workos / workos-rust

Full resolved dependency set from the GitHub dependency graph: 17 direct and 192 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 209 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 0 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "backend",
        "sdk"
      ],
      "is_fork": false,
      "size_kb": 22916,
      "has_wiki": false,
      "homepage": "https://workos.github.io/workos-rust/",
      "languages": {
        "Rust": 2841332,
        "Shell": 464
      },
      "pushed_at": "2026-07-23T15:48:47Z",
      "created_at": "2022-04-18T14:10:45Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T15:49:13Z",
      "description": "Official Rust SDK for interacting with the WorkOS API",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust"
      ]
    },
    "owner": {
      "blog": "https://workos.com",
      "name": "WorkOS",
      "type": "Organization",
      "login": "workos",
      "company": null,
      "location": "United States of America",
      "followers": 983,
      "avatar_url": "https://avatars.githubusercontent.com/u/47638084?v=4",
      "created_at": "2019-02-14T15:54:36Z",
      "is_verified": null,
      "public_repos": 115,
      "account_age_days": 2716
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.0.0",
          "kind": "major",
          "published_at": "2026-07-22T17:10:56Z"
        },
        {
          "tag": "v2.5.0",
          "kind": "minor",
          "published_at": "2026-07-06T15:51:03Z"
        },
        {
          "tag": "v2.4.0",
          "kind": "minor",
          "published_at": "2026-07-02T18:23:55Z"
        },
        {
          "tag": "v2.3.0",
          "kind": "minor",
          "published_at": "2026-06-30T15:18:42Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2026-06-23T15:16:07Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2026-06-17T01:55:22Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2026-05-28T15:03:55Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2026-05-26T20:28:13Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-05-13T15:19:25Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-05-12T20:35:34Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2022-07-14T21:43:20Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2022-07-11T23:02:11Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2022-07-01T14:38:34Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "1814125c6a362131da0b30f4d78ab625b11485d6",
          "body": "Adds .claude/CLAUDE.md (with an AGENTS.md symlink) explaining that most\nof this SDK is generated by the oagen pipeline from workos/openapi-spec,\nhow to tell generated files from hand-maintained ones, and that fixes to\ngenerated code belong upstream in oagen/oagen-emitters/openapi-spec.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add agent context for oagen-generated code",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-07-23T15:48:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8997c1c57ad594beefbf7e28e0970072dc1dcec0",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 3.0.0 (#127)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-22T17:10:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c61a9fdefa74a87eaaed36b749b925c4afb7d08",
          "body": "…ved (+4 more) (#130)\n\nCo-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated)!: SDK surface change: Symbol \"IntentOptions\" was remo…",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-22T16:25:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43f5ba9e0b0b0c32d6988eabc860bc6eb96770b5",
          "body": "…tion (#128)\n\nCo-authored-by: workos-tars[bot] <workos-tars[bot]@users.noreply.github.com>\nCo-authored-by: Horizon Bot <horizon-bot@workos.com>",
          "is_bot": true,
          "headline": "docs: clarify Idempotency-Key is only honored on audit log event crea…",
          "author_name": "workos-tars[bot]",
          "author_login": "workos-tars[bot]",
          "committed_at": "2026-07-21T21:30:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "064dc53c9e13f5875b556186bcca10252cc7d8c4",
          "body": "…d to `Connection.callback_endpoint` (+1 more) (#129)\n\nCo-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated)!: SDK surface change: `Connection.options` was rename…",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-21T19:47:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5cb1bbac982b8869a1bb53e9f10043eedfaab661",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): AuditLogs (batch 56391ebd) (#126)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-20T18:13:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c872edac235103fa61be60134061d7c4d7a60eaa",
          "body": null,
          "is_bot": false,
          "headline": "chore: scope SDK bot App token permissions",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-07-08T20:27:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ced3657ffb5b943c8b9a5726ccab75dca9db092",
          "body": null,
          "is_bot": false,
          "headline": "chore: prevent oagen generated files from being PR'ed",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-07-06T19:01:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9127a50187eb31cde7580e9c14dd4a4b055485f6",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.5.0 (#125)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-06T15:50:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd4adb6870adec65c3f9ffdaf9427148409454a3",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): UserManagement, Radar (batch f510ddfb) (#124)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-06T15:47:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c50786469e2fc630677c3dc7f0dad7077b8e5a56",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.4.0 (#119)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-02T18:23:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ed9dc6989de04a0197163761345541c29dd7287",
          "body": "…(#123)\n\nCo-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): Add user management operations and models (+1 more) …",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-02T17:34:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "889e6af11dfe05a699ec65315445d4fd4663cbf8",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): Add Pipes operations and models (#122)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-02T16:27:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "791a73b26b1154048831ec426aad35f7a19daf72",
          "body": "…, AuditLogs (batch 08085e9d) (#120)\n\nCo-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): AdminPortal, Authorization, Webhooks, UserManagement…",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-01T18:42:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a96e9752762768ece7b3ce2153f8a0c3956c715",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): Pipes (batch 77e46600) (#118)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-07-01T16:52:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c4a9368654386f0995aa26d35fc8ec8c6182b92",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.3.0 (#115)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-06-30T15:18:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b166121411c8211ed7f9da753d82bd898d897b4f",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): OrganizationMembership (batch 4a353f07) (#114)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-06-30T15:04:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7afea5c1e27844a2beecada34207c45d68ab6b80",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.2.0 (#112)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-06-23T15:15:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9ed81c3e447166c98e1720e8e81a5f5218292ef",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>\nCo-authored-by: Garen J. Torikian <gjtorikian@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "feat(generated): regenerate from spec (11 changes) (#111)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-06-23T15:12:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b9b1ecc513bf0bafe7ba86fe28a3a15dbeebaa33",
          "body": null,
          "is_bot": false,
          "headline": "chore: commit publishing fixes",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-06-18T15:15:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc3d47f3394a9aa57dff5faddabfb7833523d553",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.1.0 (#110)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-06-17T01:55:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ede005399674e5672a1fe3651bb0edd58ab83901",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>\nCo-authored-by: Garen J. Torikian <gjtorikian@users.noreply.github.com>",
          "is_bot": true,
          "headline": "feat(generated): regenerate from spec (10 changes) (#105)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-06-17T01:53:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0210a5769cb6569fa447861679f4b6359d0a440",
          "body": null,
          "is_bot": false,
          "headline": "ci: skip release-please after custom release publish",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-28T17:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46f9a50a9cb8bfb01bca95b39e66375a4b2702a8",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.0.1 (#101)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-05-28T15:03:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2dc6fa4a3bfc17a5ef399c6683c406f839f5083b",
          "body": null,
          "is_bot": false,
          "headline": "fix(sdk): omit defaulted screen_hint from auth URLs (#102)",
          "author_name": "Garen Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-28T15:01:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2639af6f0749120a134dd292ef40af3df09e7fd6",
          "body": "Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: Garen Torikian <gjtorikian@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(renovate): explicitly enable minor and patch updates (#99)",
          "author_name": "willporter-workos",
          "author_login": "willporter-workos",
          "committed_at": "2026-05-27T20:25:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "728c419bdddd6af1293d228b5f1033c49be4d6b0",
          "body": null,
          "is_bot": false,
          "headline": "ci: mark custom release PRs as tagged",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-27T14:08:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "229d3697d4060f01947b4df5fff447e8f5094922",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 2.0.0 (#100)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-05-26T20:28:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5d9685090c6e041d763a47b519cf80126a30b0b",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>\nCo-authored-by: Garen J. Torikian <gjtorikian@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "feat(generated)!: regenerate from spec (8 changes) (#97)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-05-26T20:25:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5d869eb4be3aee53777fb1b2ddde954dedbd1155",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump openssl from 0.10.79 to 0.10.80 (#98)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-26T19:52:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fd4286f02cb4016a061ef116ca7942c3b666568",
          "body": null,
          "is_bot": false,
          "headline": "update release process",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-26T19:49:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca7715e41197f637a6c135812b3c12848265d11f",
          "body": "Extends github>workos/renovate-config (which already includes\nconfig:recommended) so shared org settings take precedence.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: use shared workos/renovate-config preset",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-15T21:21:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "23219403d66472f88480d2ae17beb0adde7c4d90",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 1.0.1 (#95)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-05-13T15:19:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e63d620673b1e0b1270b1ca0ad7539d462c94e51",
          "body": "…m bodies\n\nDrops serde_urlencoded in favor of an in-tree encoder so generated\nquery-param structs can carry Vec fields and #[serde(flatten)]\nnested objects — both of which serde_urlencoded rejects. This\nunblocks the spec's mutually-exclusive parameter groups (modeled\nas untagged enums like Password,\n[…]\nialises spec-level pagination defaults (limit=10,\norder=desc) into the generated Default impls so the wire URL\nmatches what the API documents, and stamps the crate version\ninto the default User-Agent.",
          "is_bot": false,
          "headline": "fix(generated): Regenerate from oagen with query encoder + typed para…",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-13T14:04:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c005c72c8d0ef4abdda05a837ef2ceafec377371",
          "body": "Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 1.0.0 (#94)",
          "author_name": "workos-sdk-automation[bot]",
          "author_login": "workos-sdk-automation[bot]",
          "committed_at": "2026-05-12T20:35:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de2b6acbab2fe95dee1163c294dc8d3d62d7c9ee",
          "body": "… SecretString fields\n\nPicks up three emitter changes that the hand-written commits in this\nseries set up:\n\n  - Enums are `#[non_exhaustive]` with an `Unknown(String)` fallback\n    plus FromStr/Display/AsRef impls, so server-side enum additions\n    no longer break SDK deserialization.\n  - Fields who\n[…]\n Endpoints with no response schema return `()` via the new\n    `request_with_*_opts_empty` helpers instead of\n    `serde_json::Value`.\n\nNo functional WorkOS API changes — the wire format is unchanged.",
          "is_bot": false,
          "headline": "chore(generated): Regenerate from oagen with forward-compat enums and…",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:26:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "13b131ec6146bacc5bcbc1d0fbfc280dc6bdc257",
          "body": "…forward-compat enums\n\nThe SDK gained four user-visible contracts in this release — builder\nvalidation via try_build, per-request retry strategies, redacted\nsecret fields, and forward-compatible enums — and none of them were\ndiscoverable from the README. New users would either miss them or\nlearn abo\n[…]\noutput.\n\nDocuments each one with a short example and the rationale callers\nneed to use them safely (e.g. why mutating calls don't auto-retry\nwithout an idempotency key, why Unknown(_) variants exist).",
          "is_bot": false,
          "headline": "docs(readme): Document try_build, RequestStrategy, SecretString, and …",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:25:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aec7029ab71e013e59fb6740388ab94e3290af2c",
          "body": "The oagen Rust emitter now produces non-exhaustive enums with an\n`Unknown(String)` fallback so server-side enum additions don't break\nexisting clients. Lock that contract down end-to-end: unknown wire\nvalues must round-trip through `Unknown` (preserving the original\nstring on re-serialize), known va\n[…]\nnonical, and FromStr\nis infallible. Without this test the next regen could quietly drop\nthe fallback variant and we'd only find out when an SDK upgrade\npanicked on a new connection type in production.",
          "is_bot": false,
          "headline": "test: Cover forward-compatible enum deserialization",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:23:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "926d04af4832decfbc284e97b6dc913c920aa36b",
          "body": "These types are the SDK's public extensibility surface — third-party\ntransports consume HttpRequest/HttpResponse/TransportError, and any\ncaller iterating list endpoints touches Page/ListMetadata. They had\nno doc comments, so docs.rs rendered them as bare structs with no\nguidance on which fields are caller-supplied vs transport-supplied,\nor what the cursor pair is for. Documents the public fields and the\nretry contract on TransportError.",
          "is_bot": false,
          "headline": "docs(transport,pagination): Document HttpRequest, HttpResponse, and Page",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:23:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "112a9056e96035853dcd848e7e9b7b746972d657",
          "body": "The helper layer carried its own RFC 3986 encoder while the regen\nuses `client::path_segment`. Two implementations of the same\nencoding rule risk silent drift the next time one side gains a\ntweak (a new safe character, a different escape policy). Drop the\nlocal copy and re-export so both layers go through one function.",
          "is_bot": false,
          "headline": "refactor(helpers): Reuse client::path_segment for percent encoding",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:22:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fb9b1c8835daeb77f603b689418b0860352de6c",
          "body": "The previous retry loop fired on every 429/5xx regardless of method,\nso a server-side blip during a POST could re-create resources or\nresend invites. Auto-retries are now restricted to HTTP-safe methods\n(GET/HEAD/OPTIONS) or to requests that carry an `Idempotency-Key` —\neverything else is sent exact\n[…]\nilently, producing a client that\nemitted unauthenticated requests. The two helpers paired with this\n(`request_with_*_opts_empty`) give the regen typed `()` returns for\nendpoints with no response body.",
          "is_bot": false,
          "headline": "feat(client): Gate retries by safety and add per-request RequestStrategy",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:22:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3729a98c9ce6c9bf654779e8c252c7887f83cd5",
          "body": "Default `Debug` impls leak token-like values into logs, panics, and\nerror reports. SecretString wraps such fields so Debug/Display print\n`<redacted>` while serde stays transparent on the wire — callers reach\nfor the underlying string via `expose()` only when they intentionally\nneed it (e.g. parsing \n[…]\n SSO logout helper onto\nthe wrapper so the upcoming oagen regen, which classifies password /\ntoken / secret / refresh_token fields as sensitive, lines up with the\nhand-written types it interacts with.",
          "is_bot": false,
          "headline": "feat(secret): Add SecretString wrapper for sensitive fields",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T17:22:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "512e0b837e8fed7d55a0bcacc897047a2acad8ee",
          "body": "Why: the v0.x guards were forcing breaking-change commits to bump the minor\nversion (0.8.1 -> 0.9.0) instead of the major (1.0.0). With v1 prep landed\nin 9b42e775, the next release-please run should propose 1.0.0.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Drop pre-major bump guards from release-please config",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:24:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1923001e74b958a1ce5a5fba594c598ae7b5663b",
          "body": "CI is failing because publish-time tooling (and `cargo install`\nof binaries) requires a committed `Cargo.lock`. Following the\nCargo book's current guidance for libraries that ship binaries\nor want reproducible CI builds: commit the lockfile so every\nclone resolves to the same dependency graph.",
          "is_bot": false,
          "headline": "build: Track Cargo.lock in version control",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:17:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b42e7753ae5b73ebcfb7cba9cebd9967a49c94f",
          "body": null,
          "is_bot": false,
          "headline": "feat!: prep for v1",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:03:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b46fcc30267081ba0f704d60bc77370ad052b4fe",
          "body": "v1.0.0 is a ground-up rebuild: every resource module is now\ngenerated from the WorkOS OpenAPI spec, only the helpers and\ntransport are hand-maintained, and the surface is async-first.\nWithout release notes a 0.2.0 -> 1.0.0 jump leaves users with no\nmigration signal beyond the tag.\n\n- CHANGELOG enume\n[…]\nE adds Per-Request Options, Errors, Retries, and Auto-Paging\n  sections so the docs.rs landing page covers the four things\n  callers most commonly need before reaching for the generated\n  module docs.",
          "is_bot": false,
          "headline": "docs: Document v1.0.0 in CHANGELOG and README",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:02:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "35e188f1adc1c77e54a4bc8655bb0f672f0b622f",
          "body": "Routes generated resource code through `client::path_segment` for\npath parameter interpolation and `pagination::auto_paginate_pages`\nfor `*_auto_paging` streams (added in the previous commit), so the\nencoding rule and pagination loop are no longer duplicated across\n~20 resource modules.\n\nAlso adds t\n[…]\n in `models/_unions.rs`. Without them\nthe `type` field round-tripped as the variant name (e.g.\n`\"ApiKeyOwner\"`) instead of the wire value (`\"organization\"`),\nbreaking deserialization of API responses.",
          "is_bot": false,
          "headline": "chore(generated): Regenerate resources and tests from oagen",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:02:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f1c2d3b2490b588bf32abb8b5c76e1c0598e9e4",
          "body": "The v1.0.0 generator emits two new call patterns that the\nhand-maintained crate root must back:\n\n- `client::path_segment` percent-encodes a single URL path segment\n  per RFC 3986 so generated resource code can interpolate dynamic\n  ids without letting `/`, `?`, `#`, or whitespace escape the\n  segmen\n[…]\ncross every list endpoint.\n\nAlso fills in rustdoc on `RequestOptions` and the `Error`\nconvenience accessors so the v1.0.0 docs.rs page documents\n`request_id`, `retry_after`, and the status predicates.",
          "is_bot": false,
          "headline": "feat(client): Add path_segment encoder and shared auto-paging driver",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:02:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "98b8a59781d461a78b429c4757224d86a4bb68be",
          "body": "Several helper paths could silently accept malformed or attacker-\ncontrolled input ahead of the v1.0.0 cut:\n\n- Webhook signature parsing ignored unknown components, which would\n  let a future stronger scheme (e.g. `v2=`) be downgraded to `v1`\n  by stripping it on the wire. Unknown components are now\n[…]\nwithout `exp` was accepted\n  indefinitely. Require `exp` and reject when absent.\n- Refresh-token revocation detection matched on the human-readable\n  message string; switch to the stable `code` field.",
          "is_bot": false,
          "headline": "fix(helpers): Harden webhook, session, and vault crypto paths",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T16:02:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "544e0baeba610f2fc30d10dec7bba048f5f497f3",
          "body": null,
          "is_bot": false,
          "headline": "drop version for triggering major later",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-10T15:24:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1a66ba8cad6f8d79456c4f951cd00b1c0d8b108",
          "body": "The previous `Error::Api { status, code, message }` shape\ndiscarded everything callers actually need to debug a failed\nrequest — no `x-request-id`, no `Retry-After`, no raw body — so\nusers couldn't file useful bug reports to WorkOS and couldn't\nimplement smart retry. The boxed `ApiError` now carries\n[…]\nw(body)` constructor.\n\nA new integration test (`request_options_and_errors_test.rs`)\nexercises the idempotency-key header, extra-header merging, and\nstructured-error parsing against a wiremock server.",
          "is_bot": false,
          "headline": "feat: Add ApiError, RequestOptions, and auto-paging streams",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T22:09:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5464c5e27afd9fda9039ace7892b9f1a218e1d31",
          "body": "CI was using `stable`, so the 1.88 MSRV advertised in the README\nwasn't actually enforced — a runner bump could silently break\nconsumers pinned to 1.88. `rust-toolchain.toml` plus a matching\npin in both workflows removes that drift, and a fresh checkout\nnow installs the right toolchain automatically.\n\nThe new `cargo doc --no-deps` step with `RUSTDOCFLAGS=-D warnings`\ncatches broken intra-doc links — like `[encrypt]` in vault.rs that\ndidn't resolve — before they ship to docs.rs.",
          "is_bot": false,
          "headline": "build: Pin Rust toolchain to 1.88 and gate rustdoc warnings",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T20:37:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c39706d1369194ca8c46a35b12b625f0b9ba077d",
          "body": "The new `expect_used = warn` lint flagged two call sites whose\n`expect` is provably infallible but cannot be expressed without\nsome form of unwrap.\n\n- `compute_webhook_signature`: `Hmac::new_from_slice` only returns\n  `Err` for fixed-size MACs, never for HMAC (RFC 2104). Replaces\n  `expect()` with a\n[…]\nd won't initialize — same\n  failure mode as `reqwest::Client::new`, which we want to\n  preserve. Annotates the function with\n  `#[allow(clippy::expect_used)]` and documents the panic in the\n  rustdoc.",
          "is_bot": false,
          "headline": "refactor: Quiet `clippy::expect_used` on infallible call sites",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T15:18:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "31f91ed6f5b964f3028429100d32bcbbadd0404b",
          "body": "Refreshes the dep tree before the first crates.io publish so we\nstart on current majors and minimize transitive duplicates flagged\nby `cargo deny`.\n\n- `rand` 0.8 → 0.9: `thread_rng()` was renamed to `rng()`. Touches\n  the five call sites that generate state/PKCE/AES nonces.\n- `thiserror` 1 → 2: macr\n[…]\nry they prefer\n  without us pinning one.\n- Trim `tokio` features to `time` + `sync` (the runtime is the\n  caller's choice) and drop the duplicated `hex` dev-dep that\n  was already in `[dependencies]`.",
          "is_bot": false,
          "headline": "chore(deps): Upgrade rand, thiserror, futures, drop jsonwebtoken",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T15:17:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d9a218713ebca6dde303783ed71f2f0f9086326",
          "body": "The old `reqwest` feature gated the bundled transport, but always\npaired with `native-tls` or `rustls-tls` to pick a TLS backend—so\nin practice users had to enable two features to get a working\nclient. Folding `dep:reqwest` into the TLS features removes the\nredundant flag and makes feature selection\n[…]\nnd the\nreqwest module to predicate on `any(native-tls, rustls-tls)`\ninstead of the now-removed `reqwest` feature. The panic message\nfor a missing transport now points users at `--features\nrustls-tls`.",
          "is_bot": false,
          "headline": "refactor: Rename `reqwest` feature to TLS-backend features",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T15:17:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "756cad6146109877caf8d26a83e8feeac0d627fa",
          "body": "Prep work for the SDK's first crates.io publish. Adds the package\nmetadata fields crates.io requires (repository, homepage, keywords,\ncategories, authors), pins `rust-version` to match the\nedition-2024 floor we already require, and excludes test fixtures\nand release tooling from the published tarbal\n[…]\n_code = forbid`, `unwrap_used`/`expect_used`/\n`dbg_macro`/`todo` as warns) so quality gates run before publish.\n`docs.rs` metadata pins the `rustls-tls` feature so docs build\nwithout a system OpenSSL.",
          "is_bot": false,
          "headline": "chore: Configure crates.io publish metadata and lints",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T15:16:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44149e5636dbfe8a7188e4d4fde327a52f68db41",
          "body": null,
          "is_bot": false,
          "headline": "trim this down",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T13:19:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c5241cd8d9c60006419c3dba82fd23a71a01868",
          "body": null,
          "is_bot": false,
          "headline": "the bits and bobs",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T07:59:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c7cb5fe22e0cf31a9c414a222b6a3b11ddf3bb1",
          "body": null,
          "is_bot": false,
          "headline": "regeneration",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-08T07:14:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15ecc9d10879f0b0a2f33d97ad22eaaa1c182fc7",
          "body": null,
          "is_bot": false,
          "headline": "Regenerate from oagen rust emitter mount-group refactor",
          "author_name": "Garen J. Torikian",
          "author_login": "gjtorikian",
          "committed_at": "2026-05-07T22:54:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ffb09145558c4c2fba0f5a6de5adbe456323c8c",
          "body": "Noticed that the `actions-rs` organization in GitHub is archived and\npicked what looks like the next best maintained actions implementation\nfor Rust.\n\nWe've also never actually run these tests on Semaphore so it is safe to\ndrop the definition entirely.",
          "is_bot": false,
          "headline": "Use GitHub Actions for CI (#91)",
          "author_name": "Jason Roelofs",
          "author_login": "jasonroelofs",
          "committed_at": "2024-03-22T14:56:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ef0d79679006c31e5b80460d941d83f0df8c1a6",
          "body": null,
          "is_bot": false,
          "headline": "Unship Bors to try out GitHub Merge Queue (#88)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2023-02-08T17:59:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c4a5c726e36fbd496cf04c3b8ae2ce0ea345057",
          "body": "This PR adds a `primary_email` getter to the `DirectoryUser` struct for easily accessing the primary email.",
          "is_bot": false,
          "headline": "Add `primary_email` getter to `DirectoryUser` (#87)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-09-13T16:09:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4002a8b92bc4ea78c44d7a40ed55438ef2915f62",
          "body": "### Added\r\n\r\n- Added `organization_id` to `DirectoryUser`s and `DirectoryGroup`s ([#84](https://github.com/workos/workos-rust/pull/84))",
          "is_bot": false,
          "headline": "v0.2.0 (#85)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-14T21:34:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e71e5406fddfe9905e49a980c6411f0638d5b2f",
          "body": "This PR adds an `organization_id` field to `DirectoryUser`s and `DirectoryGroup`s.\r\n\r\nResolves SDK-554.",
          "is_bot": false,
          "headline": "Add `organization_id` to `DirectoryUser`s and `DirectoryGroup`s (#84)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-14T15:44:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abdd91d7cdd98e1b3fdc81ab522b01b10f47c318",
          "body": "### Changed\r\n\r\n- Updated the endpoints used for `ChallengeFactor` and `VerifyChallenge` operations ([#81](https://github.com/workos/workos-rust/pull/81))\r\n- Changed project status to \"experimental\" ([#82](https://github.com/workos/workos-rust/pull/82))",
          "is_bot": false,
          "headline": "v0.1.1 (#83)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-11T22:56:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee50dc90bda6dcb162da6bc2f3f490bb694a1944",
          "body": "Co-authored-by: Marshall Bowers <marshall@workos.com>",
          "is_bot": false,
          "headline": "Add experimental banner (#82)",
          "author_name": "Zeno Rocha",
          "author_login": "zenorocha",
          "committed_at": "2022-07-11T22:27:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "017122d3a18f31d2b207a0abc8fa1fc51436604b",
          "body": "This PR updates the endpoints used for the `ChallengeFactor` and `VerifyChallenge` operations.\r\n\r\nResolves SDK-551.",
          "is_bot": false,
          "headline": "Update `ChallengeFactor` and `VerifyChallenge` endpoints (#81)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-05T18:38:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f678799a8124434db531ea10d1c0dc23fa78504",
          "body": "This PR adds examples for MFA operations.\r\n\r\nResolves SDK-542.",
          "is_bot": false,
          "headline": "Add examples for MFA operations (#77)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-01T14:26:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52415cc03192ef1da9bc9bbaea21c78423c5a9fa",
          "body": "This PR adds examples for Organizations operations.\r\n\r\nResolves SDK-541.",
          "is_bot": false,
          "headline": "Add examples for Organizations operations (#76)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-01T14:24:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d265b9ef79199ac32eec71731666d55b9c9ba957",
          "body": "This PR organizes imports across the codebase.\r\n\r\nI ran `cargo +nightly fmt` with the following options in `rustfmt.toml`:\r\n\r\n```toml\r\nunstable_features = true\r\nimports_granularity = \"Module\"\r\n```\r\n\r\nProbably just going to keep doing this by hand until we feel like setting up nightly in CI or the options get stabilized.",
          "is_bot": false,
          "headline": "Organize imports (#74)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-01T14:24:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2558da8fdebac1cfa0bef4cf2ab31d6ced70cc0",
          "body": "This PR adds examples for SSO operations.\r\n\r\nResolves SDK-543.",
          "is_bot": false,
          "headline": "Add examples for SSO operations (#80)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-01T14:21:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dde293179bdcaead95366a26f8fa7efc83d3b12",
          "body": "We love badges!",
          "is_bot": false,
          "headline": "Add more badges to README (#79)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-07-01T14:20:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a477cdd1fb0ab0c3317ced4a6334f3121586dc78",
          "body": "… (#78)\n\nCo-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>\nCo-authored-by: Marshall Bowers <marshall@workos.com>",
          "is_bot": false,
          "headline": "Add Examples for CreatePasswordlessSession and SendPasswordessSession…",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-30T22:47:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c6f71f47920573ea83974fc30d89606ddffe46f",
          "body": "This PR derives `Clone` for a number of types so that it's available for SDK consumers. \r\n\r\n![image](https://user-images.githubusercontent.com/1486634/176778115-9c5a69d4-7490-4e33-9406-b9c3cc6d4260.png)",
          "is_bot": false,
          "headline": "Derive `Clone` for types (#73)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T21:45:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1eb49ef759f4c77c3c4bbe36f054ad31e19fbad2",
          "body": "This PR cleans up some of the webhook code to make things clean and consistent.",
          "is_bot": false,
          "headline": "Clean up webhooks (#72)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T20:10:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01d631161503e8c27b8819d065ad7714fe182032",
          "body": "This PR adds examples for the remaining Directory Sync operations.\r\n\r\nResolves SDK-539.",
          "is_bot": false,
          "headline": "Add examples for Directory Sync operations (#70)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T20:08:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d2e70e1dc39fba2fea2da17bf963f15001228ad",
          "body": "This PR renames the `VerifyFactor` operation to `VerifyChallenge`, since the latter is more accurate.\r\n\r\nResolves SDK-540.",
          "is_bot": false,
          "headline": "Rename `VerifyFactor` to `VerifyChallenge` (#71)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T20:06:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5826c22be4269e0c50dbb0f93035708caa61e38",
          "body": "Add Webhooks: \r\nDirectoryGroupUpdated\r\nDirectoryGroupCreated\r\nDirectoryGroupDeleted\r\n\r\nResolves SDK-520, SDK-521, and SDK-522.\n\nCo-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Add DirectoryGroup Webhooks (#69)",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-30T19:24:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "964a383b30680e7b3ecf7edac7a38589a152872b",
          "body": "…ebhook (#68)\n\nCo-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Add `DirectoryUserAddedToGroup` and `DirectoryUserRemovedFromGroup` w…",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-30T18:02:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df42a04ebcd980db8c5c8b9e9f1a9b5b68b50099",
          "body": "This PR adds an example for `GetDirectory`.\r\n\r\nResolves SDK-538.",
          "is_bot": false,
          "headline": "Add example for `GetDirectory` (#67)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T16:01:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87710b00a879436797d983ffe5fa0dca2b559043",
          "body": "This PR adds an example for `GetDirectoryUser`.\r\n\r\nResolves SDK-537.",
          "is_bot": false,
          "headline": "Add example for `GetDirectoryUser` (#66)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T16:01:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dc4e9b71fa46f7ffd83793fbd43639f46405f97",
          "body": "This PR adds an example for `GetDirectoryGroup`.\r\n\r\nResolves SDK-536.",
          "is_bot": false,
          "headline": "Add example for `GetDirectoryGroup` (#65)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T16:01:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49ead9ad7b714ffa7c2b1eb91189b419be3b049c",
          "body": "…eNumber` (#64)\n\nThis PR updates `EnrollFactorError::InvalidPhoneNumber` to include the error message returned from the API.\r\n\r\nResolves SDK-535.",
          "is_bot": false,
          "headline": "Include the returned error message in `EnrollFactorError::InvalidPhon…",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T16:01:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b131a7477e4ad662448dd36238dbe764c7729712",
          "body": "This PR adds an example for `DeleteDirectory`.\r\n\r\nResolves SDK-534.",
          "is_bot": false,
          "headline": "Add example for `DeleteDirectory` (#63)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T15:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26681e11774b2314fea43b62dfd0df36074932fe",
          "body": "This PR adds an example for `GeneratePortalLink`.\r\n\r\nResolves SDK-533.",
          "is_bot": false,
          "headline": "Add example for `GeneratePortalLink` (#62)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T15:59:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4f317083e4c484278f6bee5a1d1cbc4485c51c3",
          "body": "Co-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Add DirectoryUserUpdated webhook event (#55)",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-30T15:55:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "477f0e55bed44da0b500d772437bcd6fdb909784",
          "body": "This PR moves the lifetimes inside of the `Option`s for parameters to list operations.",
          "is_bot": false,
          "headline": "Move lifetimes inside of `Option`s (#61)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T15:23:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e4ac8340d8a0e944fcd54d1f9aa33f4e6178c7f",
          "body": "Also updated webhooks/profile type to use DirectoryId from directorysync/directory and added a 'Deleting' value to the State type. \n\nCo-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Add DirectoryDeactivated and DirectoryDeleted webhooks (#57)",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-30T15:20:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d1d18ac5ecd031a7cb660c4388b7ccd17730209",
          "body": "This PR updates the `DirectoryState` to use `Active`/`Inactive` instead of `Linked`/`Unlinked`.\r\n\r\nWe're aliasing the variant values in `serde` so that we can support both sets of values coming back from the API.\r\n\r\nResolves SDK-531.",
          "is_bot": false,
          "headline": "Use `Active`/`Inactive` in `DirectoryState` (#59)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T14:41:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfcc4a7367fb89c1a6dad3cf37339dd1fc5d04a9",
          "body": "This PR adds an example for `GetProfileAndToken`.\r\n\r\nResolves SDK-530.",
          "is_bot": false,
          "headline": "Add example for `GetProfileAndToken` (#58)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T14:41:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa98fcf66adf1bc4e597c54f283f5f9d50e043fc",
          "body": "This PR overhauls the error handling by extracting common error handling functionality into a central set of helpers.\r\n\r\nResolves SDK-532.",
          "is_bot": false,
          "headline": "Overhaul error handling (#60)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-30T14:39:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d61216724bb32c5e46f4b406a88f415530f807d",
          "body": "This PR adds an example for `GetAuthorizationUrl`.\r\n\r\nResolves SDK-529.",
          "is_bot": false,
          "headline": "Add example for `GetAuthorizationUrl` (#56)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-29T22:33:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf21d369b8944090cdb47e4705f9e1146633bbfc",
          "body": "Co-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Create `webhook::Directory` Type and `DirectoryActivated` Event (#52)",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-29T22:20:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "667d1f2e98ee0a89459f26afc1b688cd556fed1d",
          "body": "Co-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Add DirectoryUserDeleted webhook (#54)",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-29T21:30:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "beba7a7b3856aad58d2989a9d85c23de37dd1ce7",
          "body": "Co-authored-by: Sheldon Vaughn <svaughn@sheldons-mbp.lan>",
          "is_bot": false,
          "headline": "Add DirectoryUserCreated webhook event (#53)",
          "author_name": "Sheldon Vaughn",
          "author_login": null,
          "committed_at": "2022-06-29T19:50:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5dafc19bb112543e296f465a7fa85c56352240dd",
          "body": "This PR replaces `Options` terminology with `Params`, as it is a bit clearer.\r\n\r\nResolves SDK-505.",
          "is_bot": false,
          "headline": "Rename `Options` to `Params` (#51)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-29T18:35:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcadb37c5ff08415db72aa36c30d149b92ab8710",
          "body": "This PR adds the `connection.deleted` webhook event.\r\n\r\nResolves SDK-516.",
          "is_bot": false,
          "headline": "Add `connection.deleted` webhook event (#50)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-29T17:06:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d25f28c738c87652df049be0f2819764e8c9d891",
          "body": "This PR updates the `state` field on `Directory`s to use `KnownOrUnknown` to support deserializing unknown values.\r\n\r\nResolves SDK-528.",
          "is_bot": false,
          "headline": "Use `KnownOrUnknown` for `Directory.state` (#48)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-29T16:53:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f39444fcf36113c953919c944223631bc8ddbb89",
          "body": "This PR updates the `state` field on `Connection`s to use `KnownOrUnknown` to support deserializing unknown values.\r\n\r\nResolves SDK-515.",
          "is_bot": false,
          "headline": "Use `KnownOrUnknown` for `Connection.state` (#47)",
          "author_name": "Marshall Bowers",
          "author_login": "maxdeviant",
          "committed_at": "2022-06-29T16:52:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 13,
      "commits_last_year": 59,
      "latest_release_at": "2026-07-22T17:10:56Z",
      "latest_release_tag": "v3.0.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 7.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "workos",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "authentication",
            "sdk",
            "sso",
            "workos",
            "authkit",
            "api-bindings",
            "authentication"
          ],
          "ecosystem": "crates",
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/workos",
          "is_deprecated": false,
          "latest_version": "3.0.0",
          "repository_url": "https://github.com/workos/workos-rust",
          "versions_count": 19,
          "total_downloads": 239754,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 37588,
          "first_published_at": "2022-06-23T21:47:17.504647Z",
          "latest_published_at": "2026-07-22T17:12:01.307774Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 16,
      "watchers": 4,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-12",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml"
      ],
      "largest_source_bytes": 298094,
      "source_files_sampled": 796,
      "oversized_source_files": 5,
      "agent_instruction_files": [
        ".claude/CLAUDE.md",
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 2080
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "quinn-proto",
            "direct": false,
            "version": "0.11.14",
            "severity": "high",
            "ecosystem": "crates",
            "cvss_score": 7.5,
            "advisory_ids": [
              "RUSTSEC-2026-0185"
            ],
            "fixed_version": "0.11.15",
            "advisory_count": 1,
            "oldest_advisory_days": 31
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 209,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "reqwest",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.12"
        },
        {
          "name": "serde",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "serde_json",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "thiserror",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2"
        },
        {
          "name": "tokio",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "futures-util",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3"
        },
        {
          "name": "http",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "async-trait",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "bytes",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "hmac",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.12"
        },
        {
          "name": "sha2",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.10"
        },
        {
          "name": "aes-gcm",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.10"
        },
        {
          "name": "base64",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.22"
        },
        {
          "name": "rand",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9"
        },
        {
          "name": "subtle",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.5"
        },
        {
          "name": "url",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.5"
        },
        {
          "name": "hex",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "aes-gcm",
            "direct": true,
            "version": "0.10.3",
            "ecosystem": "crates"
          },
          {
            "name": "async-trait",
            "direct": true,
            "version": "0.1.89",
            "ecosystem": "crates"
          },
          {
            "name": "base64",
            "direct": true,
            "version": "0.22.1",
            "ecosystem": "crates"
          },
          {
            "name": "bytes",
            "direct": true,
            "version": "1.11.1",
            "ecosystem": "crates"
          },
          {
            "name": "futures-util",
            "direct": true,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "hex",
            "direct": true,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "hmac",
            "direct": true,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "http",
            "direct": true,
            "version": "1.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": true,
            "version": "0.9.4",
            "ecosystem": "crates"
          },
          {
            "name": "reqwest",
            "direct": true,
            "version": "0.12.28",
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": true,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": true,
            "version": "1.0.149",
            "ecosystem": "crates"
          },
          {
            "name": "sha2",
            "direct": true,
            "version": "0.10.9",
            "ecosystem": "crates"
          },
          {
            "name": "subtle",
            "direct": true,
            "version": "2.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror",
            "direct": true,
            "version": "2.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": true,
            "version": "1.52.2",
            "ecosystem": "crates"
          },
          {
            "name": "url",
            "direct": true,
            "version": "2.5.8",
            "ecosystem": "crates"
          },
          {
            "name": "aead",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "crates"
          },
          {
            "name": "aes",
            "direct": false,
            "version": "0.8.4",
            "ecosystem": "crates"
          },
          {
            "name": "aho-corasick",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "assert-json-diff",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "atomic-waker",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.11.1",
            "ecosystem": "crates"
          },
          {
            "name": "block-buffer",
            "direct": false,
            "version": "0.10.4",
            "ecosystem": "crates"
          },
          {
            "name": "bumpalo",
            "direct": false,
            "version": "3.20.2",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.61",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "cfg_aliases",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "cipher",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "core-foundation",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "core-foundation-sys",
            "direct": false,
            "version": "0.8.7",
            "ecosystem": "crates"
          },
          {
            "name": "cpufeatures",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-common",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "ctr",
            "direct": false,
            "version": "0.9.2",
            "ecosystem": "crates"
          },
          {
            "name": "deadpool",
            "direct": false,
            "version": "0.12.3",
            "ecosystem": "crates"
          },
          {
            "name": "deadpool-runtime",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "digest",
            "direct": false,
            "version": "0.10.7",
            "ecosystem": "crates"
          },
          {
            "name": "displaydoc",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "crates"
          },
          {
            "name": "equivalent",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "errno",
            "direct": false,
            "version": "0.3.14",
            "ecosystem": "crates"
          },
          {
            "name": "fastrand",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "fnv",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "foreign-types",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "foreign-types-shared",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "form_urlencoded",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-channel",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-core",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-executor",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-io",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-macro",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-sink",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-task",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "generic-array",
            "direct": false,
            "version": "0.14.7",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "crates"
          },
          {
            "name": "ghash",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "h2",
            "direct": false,
            "version": "0.4.14",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": false,
            "version": "0.17.0",
            "ecosystem": "crates"
          },
          {
            "name": "hermit-abi",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "crates"
          },
          {
            "name": "http-body",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "http-body-util",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "httparse",
            "direct": false,
            "version": "1.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "httpdate",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "hyper",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "hyper-rustls",
            "direct": false,
            "version": "0.27.9",
            "ecosystem": "crates"
          },
          {
            "name": "hyper-tls",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "hyper-util",
            "direct": false,
            "version": "0.1.20",
            "ecosystem": "crates"
          },
          {
            "name": "icu_collections",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_locale_core",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_normalizer",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_normalizer_data",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_properties",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_properties_data",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_provider",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "idna_adapter",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "2.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "inout",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "ipnet",
            "direct": false,
            "version": "2.12.0",
            "ecosystem": "crates"
          },
          {
            "name": "itoa",
            "direct": false,
            "version": "1.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "js-sys",
            "direct": false,
            "version": "0.3.98",
            "ecosystem": "crates"
          },
          {
            "name": "lazy_static",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.186",
            "ecosystem": "crates"
          },
          {
            "name": "linux-raw-sys",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "litemap",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "log",
            "direct": false,
            "version": "0.4.29",
            "ecosystem": "crates"
          },
          {
            "name": "lru-slab",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "mio",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "native-tls",
            "direct": false,
            "version": "0.2.18",
            "ecosystem": "crates"
          },
          {
            "name": "num_cpus",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.4",
            "ecosystem": "crates"
          },
          {
            "name": "opaque-debug",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "openssl",
            "direct": false,
            "version": "0.10.80",
            "ecosystem": "crates"
          },
          {
            "name": "openssl-macros",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "openssl-probe",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "openssl-sys",
            "direct": false,
            "version": "0.9.116",
            "ecosystem": "crates"
          },
          {
            "name": "percent-encoding",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-lite",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "pkg-config",
            "direct": false,
            "version": "0.3.33",
            "ecosystem": "crates"
          },
          {
            "name": "polyval",
            "direct": false,
            "version": "0.6.2",
            "ecosystem": "crates"
          },
          {
            "name": "potential_utf",
            "direct": false,
            "version": "0.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "ppv-lite86",
            "direct": false,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.106",
            "ecosystem": "crates"
          },
          {
            "name": "quinn",
            "direct": false,
            "version": "0.11.9",
            "ecosystem": "crates"
          },
          {
            "name": "quinn-proto",
            "direct": false,
            "version": "0.11.14",
            "ecosystem": "crates"
          },
          {
            "name": "quinn-udp",
            "direct": false,
            "version": "0.5.14",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.45",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand_chacha",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "1.12.3",
            "ecosystem": "crates"
          },
          {
            "name": "regex-automata",
            "direct": false,
            "version": "0.4.14",
            "ecosystem": "crates"
          },
          {
            "name": "regex-syntax",
            "direct": false,
            "version": "0.8.10",
            "ecosystem": "crates"
          },
          {
            "name": "ring",
            "direct": false,
            "version": "0.17.14",
            "ecosystem": "crates"
          },
          {
            "name": "rustc-hash",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "rustix",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "rustls",
            "direct": false,
            "version": "0.23.40",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-pki-types",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-webpki",
            "direct": false,
            "version": "0.103.13",
            "ecosystem": "crates"
          },
          {
            "name": "rustversion",
            "direct": false,
            "version": "1.0.22",
            "ecosystem": "crates"
          },
          {
            "name": "ryu",
            "direct": false,
            "version": "1.0.23",
            "ecosystem": "crates"
          },
          {
            "name": "schannel",
            "direct": false,
            "version": "0.1.29",
            "ecosystem": "crates"
          },
          {
            "name": "security-framework",
            "direct": false,
            "version": "3.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "security-framework-sys",
            "direct": false,
            "version": "2.17.0",
            "ecosystem": "crates"
          },
          {
            "name": "serde_core",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_urlencoded",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "slab",
            "direct": false,
            "version": "0.4.12",
            "ecosystem": "crates"
          },
          {
            "name": "smallvec",
            "direct": false,
            "version": "1.15.1",
            "ecosystem": "crates"
          },
          {
            "name": "socket2",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "crates"
          },
          {
            "name": "stable_deref_trait",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.117",
            "ecosystem": "crates"
          },
          {
            "name": "sync_wrapper",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "synstructure",
            "direct": false,
            "version": "0.13.2",
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": "3.27.0",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror-impl",
            "direct": false,
            "version": "2.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "tinystr",
            "direct": false,
            "version": "0.8.3",
            "ecosystem": "crates"
          },
          {
            "name": "tinyvec",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "tinyvec_macros",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-macros",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-native-tls",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-rustls",
            "direct": false,
            "version": "0.26.4",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-util",
            "direct": false,
            "version": "0.7.18",
            "ecosystem": "crates"
          },
          {
            "name": "tower",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "crates"
          },
          {
            "name": "tower-http",
            "direct": false,
            "version": "0.6.10",
            "ecosystem": "crates"
          },
          {
            "name": "tower-layer",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "tower-service",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "tracing",
            "direct": false,
            "version": "0.1.44",
            "ecosystem": "crates"
          },
          {
            "name": "tracing-core",
            "direct": false,
            "version": "0.1.36",
            "ecosystem": "crates"
          },
          {
            "name": "try-lock",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "crates"
          },
          {
            "name": "typenum",
            "direct": false,
            "version": "1.20.0",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.24",
            "ecosystem": "crates"
          },
          {
            "name": "universal-hash",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "untrusted",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "utf8_iter",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "vcpkg",
            "direct": false,
            "version": "0.2.15",
            "ecosystem": "crates"
          },
          {
            "name": "version_check",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "want",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "wasi",
            "direct": false,
            "version": "0.11.1+wasi-snapshot-preview1",
            "ecosystem": "crates"
          },
          {
            "name": "wasip2",
            "direct": false,
            "version": "1.0.3+wasi-0.2.9",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen",
            "direct": false,
            "version": "0.2.121",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-futures",
            "direct": false,
            "version": "0.4.71",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro",
            "direct": false,
            "version": "0.2.121",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro-support",
            "direct": false,
            "version": "0.2.121",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-shared",
            "direct": false,
            "version": "0.2.121",
            "ecosystem": "crates"
          },
          {
            "name": "web-sys",
            "direct": false,
            "version": "0.3.98",
            "ecosystem": "crates"
          },
          {
            "name": "web-time",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "webpki-roots",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "windows-link",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.52.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.60.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.61.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.53.5",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "wiremock",
            "direct": false,
            "version": "0.6.5",
            "ecosystem": "crates"
          },
          {
            "name": "wit-bindgen",
            "direct": false,
            "version": "0.57.1",
            "ecosystem": "crates"
          },
          {
            "name": "writeable",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "crates"
          },
          {
            "name": "yoke",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "yoke-derive",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.48",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.48",
            "ecosystem": "crates"
          },
          {
            "name": "zerofrom",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "zerofrom-derive",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "zeroize",
            "direct": false,
            "version": "1.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "zerotrie",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "zerovec",
            "direct": false,
            "version": "0.11.6",
            "ecosystem": "crates"
          },
          {
            "name": "zerovec-derive",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          },
          {
            "name": "zmij",
            "direct": false,
            "version": "1.0.21",
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 209,
        "direct_count": 17,
        "indirect_count": 192
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 29,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 5,
        "closed_unmerged_prs": 96
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "maxdeviant",
          "commits": 113,
          "avatar_url": "https://avatars.githubusercontent.com/u/1486634?v=4"
        },
        {
          "type": "User",
          "login": "gjtorikian",
          "commits": 35,
          "avatar_url": "https://avatars.githubusercontent.com/u/64050?v=4"
        },
        {
          "type": "User",
          "login": "jasonroelofs",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/3223?v=4"
        },
        {
          "type": "User",
          "login": "zenorocha",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/398893?v=4"
        },
        {
          "type": "User",
          "login": "willporter-workos",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/270392290?v=4"
        }
      ],
      "contributors_sampled": 5,
      "top_contributor_share": 0.748
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "block-generated-edits.yml",
        "ci.yml",
        "lint-pr-title.yml",
        "lint.yml",
        "release-please.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 4,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/16 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "1814125c6a362131da0b30f4d78ab625b11485d6",
        "ran_at": "2026-07-23T15:55:52Z",
        "aggregate_score": 6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T15:50:10Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-22T17:10:45Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/workos/workos-rust",
    "host": "github.com",
    "name": "workos-rust",
    "owner": "workos"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 66,
      "inputs": {
        "security": 68,
        "vitality": 81,
        "community": 48,
        "governance": 63,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 81,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "commits_last_year": 59,
              "human_commit_share": 0.76,
              "days_since_last_push": 0,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "59 commits in the last year",
                "points": 16,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 59
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 13,
              "latest_release_tag": "v3.0.0",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 7.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "13 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~7.9 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 7.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 48,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "forks": 1,
              "stars": 16,
              "watchers": 4,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "16 stars",
                "points": 19.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "4 watchers",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "good",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 76,
            "inputs": {
              "packages": [
                "workos"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 239754,
              "monthly_downloads": 37588
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "37,588 downloads/month across crates",
                "points": 61,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 37588,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 63,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 5,
              "top_contributor_share": 0.748
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 75% of commits",
                "points": 5.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 75
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "5 contributors",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "merged_prs": 29,
              "open_issues": 0,
              "closed_issues": 5,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 96
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "29/125 decided PRs merged",
                "points": 8.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 29,
                      "decided": 125
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/16 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "followers": 983,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "workos",
              "public_repos": 115,
              "account_age_days": 2716
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "983 followers of workos",
                "points": 21.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 983,
                      "login": "workos"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "115 public repos, account ~7 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 115
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "workos"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "19 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "backend",
                "sdk"
              ],
              "has_wiki": false,
              "homepage": "https://workos.github.io/workos-rust/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://workos.github.io/workos-rust/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "2 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 68,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/16 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 209 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 209
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 209,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 209,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 9
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 86,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.908,
              "agent_instruction_files": [
                ".claude/CLAUDE.md",
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 2080
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".claude/CLAUDE.md, AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".claude/CLAUDE.md, AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "69 of 76 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 69,
                      "sampled": 76
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "Cargo.toml"
              ],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 298094,
              "source_files_sampled": 796,
              "oversized_source_files": 5
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "5/796 source files over 60KB",
                "points": 54.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 796,
                      "oversized": 5
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index crates:workos@3.0.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T15:56:13.406075Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/workos/workos-rust.svg",
  "full_name": "workos/workos-rust",
  "license_state": "standard",
  "license_spdx": "MIT"
}