Public recordGood
Software health reportschema 0.30.0 · metrics 2.5.0 · 2026-08-03 01:11 UTC
thecodingmachine / graphqlite-bundle
A Symfony bundle for thecodingmachine/graphqlite.
thecodingmachine/graphqlite-bundle holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Vitality (75/100) and lowest on AI Readiness (37/100). It was last updated today. 2 contributors account for most of its recent work.
71
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
71
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 63 is calibrated to 71 on the published index scale (record calibration 2026-08-02).
Ownership
TheCodingMachineOrganization
198 followers343 public repossince Jun 2012
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | thecodingmachine/graphqlite-bundle | v7.5.0 | 32,328 | 33 | 96 days ago | symfonybundlegraphql |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
75
Development activity
70Good
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 12.5/36 | Commit cadence — 18/52 weeks with commits |
| 16.3/18 | Commit volume — 65 commits in the last year |
| 5/10 | OpenSSF Scorecard: Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
Inputs used
| commits_last_year | 65 |
| human_commit_share | 0.83 |
| days_since_last_push | 0 |
| active_weeks_last_year | 18 |
Release discipline
82Excellent
How it's scored
| 27/27 | Ships releases — 33 releases published |
| 27/36 | Release recency — latest release 96 days ago |
| 19.8/27 | Release cadence — a release every ~53.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 33 |
| latest_release_tag | v7.5.0 |
| releases_from_tags | no |
| days_since_latest_release | 96 |
| mean_days_between_releases | 53.3 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
43
Popularity & adoption
45Weak
How it's scored
| 25.2/60 | Stars — 37 stars |
| 13.5/25 | Forks — 43 forks |
| 6/15 | Watchers — 13 watchers |
Inputs used
| forks | 43 |
| stars | 37 |
| watchers | 13 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25At Risk
How it's scored
| 22.5/22.5 | README |
| 0/22.5 | License — no license file detected |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | no |
| readme_badges | 3 |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | github.com, poser.pugx.org |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
64Moderate
How it's scored
| 60.1/80 | Monthly downloads — 32,328 downloads/month across packagist |
| 4/20 | Registry dependents — 3 packages depend on it |
Inputs used
| packages | thecodingmachine/graphqlite-bundle |
| dependents | 3 |
| ecosystems | packagist |
| total_downloads | 1,740,391 |
| monthly_downloads | 32,328 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
75
Maintainer resilience (bus factor)
60Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 11.6/22.5 | Commit distribution — top contributor authored 48% of commits |
| 13.5/13.5 | Contributor breadth — 22 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 5 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 22 |
| top_contributor_share | 0.484 |
How it's scored
| 40.2/42 | Issue resolution — 96% of issues closed |
| 18.3/30 | PR acceptance — 148/243 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 7.5/15 | OpenSSF Scorecard: Code-Review — Found 2/4 approved changesets -- score normalized to 5 |
Inputs used
| merged_prs | 148 |
| open_issues | 2 |
| closed_issues | 43 |
| prs_merged_7d | 0 |
| prs_decided_7d | 0 |
| prs_merged_30d | 0 |
| prs_decided_30d | 0 |
| issue_closed_ratio | 0.956 |
| closed_unmerged_prs | 95 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
72Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 16.5/25 | Owner reach — 198 followers of thecodingmachine |
| 25/25 | Track record — 343 public repos, account ~14 yr old |
Inputs used
| followers | 198 |
| owner_type | Organization |
| is_verified | — |
| owner_login | thecodingmachine |
| public_repos | 343 |
| account_age_days | 5,163 |
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 96 days ago |
| 20/20 | Version history — 33 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | thecodingmachine/graphqlite-bundle |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 96 |
Engineering Quality
Are baseline engineering and documentation practices in place?
69
Engineering practices
82Excellent
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — phpstan.neon |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 18/20 | OpenSSF Scorecard: CI-Tests — 9 out of 10 merged PRs checked by a CI test -- score normalized to 9 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
48
Security posture
48Weak
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.2/2.5 | CI-Tests — 9 out of 10 merged PRs checked by a CI test -- score normalized to 9 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 2/4 approved changesets -- score normalized to 5 |
| 2.5/2.5 | Contributors — project has 5 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | License — license file not detected |
| 3.8/7.5 | Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.8 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
37
Agent context & guidance
22At Risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 22.5/40 | Legible commit history — 35 of 83 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.422 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — phpstan.neon |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 17 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.17 |
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — PHP without a type-check config |
| 55/55 | Manageable file sizes — 0/39 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 22,014 |
| source_files_sampled | 39 |
| oversized_source_files | 0 |
Key facts
37GitHub stars
22contributors
65commits, last 12 months
0days since last push
33releases
2bus factor
2open issues
Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 43 ⇿
0Stars
43Forks
33Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 5Minor 9Patch 18
Each point covers 7 days.
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 9 | CI-Tests | 9 out of 10 merged PRs checked by a CI test -- score normalized to 9 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 2/4 approved changesets -- score normalized to 5 |
| 10 | Contributors | project has 5 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 5 | Maintained | 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 11
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | thecodingmachine/graphqlite | ^8.1 | composer.json |
| Packagist | thecodingmachine/graphqlite-symfony-validator-bridge | ^7.1.1 | composer.json |
| Packagist | symfony/config | ^6.4 || ^7.0 || ^8.0 | composer.json |
| Packagist | symfony/console | ^6.4 || ^7.0 || ^8.0 | composer.json |
| Packagist | symfony/framework-bundle | ^6.4 || ^7.0 || ^8.0 | composer.json |
| Packagist | symfony/validator | ^6.4 || ^7.0 || ^8.0 | composer.json |
| Packagist | symfony/translation | ^6.4 || ^7.0 || ^8.0 | composer.json |
| Packagist | symfony/psr-http-message-bridge | ^2.0 || ^7.0 || ^8.0 | composer.json |
| Packagist | nyholm/psr7 | ^1.1 | composer.json |
| Packagist | laminas/laminas-diactoros | ^2.2.2 || ^3 | composer.json |
| Packagist | thecodingmachine/cache-utils | ^1 | composer.json |
All dependencies 22
Full resolved dependency set from the GitHub dependency graph: 11 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | laminas/laminas-diactoros | — | direct |
| Packagist | nyholm/psr7 | — | direct |
| Packagist | symfony/config | — | direct |
| Packagist | symfony/console | — | direct |
| Packagist | symfony/framework-bundle | — | direct |
| Packagist | symfony/psr-http-message-bridge | — | direct |
| Packagist | symfony/translation | — | direct |
| Packagist | symfony/validator | — | direct |
| Packagist | thecodingmachine/cache-utils | — | direct |
| Packagist | thecodingmachine/graphqlite | — | direct |
| Packagist | thecodingmachine/graphqlite-symfony-validator-bridge | — | direct |
| Packagist | beberlei/porpaginas | — | indirect |
| Packagist | composer/package-versions-deprecated | — | indirect |
| Packagist | composer/semver | — | indirect |
| Packagist | ext-json | — | indirect |
| Packagist | overblog/graphiql-bundle | — | indirect |
| Packagist | php | — | indirect |
| Packagist | phpstan/phpstan | — | indirect |
| Packagist | phpstan/phpstan-symfony | — | indirect |
| Packagist | symfony/phpunit-bridge | — | indirect |
| Packagist | symfony/security-bundle | — | indirect |
| Packagist | symfony/yaml | — | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 453,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 100183
},
"pushed_at": "2026-08-03T01:02:31Z",
"created_at": "2019-01-29T15:32:17Z",
"owner_type": "Organization",
"updated_at": "2026-07-01T07:40:48Z",
"description": "A Symfony bundle for thecodingmachine/graphqlite. ",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": null,
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "http://www.thecodingmachine.com/",
"name": "TheCodingMachine",
"type": "Organization",
"login": "thecodingmachine",
"company": null,
"location": "Paris",
"followers": 198,
"avatar_url": "https://avatars.githubusercontent.com/u/1847918?v=4",
"created_at": "2012-06-13T20:20:33Z",
"is_verified": null,
"public_repos": 343,
"account_age_days": 5163
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v7.5.0",
"kind": "minor",
"published_at": "2026-04-28T06:21:20Z"
},
{
"tag": "v7.4.0",
"kind": "minor",
"published_at": "2026-01-02T15:49:44Z"
},
{
"tag": "v7.3.0",
"kind": "minor",
"published_at": "2025-12-23T09:48:30Z"
},
{
"tag": "v6.2.0",
"kind": "minor",
"published_at": "2025-12-17T15:03:39Z"
},
{
"tag": "v7.2.0",
"kind": "minor",
"published_at": "2025-11-30T09:47:37Z"
},
{
"tag": "v6.1.1",
"kind": "patch",
"published_at": "2025-08-06T12:27:40Z"
},
{
"tag": "v7.1.2",
"kind": "patch",
"published_at": "2025-07-08T05:42:53Z"
},
{
"tag": "v7.1.1",
"kind": "patch",
"published_at": "2025-06-06T15:30:57Z"
},
{
"tag": "v7.1.0",
"kind": "minor",
"published_at": "2025-01-06T19:18:22Z"
},
{
"tag": "v7.0.0",
"kind": "major",
"published_at": "2025-01-03T19:51:40Z"
},
{
"tag": "v6.1.0",
"kind": "minor",
"published_at": "2024-12-31T15:32:56Z"
},
{
"tag": "v6.0.3",
"kind": "patch",
"published_at": "2023-09-08T14:36:03Z"
},
{
"tag": "v6.0.2",
"kind": "patch",
"published_at": "2023-08-29T18:36:05Z"
},
{
"tag": "v6.0.1",
"kind": "patch",
"published_at": "2023-08-29T08:20:16Z"
},
{
"tag": "v6.0.0",
"kind": "major",
"published_at": "2023-08-04T09:40:34Z"
},
{
"tag": "v6.0.0-beta.0",
"kind": "prerelease",
"published_at": "2023-03-20T12:52:13Z"
},
{
"tag": "v5.4.0",
"kind": "minor",
"published_at": "2022-06-02T16:09:14Z"
},
{
"tag": "v5.0.0",
"kind": "major",
"published_at": "2021-11-09T14:50:28Z"
},
{
"tag": "v4.1.4",
"kind": "patch",
"published_at": "2021-06-22T08:30:41Z"
},
{
"tag": "v4.1.3",
"kind": "patch",
"published_at": "2021-05-31T07:05:14Z"
},
{
"tag": "v4.1.2",
"kind": "patch",
"published_at": "2020-12-08T11:19:06Z"
},
{
"tag": "v4.1.1",
"kind": "patch",
"published_at": "2020-12-08T08:50:51Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2020-12-07T14:46:22Z"
},
{
"tag": "v4.0.8",
"kind": "patch",
"published_at": "2020-06-08T11:03:55Z"
},
{
"tag": "v4.0.7",
"kind": "patch",
"published_at": "2020-05-11T13:10:41Z"
},
{
"tag": "v4.0.6",
"kind": "patch",
"published_at": "2020-03-06T15:06:34Z"
},
{
"tag": "v4.0.5",
"kind": "patch",
"published_at": "2020-02-21T21:16:18Z"
},
{
"tag": "v4.0.4",
"kind": "patch",
"published_at": "2020-01-30T09:26:44Z"
},
{
"tag": "v4.0.3",
"kind": "patch",
"published_at": "2020-01-24T09:31:39Z"
},
{
"tag": "v4.0.2",
"kind": "patch",
"published_at": "2020-01-13T13:25:45Z"
},
{
"tag": "v4.0.1",
"kind": "patch",
"published_at": "2020-01-08T10:46:38Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2020-01-08T10:23:25Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2019-04-26T12:41:06Z"
}
],
"recent_commits": [
{
"oid": "5b9198e867813fccbcd7688926c6fc773de3eb7b",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.37.1 to 2.37.2.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.37.1...2.37.2)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n dependency-version: 2.37.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump shivammathur/setup-php from 2.37.1 to 2.37.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T07:40:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ec72dcf619886c6947b75487781c76eb772efad",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5.0.5...v6.1.0)\n\n---\nupdated-dependenc\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 6.1.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 5.0.5 to 6.1.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T07:39:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8f40cb51ff3be98768b077844d7a20eee5caf92f",
"body": "…ns-actions-checkout-7\n\n⬆️ Bump actions/checkout from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #287 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-06-22T05:21:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea4b7625489c2bb0891eca08f3e68df69de1a683",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T01:02:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e289c0ba679ec902ec3b6fb720f28b086fad71b",
"body": "…ns/dot-github/workflows/shivammathur/setup-php-2.37.1\n\n⬆️ Bump shivammathur/setup-php from 2.36.0 to 2.37.1 in /.github/workflows",
"is_bot": false,
"headline": "Merge pull request #285 from thecodingmachine/dependabot/github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-05-20T20:29:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "252701ff5864a56110e0890fbb438c7a72ab05ec",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.36.0 to 2.37.1.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.36.0...2.37.1)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n dependency-version: 2.37.1\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump shivammathur/setup-php in /.github/workflows",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-20T15:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "730f70e5f49f1e1747b3fb864ae706d4fb1b122c",
"body": "[#282] Fix compatibility with GraphQLite 8.2. Improve CI - prefer lowest, run static analysis for the highest PHP version, PHP 8.5",
"is_bot": false,
"headline": "Merge pull request #283 from andrew-demb/ci",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-28T06:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebf769f86d37953f1c645788bff0c3df7b12ba23",
"body": null,
"is_bot": false,
"headline": ":package: [#282] Be compatible with graphqlite v8.1 also",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:42:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e65db59c2fd784ba35d7a3812b50a97a5b0349af",
"body": null,
"is_bot": false,
"headline": ":package: Mark cache directories as optional for phpstan",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:32:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0312d62ae3306aa92022b7ee095dd4ca957a5cee",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'ettoredn/patch-1' into ci",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:24:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d460637322f3ea12711e3b0b3d4837b3289dd61f",
"body": "```\nError: Call to undefined method Symfony\\Component\\Security\\Core\\User\\InMemoryUser::getSalt()\n\n/home/runner/work/graphqlite-bundle/graphqlite-bundle/vendor/symfony/password-hasher/Hasher/UserPasswordHasher.php:80\n```",
"is_bot": false,
"headline": ":package: Conflict with symfony/password-hasher version <6.4",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:14:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c3a66b5a4bed0ff91f57c5677494665986783a7",
"body": null,
"is_bot": false,
"headline": ":fire: Drop obsolete conflict rules",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:13:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d02d4b67aa0e24ea9296f5d6c62a4907d9e96a0",
"body": "Bug with webonyx for prefer lowest deps installation",
"is_bot": false,
"headline": ":package: Min GraphQLite 8.1",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:01:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "916297c71d5f1cb5ca7f3dc7a15beba86c309d0d",
"body": "Avoid fail because of the changed field order",
"is_bot": false,
"headline": ":package: Make test more stable",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:01:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d16a09dc64eb3f3fb2ed8122a86f182fb7380998",
"body": null,
"is_bot": false,
"headline": ":package: Make test more explicit about expectations",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T07:00:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8476e78fe629c7168137d5fa6f8645b77622a098",
"body": "…ver symfony/validator v7 + symfony/framework-bundle v6.4",
"is_bot": false,
"headline": ":package: Explicitly configure validation.email_validation_mode to co…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:59:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f70049a25af8444fab4b7fc59d3538c907aa68e",
"body": null,
"is_bot": false,
"headline": ":package: Avoid legacy array declaration form",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:57:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c7128187bed05d8948975324301007781673b78",
"body": null,
"is_bot": false,
"headline": ":package: Use PHP 8.5 for prefer lowest CI",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:28:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "094456940ae8695fe5f2c9edd8bd76be5fb02fc9",
"body": null,
"is_bot": false,
"headline": ":package: Add testing PHP 8.5 on CI",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:27:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc5e55d6ff8dc9b2311b01de332d61d5b907cb3f",
"body": "…4.0 with phpunit 11",
"is_bot": false,
"headline": ":package: Require minimal 6.4.35 phpunit bridge due to bugs in the 6.…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cc5dd8ccfb9b068ca5f60f0f9356d952cb74f49",
"body": null,
"is_bot": false,
"headline": ":package: Introduce CI job to run tests with lowest deps",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:24:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e75972fc2a5f3940ca0803d8d074cd4011a414f",
"body": null,
"is_bot": false,
"headline": ":package: Move static analysis into separate job",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-27T06:20:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd1b61cadd9596b5e2fa031a201e7acbb85f0680",
"body": null,
"is_bot": false,
"headline": "Update annotation retrieval to use getGraphQLElement",
"author_name": "Ettore Del Negro",
"author_login": "ettoredn",
"committed_at": "2026-04-22T19:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa87948e62b02817e1b3361227dfb8c203805cd7",
"body": "…ns-actions-cache-5.0.5\n\n⬆️ Bump actions/cache from 5.0.2 to 5.0.5",
"is_bot": false,
"headline": "Merge pull request #280 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2026-04-20T06:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4d9986d3a573b95d38607ed8d229bfbbb649f97",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 5.0.2 to 5.0.5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5.0.2...v5.0.5)\n\n---\nupdated-dependenc\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 5.0.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 5.0.2 to 5.0.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-20T01:02:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba8052f52950cc85d737ad39c40e96f79491327c",
"body": "…tion",
"is_bot": false,
"headline": ":recycle: Use GitHub concurrency instead of styfle/cancel-workflow-ac…",
"author_name": "Guillaume",
"author_login": "homersimpsons",
"committed_at": "2026-01-24T14:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7b08fdcd0f19c07a2e337ccdc0bdd4e658518fa",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 5.0.1 to 5.0.2.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5.0.1...v5.0.2)\n\n---\nupdated-dependenc\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 5.0.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 5.0.1 to 5.0.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-24T07:11:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bcd6eb5fa521c649376496552e96bf8d75335303",
"body": "- Moved `UploadMiddlewareUtils/` directory to `src/` (PSR-4)\n- Use `get_debug_type` instead of `get_class` in UploadMiddleware error message\n- Remove `assert($psr7Request instanceof ServerRequestInterface);` call as phpstan guarantee this because we have a `DummyResponseWithRequest`\n\n# Conflicts:\n#\tcomposer.json\n#\tsrc/Controller/GraphQLiteController.php",
"is_bot": false,
"headline": "Merge branch '6.x'",
"author_name": "Guillaume",
"author_login": "homersimpsons",
"committed_at": "2026-01-02T15:35:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "069a75c56324f681a92d5f50b483569427c19bfd",
"body": "Make overblog/graphiql-bundle optional",
"is_bot": false,
"headline": "Merge pull request #272 from charly-ffss/make-graphiql-optional",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-23T09:40:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf1db2ecd5262f21180e457a8fd028a343a2e15",
"body": null,
"is_bot": false,
"headline": "Make overblog/graphiql-bundle optional",
"author_name": "Charly Landet",
"author_login": "charly-ffss",
"committed_at": "2025-12-23T08:37:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a227d09099c1eaec42dfdce2d9bfab48bad7d0e7",
"body": "… cache version",
"is_bot": false,
"headline": ":package: Bump actions/cache to v5 to avoid failed CI with deprecated…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-17T15:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "857d35a05d9ba7cf22a7b72e3c56d51849f94d23",
"body": null,
"is_bot": false,
"headline": ":package: Resolve phpstan issue - PHP 8.4 deprecation",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-17T15:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119353e2ebe293290b1f483f692ec51b79d76384",
"body": null,
"is_bot": false,
"headline": ":package: Suggest installing `ecodev/graphql-upload` (v7/v8)",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-17T15:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d12fda4a8c596b378d70a0843d760ab8d89571ff",
"body": "…files",
"is_bot": false,
"headline": ":package: Fix middleware utils placement to be consistent with other …",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-17T15:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "128ac9cdc01748bef7c3922d720101ca7564161c",
"body": null,
"is_bot": false,
"headline": ":alien: Support ecodev/graphql-upload v8",
"author_name": "Guillaume",
"author_login": "homersimpsons",
"committed_at": "2025-12-17T15:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecc9dbc8324880dd318421f758c4d27e0cc34b9c",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.1.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v4.3.0...v5.0.1)\n\n---\nupdated-dependenc\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 5.0.1\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 4.3.0 to 5.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-16T21:48:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb644edac0e493eb30dc56b978dba8a0fc9f9a48",
"body": ":book: Improve readme",
"is_bot": false,
"headline": "Merge pull request #267 from andrew-demb/readme",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-08T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e50f63ec35427ca7a45c4e5123602a2177473de4",
"body": null,
"is_bot": false,
"headline": ":book: Improve readme",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-07T21:55:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b29e08b65767b41e158c141c33a076edf0219b11",
"body": "…ns-shivammathur-setup-php-2.36.0\n\n⬆️ Bump shivammathur/setup-php from 2.35.5 to 2.36.0",
"is_bot": false,
"headline": "Merge pull request #266 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-12-01T06:27:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "082878104912cf9c3ddded5cf99e2e69c91d43c5",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.35.5 to 2.36.0.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.35.5...2.36.0)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n dependency-version: 2.36.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump shivammathur/setup-php from 2.35.5 to 2.36.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-01T01:16:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aace1f117b85c4c5da3243453e95fb1a1978227b",
"body": "…ns-actions-cache-4.3.0\n\n⬆️ Bump actions/cache from 4.2.4 to 4.3.0",
"is_bot": false,
"headline": "Merge pull request #263 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-30T09:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30fb1e287725c13e2368c3c8538d67b26497800d",
"body": "…ns-actions-checkout-6\n\n⬆️ Bump actions/checkout from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #264 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-30T09:38:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5705eb0981996418acacf2c61cafcfa4752ce207",
"body": ":sparkles: Allow Symfony 8",
"is_bot": false,
"headline": "Merge pull request #265 from andrew-demb/symfony-8",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-30T09:37:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5a70a87563b9303d36d6e48e696f6f40f6aab29",
"body": null,
"is_bot": false,
"headline": ":package: Add parameter type - support for Symfony 4 was dropped before",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:50:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3103030b4a58c91778989d20e52f452e75964c9",
"body": "XML is deprecated by the Symfony for 7.4+",
"is_bot": false,
"headline": ":package: Migrate routes configuration to the PHP intead of XML",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:48:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6e464040f84c859c7f282ad5a1ea87952c67de1",
"body": null,
"is_bot": false,
"headline": ":book: Add link to the bundle docs",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:43:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a2ab1a063dad19708db9cd7ff001fa9b63e9a35",
"body": "… in phpstan",
"is_bot": false,
"headline": ":package: Adjust phpstan suppress according to changed error messages…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:28:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4150f11c058e99a89dafa2d13a6e606fa8613f9",
"body": "XML is deprecated by the Symfony for 7.4+",
"is_bot": false,
"headline": ":package: Migrate DI configuration to the PHP intead of XML",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:13:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b2efa4700c72f40409af164e8835c5ef013bfb0",
"body": null,
"is_bot": false,
"headline": ":package: Make tests a bit more restrictive and safe",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:12:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a4e0036a5b142e69c8affa056b5fb988c63b1a8",
"body": null,
"is_bot": false,
"headline": ":package: Avoid PHP 8.4 deprecations about implicit nullable",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T11:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "490c7a4515833f9fa345b1609287b865dfb72e76",
"body": null,
"is_bot": false,
"headline": ":sparkles: Allow Symfony 8",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-11-28T10:09:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9734d84fff2b15299c3b11a637a0fe86fba901a",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/checkout from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-11-24T01:01:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4d7821c699b7b4fbdb6542d3e864674dd0c833a",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.2.4 to 4.3.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v4.2.4...v4.3.0)\n\n---\nupdated-dependenc\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 4.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 4.2.4 to 4.3.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-29T01:01:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "70bde9d5ca3d1f6e904ea80517361ffeef510475",
"body": "…ns-actions-checkout-5\n\n⬆️ Bump actions/checkout from 4 to 5",
"is_bot": false,
"headline": "Merge pull request #258 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-09-25T15:33:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "738409ae8997337d2396d3b3a93ae5d688068cfe",
"body": "…ns-actions-cache-4.2.4\n\n⬆️ Bump actions/cache from 4.2.3 to 4.2.4",
"is_bot": false,
"headline": "Merge pull request #256 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-09-25T15:33:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a5d62a347ebddad67335aa86491bcb36e877a3d",
"body": "…ns-actions-stale-10\n\n⬆️ Bump actions/stale from 9 to 10",
"is_bot": false,
"headline": "Merge pull request #261 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-09-25T15:33:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9156a988ef0bc291582b0fe00d565d3dd2e1a86",
"body": "…ns-shivammathur-setup-php-2.35.5\n\n⬆️ Bump shivammathur/setup-php from 2.35.2 to 2.35.5",
"is_bot": false,
"headline": "Merge pull request #262 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-09-25T15:33:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d46a4c8870e72b2c270c36cd7b54a98ef5dadb05",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.35.2 to 2.35.5.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.35.2...2.35.5)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n dependency-version: 2.35.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump shivammathur/setup-php from 2.35.2 to 2.35.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-22T01:01:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea7e81974745d51343ddee07f1f55ba09fb9b1e8",
"body": "Bumps [actions/stale](https://github.com/actions/stale) from 9 to 10.\n- [Release notes](https://github.com/actions/stale/releases)\n- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/stale/compare/v9...v10)\n\n---\nupdated-dependencies:\n- dependency-name: actions/stale\n dependency-version: '10'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/stale from 9 to 10",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-08T01:01:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d58c8138d321e1299b4e86f104a9e160c35c736a",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v5)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '5'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/checkout from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-18T01:59:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "202238dedcd0ffb91b51539870c12fd45efd4a9e",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.2.3 to 4.2.4.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v4.2.3...v4.2.4)\n\n---\nupdated-dependenc\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 4.2.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 4.2.3 to 4.2.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-11T01:44:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c0d78eb89f2b7702321f29125ccc25f0ef5d0b5",
"body": null,
"is_bot": false,
"headline": "Merge branch '6.x'",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-08-06T12:29:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2668ef2351e5b344cceffff4d22a29da0cf8db6",
"body": "…ns-shivammathur-setup-php-2.35.2\n\n⬆️ Bump shivammathur/setup-php from 2.33.0 to 2.35.2",
"is_bot": false,
"headline": "Merge pull request #254 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-08-06T12:27:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb3247a6c91f53f38cf243c04008371cca3b81b8",
"body": null,
"is_bot": false,
"headline": ":package: Resolve PHP 8.4 deprecation",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-08-06T12:26:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36ab95a2fb8d2f2c0756018533415b0bd0f59474",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.33.0 to 2.35.2.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.33.0...2.35.2)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n dependency-version: 2.35.2\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump shivammathur/setup-php from 2.33.0 to 2.35.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-04T01:35:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3d70f0a373190b3862e1467d145fb42a880c600",
"body": ":package: Avoid failed assert in case of not specified namespace config",
"is_bot": false,
"headline": "Merge pull request #253 from andrew-demb/improve-no-namespace-config",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-07-08T05:41:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03b649bc85b124d25e3e7c1fa1d28658c3100353",
"body": "Application can register graphql types on their own via compiler passes",
"is_bot": false,
"headline": ":package: Avoid failed assert in case of not specified namespace config",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-07-08T05:36:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3dc4c8ba331d07ace4a622de76e281026272eb0",
"body": "…ns-shivammathur-setup-php-2.33.0\n\n⬆️ Bump shivammathur/setup-php from 2.30.4 to 2.33.0",
"is_bot": false,
"headline": "Merge pull request #248 from thecodingmachine/dependabot-github_actio…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-06-06T15:27:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a63abd211f87fd8859effef52f713a24ec6bac9",
"body": "…-to-constructor\n\n[Fix] Fix StaticTypeMapper method calls by moving definition",
"is_bot": false,
"headline": "Merge pull request #251 from cvergne/fix/247-statictypemapper-methods…",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-06-06T15:26:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "833ed7118e9d47f2fdfe042003a7a55eedcfb89d",
"body": null,
"is_bot": false,
"headline": "fix: Fix fixtures for custom output type",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-06-06T14:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edb430e3f1316f91a69a38c9254dd1abebe79764",
"body": null,
"is_bot": false,
"headline": "Add tag to StaticMapperDefintion and fix service id",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-06-06T13:07:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49e00deb31a16874970266b091f327cfc46030e1",
"body": null,
"is_bot": false,
"headline": "fix: Move StaticTypeMapper definition from XML to CompilerPass",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-06-06T13:07:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beaa8069374e851275776dbdac786e7ef7eb377e",
"body": null,
"is_bot": false,
"headline": "test: Add test for CustomType with StaticTypeMapper",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-06-06T13:07:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6af6ed5e34e3f2d36fc872a2a9d6b5687af1128a",
"body": "[CI] Set zend.assertions to 1 ini PHP Setup to break on asserts",
"is_bot": false,
"headline": "Merge pull request #250 from cvergne/ci/set-php-zend-assertion",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-06-06T11:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de49176737e0079c171971a0d7d7a503637bd5be",
"body": null,
"is_bot": false,
"headline": "ci: Set zend.assertions to 1 ini PHP Setup to break on asserts",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-06-06T11:46:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e65189cdd477d36152115169577f281638655059",
"body": "[Fix] Avoid break on assert if security node is missing in config",
"is_bot": false,
"headline": "Merge pull request #249 from cvergne/fix/assert-security-config",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-06-06T10:51:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e22df6c44c4694e6563d57bab8049394d235bace",
"body": null,
"is_bot": false,
"headline": "fix: Default set security config node as empty array if not set",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-06-06T09:37:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52d53417c9a0fbc91e8154ef98a5a902c375eba3",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.30.4 to 2.33.0.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.30.4...2.33.0)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n dependency-version: 2.33.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump shivammathur/setup-php from 2.30.4 to 2.33.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-04-21T01:14:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8da372b6476fdf53016476cfc29303e1492b153e",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.0.2 to 4.2.3.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v4.0.2...v4.2.3)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": ":arrow_up: Bump actions/cache from 4.0.2 to 4.2.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-24T08:06:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d759f9de0c542081dc365b20f68bdcf41ca5cbf",
"body": "Actualize badges",
"is_bot": false,
"headline": "Merge pull request #242 from thecodingmachine/andrew-demb-patch-1",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-02-21T12:01:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dff1eec930de42246c9f6f0b3b0b58e9a2596d5",
"body": null,
"is_bot": false,
"headline": "Actualize badges",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-02-21T10:57:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58cc91a6942cd9f9aca19752e13747e2b3ca2f32",
"body": "Return GraphQL JSON response in case of JSON Input error instead of Internal Server Error",
"is_bot": false,
"headline": "Merge pull request #208 from cvergne/feat/json-error-to-graphql-response",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-01-06T19:16:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84e77e9678a3752c04abb0ccfd4375a024a433d4",
"body": null,
"is_bot": false,
"headline": "Fix implicitly nullable argument in JsonException constructor",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-01-06T15:44:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c23d87c1140476a1bb71cee52b555ae26e2a326",
"body": null,
"is_bot": false,
"headline": "Fix Exceptions folder in wrong location",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-01-06T14:56:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80cdfbb6114db0b04bb591c005a5752d66168674",
"body": null,
"is_bot": false,
"headline": ":package: Refactor to avoid using additional kernel exception listener",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-01-05T20:36:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03af0fe99e13d1a08ffeaf1c131f1590a96d8d7c",
"body": null,
"is_bot": false,
"headline": "Add tests for JSON Exceptions",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-01-05T20:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8611016dad2db145c4cc59c00901afc974d42a66",
"body": null,
"is_bot": false,
"headline": "Throw GraphQLException in case of JSON syntax error",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-01-05T20:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fe240df7103c51dc7d7fff8a90d26627727ad7d",
"body": null,
"is_bot": false,
"headline": "Add Exception Event Listener",
"author_name": "Christophe VERGNE",
"author_login": "cvergne",
"committed_at": "2025-01-05T20:19:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8626cfeabf637a2b2113f9e5d01ba1f83bd8ca5",
"body": ":package: Migrate to phpstan v2 (max level), fix SA issues, PHP 8.4 deprecations",
"is_bot": false,
"headline": "Merge pull request #237 from andrew-demb/phpstan-v2",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T19:50:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11deb0c2bb532f6602d3c7aa55b4620463590a19",
"body": null,
"is_bot": false,
"headline": ":package: Make IDE happy",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T19:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "094c5576fc256fb12ee3a264bf53b33dc1ae0b01",
"body": null,
"is_bot": false,
"headline": ":package: Fix PHP 8.4 deprecations",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T19:26:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3bb280fbd92b54fdbfec8dc4f6ff5fa81d41e62",
"body": null,
"is_bot": false,
"headline": ":sparkles: Introduce check for PHP 8.3, 8.4 in CI",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T19:24:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ae7755def0e2236d0eec04abec9ad06e50dc405",
"body": "… level, make phpstan happy",
"is_bot": false,
"headline": ":package: Migrate to phpstan v2, add phpstan-symfony, use max phpstan…",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T19:18:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1945c6662e89a2b4827c019dff5af889a26a5989",
"body": "[Major release] Symfony 7. GraphQLite 8",
"is_bot": false,
"headline": "Merge pull request #229 from andrew-demb/symfony-7",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T18:41:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae4511ad37d925a73a8f5ee58429e12ea6d755b9",
"body": null,
"is_bot": false,
"headline": ":package: Switch to original and stable version of validator-bridge",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2025-01-03T18:39:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de1eb05c685879578ace96e9fb4f0a84be45c575",
"body": "# Conflicts:\n#\t.travis.yml\n#\tcomposer.json",
"is_bot": false,
"headline": "Merge branch 'master' into symfony-7",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2024-12-31T15:34:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5c3805dac8f475f003b0e663feacefec8c19833",
"body": "Housekeeping - drop Travis, drop coveralls, add support for laminas-diactoros v3",
"is_bot": false,
"headline": "Merge pull request #236 from andrew-demb/housekeeping",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2024-12-31T15:28:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03cd47c3948a51f488f25c626c5549bd65f5e252",
"body": null,
"is_bot": false,
"headline": ":package: Add support for `laminas/laminas-diactoros` v3",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2024-12-31T15:26:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7446b37edd7113a672743c3a82f9b2190571ba04",
"body": "Instead of Travis there are GitHub actions\n\nThere's no replacement for Coveralls yet",
"is_bot": false,
"headline": ":fire: Drop Travis and coveralls - not used anymore.",
"author_name": "Andrii",
"author_login": "andrew-demb",
"committed_at": "2024-12-31T15:24:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4661c25447c1a9bb1d36fd76c5e92b785177117e",
"body": "Support Symfony 7",
"is_bot": false,
"headline": "Merge pull request #227 from andrew-demb/support-symfony-7",
"author_name": "Andrii Dembitskyi",
"author_login": "andrew-demb",
"committed_at": "2024-12-31T15:01:05Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 33,
"commits_last_year": 65,
"latest_release_at": "2026-04-28T06:21:20Z",
"latest_release_tag": "v7.5.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 18,
"days_since_latest_release": 96,
"mean_days_between_releases": 53.3
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "thecodingmachine/graphqlite-bundle",
"path": "composer.json",
"tokens": [
"composer.type:symfony-bundle"
],
"ecosystem": "packagist"
}
]
},
"community": {
"has_readme": true,
"has_license": false,
"readme_badges": {
"hosts": [
"github.com",
"poser.pugx.org"
],
"total": 3,
"header": 3,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "thecodingmachine/graphqlite-bundle",
"exists": true,
"license": "MIT",
"keywords": [
"symfony",
"bundle",
"graphql"
],
"ecosystem": "packagist",
"categories": [],
"matches_repo": true,
"registry_url": "https://packagist.org/packages/thecodingmachine/graphqlite-bundle",
"declared_type": "symfony-bundle",
"is_deprecated": false,
"latest_version": "v7.5.0",
"repository_url": "https://github.com/thecodingmachine/graphqlite-bundle",
"versions_count": 33,
"total_downloads": 1740391,
"dependents_count": 3,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 32328,
"first_published_at": null,
"latest_published_at": "2026-04-28T06:18:26Z",
"latest_version_yanked": null,
"days_since_latest_publish": 96
}
]
},
"popularity": {
"forks": 43,
"stars": 37,
"watchers": 13,
"fork_history": {
"days": [
{
"date": "2019-01-29",
"count": 1
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-06-04",
"count": 1
},
{
"date": "2019-07-01",
"count": 1
},
{
"date": "2019-09-13",
"count": 1
},
{
"date": "2019-11-27",
"count": 1
},
{
"date": "2019-12-23",
"count": 1
},
{
"date": "2020-03-27",
"count": 1
},
{
"date": "2020-04-23",
"count": 1
},
{
"date": "2020-05-08",
"count": 1
},
{
"date": "2020-05-15",
"count": 1
},
{
"date": "2021-06-19",
"count": 1
},
{
"date": "2021-06-21",
"count": 1
},
{
"date": "2021-07-02",
"count": 1
},
{
"date": "2022-01-10",
"count": 1
},
{
"date": "2022-01-19",
"count": 1
},
{
"date": "2022-01-25",
"count": 1
},
{
"date": "2022-04-07",
"count": 1
},
{
"date": "2022-09-13",
"count": 1
},
{
"date": "2022-09-29",
"count": 1
},
{
"date": "2023-03-02",
"count": 1
},
{
"date": "2023-04-09",
"count": 1
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-06-22",
"count": 1
},
{
"date": "2023-08-29",
"count": 1
},
{
"date": "2023-09-08",
"count": 1
},
{
"date": "2023-11-07",
"count": 1
},
{
"date": "2024-02-13",
"count": 1
},
{
"date": "2024-02-17",
"count": 1
},
{
"date": "2024-03-28",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-08-01",
"count": 1
},
{
"date": "2024-10-20",
"count": 1
},
{
"date": "2024-10-23",
"count": 1
},
{
"date": "2024-11-10",
"count": 1
},
{
"date": "2025-01-21",
"count": 1
},
{
"date": "2025-09-28",
"count": 1
},
{
"date": "2025-12-23",
"count": 1
},
{
"date": "2026-07-28",
"count": 1
}
],
"complete": true,
"collected": 40,
"total_forks": 43
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 22014,
"source_files_sampled": 39,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 22,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "thecodingmachine/graphqlite",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^8.1"
},
{
"name": "thecodingmachine/graphqlite-symfony-validator-bridge",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^7.1.1"
},
{
"name": "symfony/config",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^6.4 || ^7.0 || ^8.0"
},
{
"name": "symfony/console",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^6.4 || ^7.0 || ^8.0"
},
{
"name": "symfony/framework-bundle",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^6.4 || ^7.0 || ^8.0"
},
{
"name": "symfony/validator",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^6.4 || ^7.0 || ^8.0"
},
{
"name": "symfony/translation",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^6.4 || ^7.0 || ^8.0"
},
{
"name": "symfony/psr-http-message-bridge",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^2.0 || ^7.0 || ^8.0"
},
{
"name": "nyholm/psr7",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.1"
},
{
"name": "laminas/laminas-diactoros",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^2.2.2 || ^3"
},
{
"name": "thecodingmachine/cache-utils",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "laminas/laminas-diactoros",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "nyholm/psr7",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/config",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/console",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/framework-bundle",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/psr-http-message-bridge",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/translation",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/validator",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "thecodingmachine/cache-utils",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "thecodingmachine/graphqlite",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "thecodingmachine/graphqlite-symfony-validator-bridge",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "beberlei/porpaginas",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/package-versions-deprecated",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/semver",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-json",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "overblog/graphiql-bundle",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-symfony",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/phpunit-bridge",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/security-bundle",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/yaml",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 22,
"direct_count": 11,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 148,
"open_issues": 2,
"closed_ratio": 0.956,
"closed_issues": 43,
"closed_unmerged_prs": 95
},
"bus_factor": 2,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "moufmouf",
"commits": 202,
"avatar_url": "https://avatars.githubusercontent.com/u/1290952?v=4"
},
{
"type": "User",
"login": "andrew-demb",
"commits": 100,
"avatar_url": "https://avatars.githubusercontent.com/u/12499813?v=4"
},
{
"type": "User",
"login": "TamasSzigeti",
"commits": 34,
"avatar_url": "https://avatars.githubusercontent.com/u/148897?v=4"
},
{
"type": "User",
"login": "nguyenk",
"commits": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/2227554?v=4"
},
{
"type": "User",
"login": "cvergne",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/1032689?v=4"
},
{
"type": "User",
"login": "fogrye",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/141632421?v=4"
},
{
"type": "User",
"login": "devmaslov",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/17141793?v=4"
},
{
"type": "User",
"login": "aszenz",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/25319264?v=4"
},
{
"type": "User",
"login": "homersimpsons",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/16977446?v=4"
},
{
"type": "User",
"login": "janatjak",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/11320085?v=4"
}
],
"contributors_sampled": 22,
"top_contributor_share": 0.484
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"stale.yml",
"test.yaml"
],
"has_docs_dir": false,
"linter_configs": [
"phpstan.neon"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "9 out of 10 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 2/4 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "5b9198e867813fccbcd7688926c6fc773de3eb7b",
"ran_at": "2026-08-03T01:10:57Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-08-03T01:02:43Z",
"oldest_open_prs": [
{
"number": 289,
"created_at": "2026-08-03T01:02:32Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-01T07:40:44Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 228,
"created_at": "2024-12-18T09:04:10Z",
"last_comment_at": "2026-04-27T11:42:23Z",
"last_comment_author": "christian-lorenz"
},
{
"number": 241,
"created_at": "2025-02-10T11:29:12Z",
"last_comment_at": "2026-02-14T02:15:13Z",
"last_comment_author": "github-actions"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/thecodingmachine/graphqlite-bundle",
"host": "github.com",
"name": "graphqlite-bundle",
"owner": "thecodingmachine"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 63 is calibrated to 71 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 63,
"calibrated": 71,
"calibration": "2026-08-02"
}
}
],
"value": 71,
"inputs": {
"security": 48,
"vitality": 75,
"community": 43,
"governance": 75,
"calibration": "2026-08-02",
"engineering": 69,
"ai_readiness": 37,
"weighted_overall_raw": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 65,
"human_commit_share": 0.83,
"days_since_last_push": 0,
"active_weeks_last_year": 18
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "18/52 weeks with commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 18
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "65 commits in the last year",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 65
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"releases_count": 33,
"latest_release_tag": "v7.5.0",
"releases_from_tags": false,
"days_since_latest_release": 96,
"mean_days_between_releases": 53.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "33 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 33
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 96 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 96
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~53.3 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 53.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 43,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 43 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 43
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 43,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"forks": 43,
"stars": 37,
"watchers": 13,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "37 stars",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 37
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "43 forks",
"points": 13.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 43
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "13 watchers",
"points": 6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 13
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"readme_badges": 3,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"github.com",
"poser.pugx.org"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"packages": [
"thecodingmachine/graphqlite-bundle"
],
"dependents": 3,
"ecosystems": "packagist",
"total_downloads": 1740391,
"monthly_downloads": 32328
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "32,328 downloads/month across packagist",
"points": 60.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 32328,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "3 packages depend on it",
"points": 4,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 3
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 75,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 22,
"top_contributor_share": 0.484
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 48% of commits",
"points": 11.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 48
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "22 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 22
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 76,
"inputs": {
"merged_prs": 148,
"open_issues": 2,
"closed_issues": 43,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": 0.956,
"closed_unmerged_prs": 95,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "96% of issues closed",
"points": 40.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 96
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "148/243 decided PRs merged",
"points": 18.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 148,
"decided": 243
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/4 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 198,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "thecodingmachine",
"public_repos": 343,
"account_age_days": 5163
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "198 followers of thecodingmachine",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 198,
"login": "thecodingmachine"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "343 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 343
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"thecodingmachine/graphqlite-bundle"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 96
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 96 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 96
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 69,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpstan.neon",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpstan.neon"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "9 out of 10 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "9 out of 10 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/4 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 37,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.422,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "35 of 83 human commits state their intent (structured subject or explanatory body)",
"points": 22.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 35,
"sampled": 83
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.17
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpstan.neon",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpstan.neon"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "17 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 17,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 22014,
"source_files_sampled": 39,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/39 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 39,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application",
"host-extension"
],
"labels": [
"plugin",
"library",
"network-service",
"cli"
],
"scores": {
"cli": 4,
"plugin": 14,
"library": 10,
"network-service": 4
},
"primary": "plugin",
"evidence": [
{
"tier": "declared",
"label": "plugin",
"source": "composer.type:symfony-bundle",
"weight": 8
},
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
},
{
"tier": "distribution",
"label": "plugin",
"source": "registry_type:symfony-bundle",
"weight": 6
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:symfony/console",
"weight": 4
},
{
"tier": "declared",
"label": "library",
"source": "composer.type:symfony-bundle",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:symfony/framework-bundle",
"weight": 4
}
],
"artifacts": [
{
"path": "composer.json",
"labels": [
"plugin",
"library"
],
"ecosystem": "packagist"
}
],
"confidence": "high",
"host_extension": true,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-08-03T01:11:20.344315Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/thecodingmachine/graphqlite-bundle.svg",
"full_name": "thecodingmachine/graphqlite-bundle",
"license_state": "absent",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.30.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.