committed_at": "2023-02-21T22:56:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27ee08f5bba55ac188cc89d234d0f3ece203426e",
"body": "* Improved MPI launcher search for smoke tests\r\n* Improving mpi launcher search\r\n* Removing redundant logic",
"is_bot": false,
"headline": "Package slate: Improved MPI launcher search for smoke tests (#35448)",
"author_name": "G-Ragghianti",
"author_login": "G-Ragghianti",
"committed_at": "2023-02-21T21:10:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb4c60c70928c034f8c3cd77d66331b0cb906276",
"body": "This reverts commit 5b8917188a4d84713c1037fd9464bf77503edd27.",
"is_bot": false,
"headline": "Revert \"Disable module generation by default (#35564)\" (#35603)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2023-02-21T20:53:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e84dcd7ef999e2659822b34372515175f1723c4",
"body": "* root: new version 6.28.00\r\n Full changelog: https://github.com/root-project/root/compare/v6-26-10...v6-28-00\r\n Based on the CMakeLists.txt file, no major build system changes. Upgraded requirements for cmake added.\r\n* root: variant jemalloc deprecated\r\n* root: rm define gsl_shared because unused\n[…]\n://github.com/root-project/root/pull/12203 (and has always been unused)\r\n* [@spackbot] updating style on behalf of wdconinc\r\n\r\n---------\r\n\r\nCo-authored-by: wdconinc <wdconinc@users.noreply.github.com>",
"is_bot": false,
"headline": "root: new version 6.28.00 (#35556)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-21T20:20:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "447ad2a3e360f7534a5d6fa1c5e96da61cd07dd0",
"body": "* Add new sphinx rtd theme release 1.2.0\r\n\r\nThe new release helps with supporting more recent version of docutils\r\n\r\n* set docutils officially supported version\r\n\r\n* add jquery dependency for sphinx-rtd-theme\r\n\r\n* add conflict with jquery version\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmai\n[…]\n* set sphinx version\r\n\r\n* fix sha256\r\n\r\n* add version for flit-core\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n---------\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>",
"is_bot": false,
"headline": "Add new sphinx rtd theme release 1.2.0 (#35579)",
"author_name": "MicK7",
"author_login": "MicK7",
"committed_at": "2023-02-21T19:53:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6f65ff4952e5449b74387a068b0daf5a91d820a1",
"body": null,
"is_bot": false,
"headline": "py-nbmake: add new versions (#35591)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-21T19:46:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16adda3db95fc9eceafbf8ee0969c1af89db419d",
"body": "* py-jax: add v0.4.3\r\n\r\n* Minimum version is minimum\r\n\r\n* py-jax no longer has cuda variant\r\n\r\n* Enable CUDA by default\r\n\r\n* Link to discussion of upper bound",
"is_bot": false,
"headline": "py-jax: add v0.4.3 (#35460)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-21T19:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cddef35ef83487db21a1900f951f0312969c0afa",
"body": null,
"is_bot": false,
"headline": "cmake: changed the regex to search for externals (#31688)",
"author_name": "Oliver Perks",
"author_login": null,
"committed_at": "2023-02-21T16:29:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1636c89aba1e32f069988a099d4aaa1b80313856",
"body": "* add pyedr\r\n\r\n* black\r\n\r\n* add panedr\r\n\r\n* Update var/spack/repos/builtin/packages/py-pyedr/package.py\r\n\r\n* Update var/spack/repos/builtin/packages/py-panedr/package.py\r\n\r\n* Update var/spack/repos/builtin/packages/py-pyedr/package.py\r\n\r\n* Update var/spack/repos/builtin/packages/py-pyedr/package.py\r\n[…]\n* Update var/spack/repos/builtin/packages/py-pyedr/package.py\r\n\r\n* Update var/spack/repos/builtin/packages/py-panedr/package.py\r\n\r\n---------\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>",
"is_bot": false,
"headline": "Add pyedr and panedr (#35576)",
"author_name": "Rocco Meli",
"author_login": "RMeli",
"committed_at": "2023-02-21T15:55:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9110f5dfb6718cfa9eeb39e8bddc2c954d639505",
"body": null,
"is_bot": false,
"headline": "ant: add v1.10.13 and deprecate previous versions due to CVE (#35572)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-21T14:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc24a8f2906203beb69a5477d43d7cda3cfdb4eb",
"body": "The call:\r\n```\r\nx.satisfies(y[, strict=False])\r\n```\r\nis commutative, and tests non-empty intersection, whereas:\r\n```\r\nx.satsifies(y, strict=True)\r\n```\r\nis not commutative, and tests set-inclusion.\r\n\r\nThere are 2 fast paths. When strict=False both self and other need to \r\nbe concrete, when strict=True we can optimize when other is concrete.",
"is_bot": false,
"headline": "Spec.satisfies should be commutative when strict=False (#35598)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-21T13:30:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33bf1fd033af872d60f3878aaac3318c78ae2719",
"body": null,
"is_bot": false,
"headline": "nonexistent module concise error message (#35502)",
"author_name": "simon-Leary42",
"author_login": "simon-Leary42",
"committed_at": "2023-02-21T12:50:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b8917188a4d84713c1037fd9464bf77503edd27",
"body": "a) It's used by site administrators, so it's niche\r\nb) If it's used by site administrators, they likely need to modify the config anyhow, so the default config only serves as an example to get started\r\nc) it's too arbitrary to enable tcl, but disable lmod",
"is_bot": false,
"headline": "Disable module generation by default (#35564)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-21T09:00:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbd5c5c2cdc6761cb6cd5dfd2d0c33fdfcdb1712",
"body": null,
"is_bot": false,
"headline": "superlu-dist: extend when to apply a patch (#32985)",
"author_name": "luker",
"author_login": "lukebroskop",
"committed_at": "2023-02-21T06:41:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55e3026152d40ab4df074d404929ba2b66a0d020",
"body": null,
"is_bot": false,
"headline": "ccls: add v0.20220729 (#35593)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2023-02-21T06:13:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "874f76e45e80c96e9ffa2522671ed81ccc3d4e95",
"body": "See #29340\r\n\r\nCo-authored-by: Nat Shineman <shineman.5@buckeyemail.osu.edu>",
"is_bot": false,
"headline": "mvapich2: update checksum (#35587)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2023-02-21T05:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebc24b7063ba9a8eb43b4424aac5143cf958d76f",
"body": null,
"is_bot": false,
"headline": "dd4hep: extend conflict on CMake (#27125)",
"author_name": "Thomas Madlener",
"author_login": "tmadlener",
"committed_at": "2023-02-21T05:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce9f8143ccfb9e3e2df870420e555c36b5533034",
"body": "Co-authored-by: Harmen Stoppels <harmenstoppels@gmail.com>",
"is_bot": false,
"headline": "Fix view support for optional Python extensions (#35489)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-20T19:58:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1ff7bbf04a27f483770c4351e662d7fa8f76686",
"body": "Spack generally ignores file-file projection clashes in environment\r\nviews, but would eventually error when linking the `.spack` directory\r\nfor two specs of the same package.\r\n\r\nThis leads to obscure errors where users have no clue what the issue is\r\nand how to fix it. On top of that, the error come\n[…]\npec's .spack metadir). If there are clashes, a\r\nhuman-readable error is thrown which shows two of the conflicting specs,\r\nand tells users to user unify:true, view:false, or set up custom\r\nprojections.",
"is_bot": false,
"headline": "environment views: better, earlier error on clash (#35541)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-20T18:14:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aa708c89812711caaecb4033e2a66c98128a9d5a",
"body": "* add pytng\r\n\r\n* black\r\n\r\n* add setuptools\r\n\r\n* fix\r\n\r\n* Update var/spack/repos/builtin/packages/py-pytng/package.py\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n* Update var/spack/repos/builtin/packages/py-pytng/package.py\r\n\r\n* Update var/spack/repos/builtin/packages/py-pytng/package.py\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n---------\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>",
"is_bot": false,
"headline": "Add pytng (#35575)",
"author_name": "Rocco Meli",
"author_login": "RMeli",
"committed_at": "2023-02-20T17:15:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "712d358f7e213a664288189a7f31ba6e7d6f9573",
"body": null,
"is_bot": false,
"headline": "apptainer use the --with-suid configure option (#35513)",
"author_name": "simonleary-umass-edu",
"author_login": "simonLeary42",
"committed_at": "2023-02-20T16:39:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8238fe330f3761a0537232807ce0b32d3535b3e",
"body": null,
"is_bot": false,
"headline": "Patchel shutil.copystat to avoid PermissionError on Lustre (#27247)",
"author_name": "Ben Wibking",
"author_login": "BenWibking",
"committed_at": "2023-02-20T16:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8a19aa089cb3d0efc819774b178098cb8dbc188",
"body": null,
"is_bot": false,
"headline": "Add Alluxio v2.9.1 and deprecate previous versions due to CVE (#35574)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-20T15:54:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a844a971af8d49ca848c8decd58c92bb7fb8d5c",
"body": "…813 (#35571)",
"is_bot": false,
"headline": "httpd: add v2.4.55 and deprecate previous versions due to CVE-2022-31…",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-20T15:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e337d907b9a67055f127a73b0c2ba37ed317d1d",
"body": null,
"is_bot": false,
"headline": "spack ci: remove 120s db timeout since 60s is the default now (#35566)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-20T13:41:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "208c9585b8c8974180eff77275361f48d3197cf5",
"body": "…#33122)\" (#35077)\n\nThis reverts commit c721aab0067e127cd9db6a4eb919747814549b4f.",
"is_bot": false,
"headline": "Revert \"lib/spack/spack/store.py: Fix #28170 for padding relocation (…",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-20T12:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ae4ca611ebdc1c3fb8dba4ee4505814bd79a908",
"body": null,
"is_bot": false,
"headline": "Add restic v0.15.1 (#35563)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-20T11:53:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54eddb2301bc4826db12db0a36c790bf1cf35803",
"body": null,
"is_bot": false,
"headline": "Add py-python-lsp-server v1.7.1 (#35561)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-20T11:52:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01dafb80477d2282d5b0dda3e402a559c23f1e80",
"body": null,
"is_bot": false,
"headline": "Add activemq v5.17.3 and deprecate previous version due to CVE (#35573)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-20T11:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ef2c33b0ef6106721ba5326b1f042611034c353",
"body": null,
"is_bot": false,
"headline": "scale mpi dependency is incorrect (#35385)",
"author_name": "Greg Becker",
"author_login": "becker33",
"committed_at": "2023-02-20T10:49:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beddf4dcc4005cc4f4c549f0551a47eb228ac5ca",
"body": "* xyce: add maintainer\r\n\r\n* xyce: add patch for pymi parameter merge",
"is_bot": false,
"headline": "xyce: add patch for pymi parameter merge and add maintainer (#35421)",
"author_name": "Paul Kuberry",
"author_login": "kuberry",
"committed_at": "2023-02-20T10:37:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1430654485b5aef327808b2322b734b733daccf",
"body": "…s (#35560)",
"is_bot": false,
"headline": "Add go v1.20.1, 1.19.6 and un-deprecate previous versions without CVE…",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-20T10:33:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d9ea0742479f8da176dbeb58ef380e721b67669",
"body": "… cmake configs (#35494)\n\nKokkos when compiled by spack without +wrapper could potentially capture the spack compiler wrappers, resulting in cmake configs and kokkos_launch_compiler trying to run the spack compiler wrapper after installation.",
"is_bot": false,
"headline": "Fix kokkos package.py to filter spack wrappers in launch compiler and…",
"author_name": "Patrick Bridges",
"author_login": "patrickb314",
"committed_at": "2023-02-20T09:23:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c769582709ebcf845118ffe76b9f5b3aeb6eb5a5",
"body": "…5290)\n\nto make the workaround for #29447 work with `concretizer:unify:true` option",
"is_bot": false,
"headline": "Pass `tests` argument to solver method when concretizing together (#3…",
"author_name": "elenimath",
"author_login": "elenimath",
"committed_at": "2023-02-20T09:21:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1958c2f9861b8d07ff85835b3cb2f3ad56ce9e7d",
"body": null,
"is_bot": false,
"headline": "Update xtb 6.6.0 (#35436)",
"author_name": "Sebastian Ehlert",
"author_login": "awvwgk",
"committed_at": "2023-02-20T09:17:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3016da79fe7d45540442c9bc0e89ae14ab571c86",
"body": null,
"is_bot": false,
"headline": "Add GNINA and related packages (#35439)",
"author_name": "Rocco Meli",
"author_login": "RMeli",
"committed_at": "2023-02-20T09:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0500a3cec05c353efc01e147d140901b2f638d51",
"body": null,
"is_bot": false,
"headline": "py-torchbenchmark: add new package (#35443)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-20T09:12:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "313797e3d437e060a47643c3687472b1f4a51e7b",
"body": null,
"is_bot": false,
"headline": "Update for v5.0.4 release. (#35511)",
"author_name": "Emil Briggs",
"author_login": "elbriggs",
"committed_at": "2023-02-20T08:52:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae189cfab8d9036e8d39bbd3f1b61b400d1fcd5b",
"body": "Bugfix release only. No changes in build system.",
"is_bot": false,
"headline": "geant4: new version 11.1.1 (#35528)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-20T08:47:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c09ab174b437224d420da959c1b583c809f1b3c",
"body": "* acts: new versions 23.1.0, 23.2.0, 23.2.1\r\n\r\n- https://github.com/acts-project/acts/compare/v23.0.0...v23.1.0: no changes needed to package.py\r\n- https://github.com/acts-project/acts/compare/v23.1.0...v23.2.0: no changes needed to package.py\r\n- https://github.com/acts-project/acts/compare/v23.2.0.\n[…]\n8 (and updated list_url)\r\n\r\n* acts: depends_on actsvg@0.4.28: when acts@23.2: +svg\r\n\r\n* autodiff: new version 0.6.5-0.6.12 (and list_url fix)\r\n\r\n* vecmem: new versions 0.13.0-0.22.0 (and list_url fix)",
"is_bot": false,
"headline": "acts: new versions 23.1.0, 23.2.0, 23.2.1 (#35540)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-20T08:42:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c14b6b80cc63a5bf4eb541700a9311a42035e082",
"body": "Mostly minor changes in random and support for c++20. No build system changes needed.\r\n\r\nRef: https://gitlab.cern.ch/CLHEP/CLHEP/-/compare/CLHEP_2_4_6_2...CLHEP_2_4_6_4",
"is_bot": false,
"headline": "clhep: new versions 2.4.6.2, 2.4.6.3, 2.4.6.4 (#35542)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-20T08:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "899d2708a37957f073a63a04acc5ab41602a2c57",
"body": "https://gitlab.com/hepcedar/lhapdf/-/compare/lhapdf-6.5.3...lhapdf-6.5.1: bugfixes only",
"is_bot": false,
"headline": "lhapdf: new versions 6.5.2, 6.5.3 (#35543)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-20T08:41:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ccc2e1a8e75225f86edd0c148bb2d9f4a4c5096",
"body": "https://gitlab.tp.nt.uni-siegen.de/whizard/public/-/compare/v3.0.3...v3.1.0, no changes to package.py needed.",
"is_bot": false,
"headline": "whizard: new version 3.1.0 (#35550)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-20T08:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c01d3ba356f1b006d2a45a4695640750e277cb9",
"body": null,
"is_bot": false,
"headline": "Fix broken links in docs (#35582)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-20T08:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81f11d55624b9a3513d9b8f48b82dd69cf332b33",
"body": "* `py-pyarrow`: fix build environment\r\n\r\n* Use `satisfies()` for specs",
"is_bot": false,
"headline": "`py-pyarrow`: fix build environment (#35567)",
"author_name": "Thomas Bouvier",
"author_login": "thomas-bouvier",
"committed_at": "2023-02-19T20:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "747f032ec227d61399793252e086eae7fc9fa675",
"body": null,
"is_bot": false,
"headline": "pandoc: disable texlive variant by default (#35569)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-19T12:22:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97ea182ee0f4f2445e2e03211ca99323a0bdca04",
"body": null,
"is_bot": false,
"headline": "hugo: add v0.110.0, v0.108.0, v0.107.0 (#35562)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2023-02-18T23:19:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "011c28a5380d8a63c489eb1b97c3f8d0a50918d4",
"body": "Fix a race in the makefile where the shared lib was built before the\r\nobject files were available.\r\n\r\nSee https://github.com/xianyi/OpenBLAS/issues/3899",
"is_bot": false,
"headline": "openblas: fix prereqs / make race (#35395)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-18T20:27:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86320eb5699036698d03b23c9cbf2dbf75422880",
"body": "The checksum exception was not detailed enough and not reraised when using cache only, resulting in useless error messages.\n\nNow it dumps the file path, expected\nhash, computed hash, and the downloaded file summary.",
"is_bot": false,
"headline": "Improve error handling in buildcache downloads (#35568)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-18T18:22:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c42a4ec1ec3ea8b339752c9257d91f0e07c254b1",
"body": null,
"is_bot": false,
"headline": "Ignore black reformat in git blame (#35544)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-18T09:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb644de086a222ee8335910a0ff9b010ed4d60d7",
"body": null,
"is_bot": false,
"headline": "clang/apple-clang correct c/c++ standard flags (#35062)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-17T22:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "352d56d6b0ed97de3859ab98e6272a2c7682f6d1",
"body": "* package_qgis_add_v328\r\n\r\n* restore long term release\r\n\r\n---------\r\n\r\nCo-authored-by: sbulut <sbulut@3vgeomatics.com>",
"is_bot": false,
"headline": "package_qgis_add_v328 (#35500)",
"author_name": "Sinan",
"author_login": "Sinan81",
"committed_at": "2023-02-17T20:58:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b711d5a6a4862e72cda002ea068e4cdf8da2aceb",
"body": "…packpp (#35521)",
"is_bot": false,
"headline": "Moving official repo and download locations for slate, blaspp, and la…",
"author_name": "G-Ragghianti",
"author_login": "G-Ragghianti",
"committed_at": "2023-02-17T17:58:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "983c68cc30be337bfcd1711bb0b95431fefbb2e1",
"body": null,
"is_bot": false,
"headline": "py-pyinstrument: add v4.4.0 (#35525)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-17T12:35:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d8d538a710978c5f58838538de26e5f36e3fe15",
"body": "Bugfixes only, https://gitlab.cern.ch/gaudi/Gaudi/-/compare/v36r9...v36r10",
"is_bot": false,
"headline": "gaudi: add v36.10 (#35527)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2023-02-17T12:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa3ced52421d6e546628db50320176c7e47b9f97",
"body": null,
"is_bot": false,
"headline": "add PIC flag in mpi-serial build (#35524)",
"author_name": "Jim Edwards",
"author_login": "jedwards4b",
"committed_at": "2023-02-17T12:27:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73fcda19d21d05cbb48dfa4633d80099e30959c0",
"body": null,
"is_bot": false,
"headline": "armcomputelibrary: new package (#35515)",
"author_name": "Annop Wongwathanarat",
"author_login": "annop-w",
"committed_at": "2023-02-17T12:14:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65ee062bf6c9bfaa123b8c6463c2f9410a52d57d",
"body": null,
"is_bot": false,
"headline": "Fix build for scine-xtb (#35386)",
"author_name": "Sebastian Ehlert",
"author_login": "awvwgk",
"committed_at": "2023-02-17T12:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "573f7bf4cd72fc5ca0be324208f202c551c4dc26",
"body": "Batch scripts in general will not function without carriage return line\r\nendings on Windows. We rely on these scripts to support cmd, so we\r\nshould not allow these scripts to be converted to lf.\r\n\r\nNote: Windows 11 supports lf line endings due to the use of Windows\r\nTerminal. Once support for Windows 10 is dropped, this change can be\r\nreverted.",
"is_bot": false,
"headline": "Windows: enforce carriage return for .bat files (#35514)",
"author_name": "John W. Parent",
"author_login": "johnwparent",
"committed_at": "2023-02-17T12:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f3f4b38e858ee93627fdd82bed33d2edf55e000",
"body": "The latest is 3.33.",
"is_bot": false,
"headline": "fio: add a new version (#35522)",
"author_name": "H. Joe Lee",
"author_login": "hyoklee",
"committed_at": "2023-02-17T12:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "476a29e1b6ab576782fad83ae901aea84fb52d66",
"body": "When running many concurrent spack install processes that need to write\r\nto the db, Spack regularly times out. This is because writing to the DB\r\nafter another process has written to it requires deserialization of the\r\ndb, mutating it in memory, and serializing it again, which takes some\r\ntime. On top of that, I believe there's a 1 second retry when a write\r\nlock cannot be obtained, so I think this means only 3 processes can\r\nreally write to the DB at the same time before timing out.",
"is_bot": false,
"headline": "Increase db timeout 3s -> 60s (#35517)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-17T07:42:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "603569e321013a1a63a637813c94c2834d0a0023",
"body": "* Style: black 23, skip magic trailing commas\r\n\r\n* isort should use same line length as black\r\n\r\n* Fix unused import\r\n\r\n* Update version of black used in CI\r\n\r\n* Update new packages\r\n\r\n* Update new packages",
"is_bot": false,
"headline": "Style: black 23, skip magic trailing comma (#35351)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-17T05:06:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9358099488b6c9851e28ca912c8be246178974a",
"body": "* Update package.py\r\n\r\nInitial new stuff\r\n\r\n* Update package.py\r\n\r\n* Update package.py\r\n\r\n* Update package.py\r\n\r\n* fix targets\r\n\r\n* non-llvm backends\r\n\r\n* ooops\r\n\r\n* fix style\r\n\r\n* Somehow that was not caught?\r\n\r\nSomehow that was not caught?\r\n\r\n* style\r\n\r\n* Last fix\r\n\r\nmake capitalization consistent with Halide not LLVM...",
"is_bot": false,
"headline": "Halide: new variants and bug fixes (#35495)",
"author_name": "Teo",
"author_login": "wraith1995",
"committed_at": "2023-02-17T04:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b278a024069f12ba90d983d7652413f37ec977eb",
"body": null,
"is_bot": false,
"headline": "py-pynrrd: new package (#35505)",
"author_name": "Erik Heeren",
"author_login": "heerener",
"committed_at": "2023-02-17T04:52:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ff64b16273584bfda93f749a65b632bc40d1014",
"body": "* py-cmake-format: new version, new variants\r\n\r\n* Update var/spack/repos/builtin/packages/py-cmake-format/package.py\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n---------\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>",
"is_bot": false,
"headline": "py-cmake-format: new version, new variants (#35485)",
"author_name": "Erik Heeren",
"author_login": "heerener",
"committed_at": "2023-02-17T04:51:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fc5ef8c58963aed81392b24351e0c9f2d139096",
"body": null,
"is_bot": false,
"headline": "py-luigi: add v3.2.0 (#35507)",
"author_name": "genric",
"author_login": "genric",
"committed_at": "2023-02-17T04:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "946816d78701d7c93697ab7201444d0160ed6105",
"body": "* py-cufflinks: new package version with 0.17.3\r\n\r\n* Update var/spack/repos/builtin/packages/py-cufflinks/package.py\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n---------\r\n\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>",
"is_bot": false,
"headline": "py-cufflinks: new package version with 0.17.3 (#35427)",
"author_name": "Christopher Christofi",
"author_login": "ChristopherChristofi",
"committed_at": "2023-02-17T04:43:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03fb5c6aa9785ab3b19a0ffc2df6f38429934517",
"body": null,
"is_bot": false,
"headline": "py-fiona: python is a link dep (#35516)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2023-02-17T01:56:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68f82357c8d59e8b1b5988e188b3b439922964ed",
"body": "Co-authored-by: Umashankar Sivakumar <Umashankar.Sivakumar@amd.com>",
"is_bot": false,
"headline": "added support zen4 support for gromacs (#35503)",
"author_name": "AMD Toolchain Support",
"author_login": "amd-toolchain-support",
"committed_at": "2023-02-17T00:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f073a9d5893bd7dab1899b1a1c1bb609b2ad9a3e",
"body": "* dakota: run acceptance tests\r\n* dakota: updated style guide",
"is_bot": false,
"headline": "dakota: run acceptance tests (#29654)",
"author_name": "Andrew-Dunning-NNL",
"author_login": "Andrew-Dunning-NNL",
"committed_at": "2023-02-17T00:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d17cc42a48185f667a1cf62856b47e551152acf1",
"body": null,
"is_bot": false,
"headline": "fuse-overlayfs: add v1.10 (#35512)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2023-02-17T00:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04682057519bc8300b6064e522f15643a71ba9fb",
"body": "Co-authored-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "rdma-core: add static variant (#35308)",
"author_name": "Andrew-Dunning-NNL",
"author_login": "Andrew-Dunning-NNL",
"committed_at": "2023-02-17T00:01:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68b711c1ad7157930154fc37f4a912aaf325fbfb",
"body": "Specs that did not contribute any files to an env view caused a problem\r\nwhere zip(specs, files grouped by prefix) got \"out of sync\", causing the\r\nwrong merge map to be passed to a package's `add_files_to_view`, which\r\nspecifically caused an issue where *sometimes* bin/python ended up as a\r\nsymlink \n[…]\n test feels a bit contrived, but it captures the problem... pkg a is\r\nadded first and has 0 files to contribute, pkg b adds a single file, and\r\nwe check if pkg b receives a merge map (and a does not).",
"is_bot": false,
"headline": "view: fix issue with non-contributing specs (#34661)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-16T18:36:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69369429b6f3cc215a061823c1c7c9aab52b441c",
"body": null,
"is_bot": false,
"headline": "esmf: use setup_build_environment instead of edit (#35249)",
"author_name": "Alex Richert",
"author_login": "AlexanderRichert-NOAA",
"committed_at": "2023-02-16T18:01:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f360ce70359a58e2b2c972d5472cb7bd6a8dd471",
"body": "Co-authored-by: Harmen Stoppels <harmenstoppels@gmail.com>",
"is_bot": false,
"headline": "openssl: New version 1.1.1t (#35419)",
"author_name": "Erik Schnetter",
"author_login": "eschnett",
"committed_at": "2023-02-16T17:48:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96ac4c7f98cf60ad2ee74763a454491d1e75ed21",
"body": null,
"is_bot": false,
"headline": "simplify cdash filename (#35509)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-16T17:25:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df72ba0d464a0baa7db5e22ac1bb9e7e2bf75013",
"body": "* pfunit: add v4.6.3\r\n\r\n* pfunit: use CMakePackage methods to define arguments\r\n\r\n* pfunit: deprecate v3.X, make a variant conditional\r\n\r\n* pfunit: simplify setting up environment variables\r\n\r\nReading the docs it seems only v3\r\nneeds F90_VENDOR to be set\r\n\r\n* pfunit: fix option names\r\n\r\nThe names set before were unused\r\n\r\n* pfunit: shared libraries seem not to be supported\r\n\r\nSee https://github.com/Goddard-Fortran-Ecosystem/pFUnit/issues/308#issuecomment-874725759",
"is_bot": false,
"headline": "pfunit: add v4.6.3, clean up recipe (#35510)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2023-02-16T17:10:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2e6da36ef42c1f21c75d3ffa5b581c321da5b33",
"body": null,
"is_bot": false,
"headline": "openblas: Use more stable URL as source (#35428)",
"author_name": "Mosè Giordano",
"author_login": "giordano",
"committed_at": "2023-02-16T17:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "832c43558844dc5204d702934bd7820f179ecdb7",
"body": null,
"is_bot": false,
"headline": "gromacs: add 2021.7, 2022.5, 2023, and some requirements (#35413)",
"author_name": "Carlos Bederián",
"author_login": "zzzoom",
"committed_at": "2023-02-16T16:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5079086019a6529fe5de0f62eddaa3b870226d2c",
"body": null,
"is_bot": false,
"headline": "cp2k: explicitly use C99 standard (#34957)",
"author_name": "Mosè Giordano",
"author_login": "giordano",
"committed_at": "2023-02-16T16:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfe06f694c5b9a32f435deba109037ef8e3d21bc",
"body": "* Add py-mlflow and its dependencies\r\n* mlflow: fix syntax error in package.py\r\n* py-mlflow: cleanup\r\n Process review remarks, add missing dependencies, add skinny variant\r\n* Apply suggestions from code review\r\n* Fix flake8 issues\r\n* More formatting fixes\r\n* Fix py-waitress dependency version\r\n* py\n[…]\n-----\r\n\r\nCo-authored-by: Tamara Dahlgren <35777542+tldahlgren@users.noreply.github.com>\r\nCo-authored-by: Adam J. Stewart <ajstewart426@gmail.com>\r\nCo-authored-by: Matthias Wolf <matthias.wolf@epfl.ch>",
"is_bot": false,
"headline": "Add py-mlflow and its dependencies (#34463)",
"author_name": "Erik Heeren",
"author_login": "heerener",
"committed_at": "2023-02-16T16:40:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae022e98d865c0709380ef98dc87d1c5246de720",
"body": null,
"is_bot": false,
"headline": "EVE 2023.02.15 update (#35493)",
"author_name": "Joel Falcou",
"author_login": "jfalcou",
"committed_at": "2023-02-16T16:26:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e1ba67e000cc689e4e0e314114fe4547349a2b0",
"body": null,
"is_bot": false,
"headline": "bump mochi-margo to 0.13 (#35499)",
"author_name": "Phil Carns",
"author_login": null,
"committed_at": "2023-02-16T16:21:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eea17107793a7e9dc57cd7ea065e7eb86864394",
"body": null,
"is_bot": false,
"headline": "thrift: add v0.17.0 (#35210)",
"author_name": "Thomas Bouvier",
"author_login": "thomas-bouvier",
"committed_at": "2023-02-16T15:57:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1734127b7aaa3699b2fd6d0cee7d71d5f415facb",
"body": null,
"is_bot": false,
"headline": "lammps: refactor variants, add new versions (#34011)",
"author_name": "Richard Berger",
"author_login": "rbberger",
"committed_at": "2023-02-16T15:43:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44ed0de8c077630148c213d3c7f40a8965eb6f94",
"body": null,
"is_bot": false,
"headline": "spack buildcache create: push all deps / cleanup (#34860)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-16T14:08:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09eb86e077d1273412862d773c169e03822adb82",
"body": "`spack gc` removes build deps of explicitly installed specs, but somehow\r\nif you take one of the specs that `spack gc` would remove, and feed it\r\nto `spack uninstall /<hash>` by hash, it complains about all the\r\ndependents that still rely on it.\r\n\r\nThis resolves the inconsistency by only following run/link type deps in\r\nspack uninstall.\r\n\r\nThat way you can finally do `spack uninstall cmake` without having to\r\nremove all packages built with cmake.",
"is_bot": false,
"headline": "spack uninstall: follow run/link edges on --dependents (#34058)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2023-02-16T13:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50691ccdd9d69a5a5e239bbdaa2d6199f1b8a153",
"body": "Default package requirements might contain\r\nvariants that are not defined in each package,\r\nso we shouldn't verify them when emitting facts\r\nfor the ASP solver.\r\n\r\nAccount for group when enforcing requirements\r\n\r\npackages:all : don't emit facts for requirement conditions\r\nthat can't apply to current spec",
"is_bot": false,
"headline": "Avoid verifying variants in default package requirements (#35037)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2023-02-16T10:57:26Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 27,
"commits_last_year": 0,
"latest_release_at": "2020-11-18T12:22:09Z",
"latest_release_tag": "v0.16.0",
"releases_from_tags": true,
"days_since_last_push": 30,
"active_weeks_last_year": 0,
"days_since_latest_release": 2076,
"mean_days_between_releases": 31.6
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"lib/spack/docs/Makefile",
"lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile",
"lib/spack/spack/test/data/make/affirmative/check_test/Makefile",
"lib/spack/spack/test/data/make/affirmative/expansion/Makefile",
"lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile",
"lib/spack/spack/test/data/make/affirmative/include/Makefile",
"lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile",
"lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile",
"lib/spack/spack/test/data/make/affirmative/spaces/Makefile",
"lib/spack/spack/test/data/make/affirmative/test_check/Makefile",
"lib/spack/spack/test/data/make/affirmative/three_targets/Makefile",
"lib/spack/spack/test/data/make/negative/partial_match/Makefile",
"lib/spack/spack/test/data/make/negative/variable/Makefile",
"share/spack/templates/depfile/Makefile",
"var/spack/repos/builtin/packages/alglib/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"lib/spack/external/_vendoring/attr/py.typed",
"lib/spack/external/_vendoring/attrs/py.typed",
"lib/spack/external/_vendoring/distro/py.typed",
"lib/spack/external/_vendoring/jinja2/py.typed",
"lib/spack/external/_vendoring/markupsafe/py.typed",
"lib/spack/external/_vendoring/pyrsistent/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 204739,
"source_files_sampled": 7980,
"oversized_source_files": 17,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "clingo",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
},
{
"name": "setuptools",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 10,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "tgamblin",
"commits": 2762,
"avatar_url": "https://avatars.githubusercontent.com/u/299842?v=4"
},
{
"type": "User",
"login": "adamjstewart",
"commits": 2552,
"avatar_url": "https://avatars.githubusercontent.com/u/12021217?v=4"
},
{
"type": "User",
"login": "alalazo",
"commits": 1464,
"avatar_url": "https://avatars.githubusercontent.com/u/4199709?v=4"
},
{
"type": "User",
"login": "haampie",
"commits": 788,
"avatar_url": "https://avatars.githubusercontent.com/u/194764?v=4"
},
{
"type": "User",
"login": "glennpj",
"commits": 786,
"avatar_url": "https://avatars.githubusercontent.com/u/16138574?v=4"
},
{
"type": "User",
"login": "iarspider",
"commits": 647,
"avatar_url": "https://avatars.githubusercontent.com/u/636602?v=4"
},
{
"type": "User",
"login": "becker33",
"commits": 621,
"avatar_url": "https://avatars.githubusercontent.com/u/13971568?v=4"
},
{
"type": "User",
"login": "michaelkuhn",
"commits": 607,
"avatar_url": "https://avatars.githubusercontent.com/u/4062614?v=4"
},
{
"type": "User",
"login": "darmac",
"commits": 571,
"avatar_url": "https://avatars.githubusercontent.com/u/29532367?v=4"
},
{
"type": "User",
"login": "davydden",
"commits": 520,
"avatar_url": "https://avatars.githubusercontent.com/u/8023934?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.124
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"audit.yaml",
"bootstrap.yml",
"build-containers.yml",
"ci.yaml",
"unit_tests.yaml",
"valid-style.yml",
"windows_python.yml"
],
"has_docs_dir": false,
"linter_configs": [
".flake8"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 90 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "internal error: internal error: invalid Dockerfile",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "6b27aebeb429d1f7c2bb450c49cd43270d1d007e",
"ran_at": "2026-07-26T19:09:24Z",
"aggregate_score": 4.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/tgamblin/spack",
"host": "github.com",
"name": "spack",
"owner": "tgamblin"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 0,
"pct": 85
}
}
],
"value": 37,
"inputs": {
"security": 47,
"vitality": 37,
"community": 9,
"governance": 57,
"engineering": 58,
"abandonment_cap": null,
"abandonment_state": "at_risk",
"abandonment_multiplier": 85,
"weighted_overall_before_abandonment": 43,
"overall_after_abandonment_multiplier": 37
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 37,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 1,
"days_since_last_push": 30,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 30 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 30
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 27,
"latest_release_tag": "v0.16.0",
"releases_from_tags": true,
"days_since_latest_release": 2076,
"mean_days_between_releases": 31.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "27 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 27
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2076 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2076
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~31.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 31.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"cap": null,
"state": "at_risk",
"guards": [
"no_open_demand"
],
"signals": [
"release_stall",
"scorecard_unmaintained"
],
"red_flag": true,
"multiplier_pct": 85,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1248,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 1248 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
"points": 85,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 1248,
"count": 2,
"signals": "releases stalled, Scorecard reports it unmaintained"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 9,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "excellent",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"bus_factor": 10,
"contributors_sampled": 99,
"top_contributor_share": 0.124
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "10 contributor(s) cover half of all commits",
"points": 54,
"status": "met",
"details": [
{
"code": "bus_factor",
"params": {
"count": 10
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 12% of commits",
"points": 19.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 12
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 90 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"followers": 272,
"owner_type": "User",
"is_verified": null,
"owner_login": "tgamblin",
"public_repos": 78,
"account_age_days": 5892
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "272 followers of tgamblin",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 272,
"login": "tgamblin"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "78 public repos, account ~16 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 78
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".flake8",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://spack.io",
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://spack.io",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Pinned-Dependencies, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"pinned_dependencies",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 4.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 90 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "internal error: internal error: invalid Dockerfile",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 69,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.98,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 86,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"lib/spack/docs/Makefile",
"lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile",
"lib/spack/spack/test/data/make/affirmative/check_test/Makefile",
"lib/spack/spack/test/data/make/affirmative/expansion/Makefile",
"lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile",
"lib/spack/spack/test/data/make/affirmative/include/Makefile",
"lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile",
"lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile",
"lib/spack/spack/test/data/make/affirmative/spaces/Makefile",
"lib/spack/spack/test/data/make/affirmative/test_check/Makefile",
"lib/spack/spack/test/data/make/affirmative/three_targets/Makefile",
"lib/spack/spack/test/data/make/negative/partial_match/Makefile",
"lib/spack/spack/test/data/make/negative/variable/Makefile",
"share/spack/templates/depfile/Makefile",
"var/spack/repos/builtin/packages/alglib/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"lib/spack/external/_vendoring/attr/py.typed",
"lib/spack/external/_vendoring/attrs/py.typed",
"lib/spack/external/_vendoring/distro/py.typed",
"lib/spack/external/_vendoring/jinja2/py.typed",
"lib/spack/external/_vendoring/markupsafe/py.typed",
"lib/spack/external/_vendoring/pyrsistent/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".flake8",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "dependency automation configured, none observed in the sampled commits",
"points": 5,
"status": "partial",
"details": [
{
"code": "dependency_bot_config_only",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "internal error: internal error: invalid Dockerfile",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 204739,
"source_files_sampled": 7980,
"oversized_source_files": 17
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "17/7980 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 7980,
"oversized": 17
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"Could not fetch pypi package 'spack' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-26T19:10:02.119543Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tgamblin/spack.svg",
"full_name": "tgamblin/spack",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.