Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-24 19:36 UTC

LumeWeb / portal

The Web3 Hosting Platform

GoMIT★ 5 зірок⑂ 1 форкз черв. 2023 р.Переглянути на GitHub ↗

LumeWeb/portal має індекс здоров’я 62 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (94/100), найнижчий — Community & Adoption (29/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконує один учасник.

62
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

62
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

Lume WebОрганізація
26 підписників317 публічних репозиторіївз січ. 2022 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Gogo.lumeweb.com/portalv0.5.1-157 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

94Відмінний · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 0 дн. тому
31.8/36Ритм комітів — 46/52 тижнів із комітами
18/18Обсяг комітів — 835 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year835
human_commit_share0,6
days_since_last_push0
active_weeks_last_year46
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 10 релізів
36/36Свіжість релізів — останній реліз 59 дн. тому
19.8/27Ритм релізів — реліз кожні ~78,5 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count10
latest_release_tagv0.5.0
releases_from_tagsні
days_since_latest_release59
mean_days_between_releases78,5
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

29Критичний · 18% загального індексу
Як обчислюється оцінка
9.8/60Зірки — 5 зірок
0/25Форки — 1 форків
0/15Спостерігачі — 1 спостерігачів
Використані вхідні дані
forks1
stars5
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

55Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
0/22.5Розподіл комітів — головний контриб’ютор — автор 100% комітів
2.7/13.5Широта контриб’юторів — 2 контриб’юторів
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Використані вхідні дані
bus_factor1
contributors_sampled2
top_contributor_share0,999
Як обчислюється оцінка
11.7/46.8Вирішення issue — закрито 25% issue
33.9/38.3Прийняття PR — злито 1 499/1 693 вирішених PR
12/15OpenSSF Scorecard: Code-Review — Found 4/5 approved changesets -- score normalized to 8
Використані вхідні дані
merged_prs1 499
open_issues3
closed_issues1
issue_closed_ratio0,25
closed_unmerged_prs194
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
10.3/25Охоплення власника — 26 підписників у LumeWeb
22/25Послужний список — 317 публічних репозиторіїв, вік облікового запису ~4 р.
Використані вхідні дані
followers26
owner_typeOrganization
is_verified
owner_loginLumeWeb
public_repos317
account_age_days1 642

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у go
35/35Свіжість публікацій — остання публікація 7 дн. тому
20/20Історія версій — 15 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesgo.lumeweb.com/portal
ecosystemsgo
any_deprecatedні
min_days_since_publish7

Інженерна якість

Чи наявні базові інженерні практики та документація?

61Помірний · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 4 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні

Документація

50Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
0/10Теми
10/10Wiki
Використані вхідні дані
topics
has_wikiтак
homepage
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

66Помірний · 16% загального індексу

Стан безпеки

60Помірний
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — немає даних
2.5/2.5CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
6/7.5Code-Review — Found 4/5 approved changesets -- score normalized to 8
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate6
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
26.6/35Прямі залежності без відомих сповіщень — уражено 1: golang.org/x/crypto v0.54.0 (unknown)
0/25Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі
40/40Немає задавнених сповіщень — жодне сповіщення не є публічним довше за 90 дн.
Використані вхідні дані
sourceosv
advisories8
affected_packages5
assessed_packages342
unassessed_packages0
affected_by_severitycritical 1, high 3, unknown 1
direct_affected_packages1
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень. Залишкові ваги перенормовано. Звірено 342 резолвлених залежностей із OSV. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

78Добрий · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — AGENTS.md
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 60 з 60 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share1
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes15 112
Як обчислюється оцінка
12.6/18Розгортання однією командою — go.mod (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Go (статично типізована)
10/10Відтворюване середовище — lockfile
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 40 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfilesgo.sum, pnpm-lock.yaml
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configs
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0,4
Як обчислюється оцінка
45/45Типізований код — Go (статично типізована)
54.4/55Керовані розміри файлів — 4/377 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageGo
largest_source_bytes81 000
source_files_sampled377
oversized_source_files4

Ключові факти

5зірок GitHub
2контриб'юторів
835комітів за останні 12 місяців
0днів від останнього пушу
10релізів
1бас-фактор
3відкритих issue
Goпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

OpenSSF Scorecard 6.0 / 10
6.0сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-24 19:36 UTC

10Binary-Artifactsno binaries found in the repo
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
8Code-ReviewFound 4/5 approved changesets -- score normalized to 8
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
Прямі залежності 83
РеєстрПакетОбмеження версіїМаніфест
Gogithub.com/AfterShip/email-verifierv1.4.1go.mod
Gogithub.com/DATA-DOG/go-sqlmockv1.5.2go.mod
Gogithub.com/Oudwins/zogv0.22.2go.mod
Gogithub.com/adjust/rmq/v5v5.2.0go.mod
Gogithub.com/aws/aws-sdk-go-v2v1.43.0go.mod
Gogithub.com/aws/aws-sdk-go-v2/configv1.32.31go.mod
Gogithub.com/aws/aws-sdk-go-v2/credentialsv1.19.30go.mod
Gogithub.com/aws/aws-sdk-go-v2/service/s3v1.106.0go.mod
Gogithub.com/aws/smithy-gov1.27.4go.mod
Gogithub.com/casbin/casbin/v3v3.10.0go.mod
Gogithub.com/casbin/gorm-adapter/v3v3.41.0go.mod
Gogithub.com/docker/go-unitsv0.5.0go.mod
Gogithub.com/eventials/go-tusv0.0.0-20250612203642-7827b129cd4cgo.mod
Gogithub.com/fatih/structsv1.1.0go.mod
Gogithub.com/gabriel-vasile/mimetypev1.4.15go.mod
Gogithub.com/gammazero/workerpoolv1.2.1go.mod
Gogithub.com/go-co-op/gocron/mocks/v2v2.0.0-20260717182408-cc444c2a6f2cgo.mod
Gogithub.com/go-co-op/gocron/v2v2.22.0go.mod
Gogithub.com/go-gorm/caches/v4v4.0.5go.mod
Gogithub.com/go-kiss/monkeyv0.0.0-20240508030602-d03795257a64go.mod
Gogithub.com/go-sql-driver/mysqlv1.10.0go.mod
Gogithub.com/go-viper/mapstructure/v2v2.5.0go.mod
Gogithub.com/google/uuidv1.6.0go.mod
Gogithub.com/invopop/jsonschemav0.14.0go.mod
Gogithub.com/ipfs/go-cidv0.6.2go.mod
Gogithub.com/johannesboyne/gofakes3v1.2.0go.mod
Gogithub.com/kenshaw/snakerv0.4.3go.mod
Gogithub.com/knadh/koanf/parsers/jsonv1.0.0go.mod
Gogithub.com/knadh/koanf/providers/confmapv1.0.0go.mod
Gogithub.com/knadh/koanf/providers/rawbytesv1.0.0go.mod
Gogithub.com/knadh/koanf/providers/structsv1.0.0go.mod
Gogithub.com/knadh/koanf/v2v2.3.5go.mod
Gogithub.com/labstack/echo-contribv0.17.4go.mod
Gogithub.com/labstack/echo/v4v4.15.4go.mod
Gogithub.com/looplab/fsmv1.0.3go.mod
Gogithub.com/mattn/go-sqlite3v1.14.48go.mod
Gogithub.com/miekg/dnsv1.1.72go.mod
Gogithub.com/multiformats/go-multibasev0.3.0go.mod
Gogithub.com/multiformats/go-multihashv0.2.3go.mod
Gogithub.com/pquerna/otpv1.5.0go.mod
Gogithub.com/pressly/goose/v3v3.27.3go.mod
Gogithub.com/pterm/ptermv0.12.83go.mod
Gogithub.com/redis/go-redis/v9v9.21.0go.mod
Gogithub.com/samber/lov1.53.0go.mod
Gogithub.com/spf13/aferov1.15.0go.mod
Gogithub.com/stretchr/testifyv1.11.1go.mod
Gogithub.com/tus/tusd/v2v2.10.0go.mod
Gogithub.com/urfave/cli/v3v3.10.1go.mod
Gogithub.com/wneessen/go-mailv0.8.1go.mod
Gogo.lumeweb.com/configmanagerv0.3.29go.mod
Gogo.lumeweb.com/event/v2v2.1.0go.mod
Gogo.lumeweb.com/httputilv0.5.6go.mod
Gogo.lumeweb.com/portal-middlewarev0.3.7go.mod
Gogo.lumeweb.com/portal-routerv0.7.6go.mod
Gogo.opentelemetry.io/contrib/bridges/otelzapv0.19.0go.mod
Gogo.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelechov0.69.0go.mod
Gogo.opentelemetry.io/otelv1.44.0go.mod
Gogo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcv0.20.0go.mod
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.44.0go.mod
Gogo.opentelemetry.io/otel/logv0.20.0go.mod
Gogo.opentelemetry.io/otel/sdkv1.44.0go.mod
Gogo.opentelemetry.io/otel/sdk/logv0.20.0go.mod
Gogo.opentelemetry.io/otel/tracev1.44.0go.mod
Gogo.sia.tech/corev0.21.7go.mod
Gogo.sia.tech/coreutilsv0.23.5go.mod
Gogo.sia.tech/indexdv0.4.0go.mod
Gogo.sia.tech/siastoragev0.1.1-0.20260714120443-c13c06751808go.mod
Gogo.uber.org/mockv0.6.0go.mod
Gogo.uber.org/zapv1.28.0go.mod
Gogo.uber.org/zap/expv0.3.0go.mod
Gogolang.org/x/cryptov0.54.0go.mod
Gogolang.org/x/expv0.0.0-20260718201538-764159d718efgo.mod
Gogopkg.in/yaml.v3v3.0.1go.mod
Gogorm.io/datatypesv1.2.7go.mod
Gogorm.io/driver/mysqlv1.6.0go.mod
Gogorm.io/driver/sqlitev1.6.0go.mod
Gogorm.io/gormv1.31.2go.mod
Gogorm.io/plugin/opentelemetryv0.1.16go.mod
Gogithub.com/golang-jwt/jwt/v5v5.3.1go.mod
Gogithub.com/knadh/koanf/mapsv0.1.2go.mod
Gogithub.com/prometheus/client_golangv1.24.1go.mod
Gogithub.com/prometheus/client_modelv0.6.2go.mod
Gogo.lumeweb.com/queryutilv0.3.17go.mod
Усі залежності 342

Повний розв'язаний набір залежностей із графа залежностей GitHub: 83 прямих і 259 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Gogithub.com/adjust/rmq/v5v5.2.0пряма
Gogithub.com/aftership/email-verifierv1.4.1пряма
Gogithub.com/aws/aws-sdk-go-v2v1.43.0пряма
Gogithub.com/aws/aws-sdk-go-v2/configv1.32.31пряма
Gogithub.com/aws/aws-sdk-go-v2/credentialsv1.19.30пряма
Gogithub.com/aws/aws-sdk-go-v2/service/s3v1.106.0пряма
Gogithub.com/aws/smithy-gov1.27.4пряма
Gogithub.com/casbin/casbin/v3v3.10.0пряма
Gogithub.com/casbin/gorm-adapter/v3v3.41.0пряма
Gogithub.com/data-dog/go-sqlmockv1.5.2пряма
Gogithub.com/docker/go-unitsv0.5.0пряма
Gogithub.com/eventials/go-tusv0.0.0-20250612203642-7827b129cd4cпряма
Gogithub.com/fatih/structsv1.1.0пряма
Gogithub.com/gabriel-vasile/mimetypev1.4.15пряма
Gogithub.com/gammazero/workerpoolv1.2.1пряма
Gogithub.com/go-co-op/gocron/mocks/v2v2.0.0-20260717182408-cc444c2a6f2cпряма
Gogithub.com/go-co-op/gocron/v2v2.22.0пряма
Gogithub.com/go-gorm/caches/v4v4.0.5пряма
Gogithub.com/go-kiss/monkeyv0.0.0-20240508030602-d03795257a64пряма
Gogithub.com/go-sql-driver/mysqlv1.10.0пряма
Gogithub.com/go-viper/mapstructure/v2v2.5.0пряма
Gogithub.com/golang-jwt/jwt/v5v5.3.1пряма
Gogithub.com/google/uuidv1.6.0пряма
Gogithub.com/invopop/jsonschemav0.14.0пряма
Gogithub.com/ipfs/go-cidv0.6.2пряма
Gogithub.com/johannesboyne/gofakes3v1.2.0пряма
Gogithub.com/kenshaw/snakerv0.4.3пряма
Gogithub.com/knadh/koanf/mapsv0.1.2пряма
Gogithub.com/knadh/koanf/parsers/jsonv1.0.0пряма
Gogithub.com/knadh/koanf/providers/confmapv1.0.0пряма
Gogithub.com/knadh/koanf/providers/rawbytesv1.0.0пряма
Gogithub.com/knadh/koanf/providers/structsv1.0.0пряма
Gogithub.com/knadh/koanf/v2v2.3.5пряма
Gogithub.com/labstack/echo-contribv0.17.4пряма
Gogithub.com/labstack/echo/v4v4.15.4пряма
Gogithub.com/looplab/fsmv1.0.3пряма
Gogithub.com/mattn/go-sqlite3v1.14.48пряма
Gogithub.com/miekg/dnsv1.1.72пряма
Gogithub.com/multiformats/go-multibasev0.3.0пряма
Gogithub.com/multiformats/go-multihashv0.2.3пряма
Gogithub.com/oudwins/zogv0.22.2пряма
Gogithub.com/pquerna/otpv1.5.0пряма
Gogithub.com/pressly/goose/v3v3.27.3пряма
Gogithub.com/prometheus/client_golangv1.24.1пряма
Gogithub.com/prometheus/client_modelv0.6.2пряма
Gogithub.com/pterm/ptermv0.12.83пряма
Gogithub.com/redis/go-redis/v9v9.21.0пряма
Gogithub.com/samber/lov1.53.0пряма
Gogithub.com/spf13/aferov1.15.0пряма
Gogithub.com/stretchr/testifyv1.11.1пряма
Gogithub.com/tus/tusd/v2v2.10.0пряма
Gogithub.com/urfave/cli/v3v3.10.1пряма
Gogithub.com/wneessen/go-mailv0.8.1пряма
Gogo.lumeweb.com/configmanagerv0.3.29пряма
Gogo.lumeweb.com/event/v2v2.1.0пряма
Gogo.lumeweb.com/httputilv0.5.6пряма
Gogo.lumeweb.com/portal-middlewarev0.3.7пряма
Gogo.lumeweb.com/portal-routerv0.7.6пряма
Gogo.lumeweb.com/queryutilv0.3.17пряма
Gogo.opentelemetry.io/contrib/bridges/otelzapv0.19.0пряма
Gogo.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelechov0.69.0пряма
Gogo.opentelemetry.io/otelv1.44.0пряма
Gogo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcv0.20.0пряма
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.44.0пряма
Gogo.opentelemetry.io/otel/logv0.20.0пряма
Gogo.opentelemetry.io/otel/sdkv1.44.0пряма
Gogo.opentelemetry.io/otel/sdk/logv0.20.0пряма
Gogo.opentelemetry.io/otel/tracev1.44.0пряма
Gogo.sia.tech/corev0.21.7пряма
Gogo.sia.tech/coreutilsv0.23.5пряма
Gogo.sia.tech/indexdv0.4.0пряма
Gogo.sia.tech/siastoragev0.1.1-0.20260714120443-c13c06751808пряма
Gogo.uber.org/mockv0.6.0пряма
Gogo.uber.org/zapv1.28.0пряма
Gogo.uber.org/zap/expv0.3.0пряма
Gogolang.org/x/cryptov0.54.0пряма
Gogolang.org/x/expv0.0.0-20260718201538-764159d718efпряма
Gogopkg.in/yaml.v3v3.0.1пряма
Gogorm.io/datatypesv1.2.7пряма
Gogorm.io/driver/mysqlv1.6.0пряма
Gogorm.io/driver/sqlitev1.6.0пряма
Gogorm.io/gormv1.31.2пряма
Gogorm.io/plugin/opentelemetryv0.1.16пряма
Goatomicgo.dev/cursorv0.2.0непряма
Goatomicgo.dev/keyboardv0.2.9непряма
Goatomicgo.dev/schedulev0.1.0непряма
Gofilippo.io/edwards25519v1.2.0непряма
Gogithub.com/alicebob/miniredis/v2v2.37.0непряма
Gogithub.com/andybalholm/brotliv1.2.2непряма
Gogithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamv1.7.14непряма
Gogithub.com/aws/aws-sdk-go-v2/feature/ec2/imdsv1.18.31непряма
Gogithub.com/aws/aws-sdk-go-v2/internal/configsourcesv1.4.31непряма
Gogithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2v2.7.31непряма
Gogithub.com/aws/aws-sdk-go-v2/internal/v4av1.4.32непряма
Gogithub.com/aws/aws-sdk-go-v2/service/internal/accept-encodingv1.13.13непряма
Gogithub.com/aws/aws-sdk-go-v2/service/internal/checksumv1.9.24непряма
Gogithub.com/aws/aws-sdk-go-v2/service/internal/presigned-urlv1.13.31непряма
Gogithub.com/aws/aws-sdk-go-v2/service/internal/s3sharedv1.19.32непряма
Gogithub.com/aws/aws-sdk-go-v2/service/signinv1.5.0непряма
Gogithub.com/aws/aws-sdk-go-v2/service/ssov1.33.0непряма
Gogithub.com/aws/aws-sdk-go-v2/service/ssooidcv1.38.0непряма
Gogithub.com/aws/aws-sdk-go-v2/service/stsv1.45.0непряма
Gogithub.com/bahlo/generic-list-gov0.2.0непряма
Gogithub.com/beorn7/perksv1.0.1непряма
Gogithub.com/bmatcuk/doublestar/v4v4.9.1непряма
Gogithub.com/boombuler/barcodev1.1.0непряма
Gogithub.com/buger/jsonparserv1.1.2непряма
Gogithub.com/casbin/govaluatev1.10.0непряма
Gogithub.com/cenkalti/backoff/v5v5.0.3непряма
Gogithub.com/cespare/xxhash/v2v2.3.0непряма
Gogithub.com/clickhouse/ch-gov0.73.0непряма
Gogithub.com/clickhouse/clickhouse-go/v2v2.47.0непряма
Gogithub.com/clipperhouse/uax29/v2v2.7.0непряма
Gogithub.com/containerd/consolev1.0.5непряма
Gogithub.com/coreos/go-semverv0.3.1непряма
Gogithub.com/coreos/go-systemd/v22v22.7.0непряма
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccнепряма
Gogithub.com/dunglas/httpsfvv1.1.0непряма
Gogithub.com/dustin/go-humanizev1.0.1непряма
Gogithub.com/fsnotify/fsnotifyv1.9.0непряма
Gogithub.com/gammazero/dequev1.2.1непряма
Gogithub.com/getkin/kin-openapiv0.134.0непряма
Gogithub.com/ghodss/yamlv1.0.0непряма
Gogithub.com/glebarez/go-sqlitev1.22.0непряма
Gogithub.com/glebarez/sqlitev1.11.0непряма
Gogithub.com/go-faster/cityv1.0.1непряма
Gogithub.com/go-faster/errorsv0.7.1непряма
Gogithub.com/go-logr/logrv1.4.4непряма
Gogithub.com/go-logr/stdrv1.2.2непряма
Gogithub.com/go-openapi/jsonpointerv0.22.5непряма
Gogithub.com/go-openapi/swag/jsonnamev0.25.5непряма
Gogithub.com/golang-sql/civilv0.0.0-20220223132316-b832511892a9непряма
Gogithub.com/golang-sql/sqlexpv0.1.0непряма
Gogithub.com/golang/protobufv1.5.4непряма
Gogithub.com/gookit/colorv1.6.0непряма
Gogithub.com/grpc-ecosystem/grpc-gateway/v2v2.29.0непряма
Gogithub.com/hashicorp/go-versionv1.9.0непряма
Gogithub.com/hbollon/go-edlibv1.7.0непряма
Gogithub.com/huandu/go-tlsv1.0.1непряма
Gogithub.com/jackc/pgpassfilev1.0.0непряма
Gogithub.com/jackc/pgservicefilev0.0.0-20240606120523-5a60cdf6a761непряма
Gogithub.com/jackc/pgx/v5v5.10.0непряма
Gogithub.com/jackc/puddle/v2v2.2.2непряма
Gogithub.com/jinzhu/inflectionv1.0.0непряма
Gogithub.com/jinzhu/nowv1.1.5непряма
Gogithub.com/jonboulle/clockworkv0.5.0непряма
Gogithub.com/josharian/internv1.0.0непряма
Gogithub.com/julienschmidt/httprouterv1.3.0непряма
Gogithub.com/klauspost/compressv1.19.1непряма
Gogithub.com/klauspost/cpuid/v2v2.3.0непряма
Gogithub.com/klauspost/reedsolomonv1.14.1непряма
Gogithub.com/knadh/koanf/parsers/yamlv1.1.0непряма
Gogithub.com/knadh/koanf/providers/filev1.2.1непряма
Gogithub.com/labstack/gommonv0.5.0непряма
Gogithub.com/lithammer/fuzzysearchv1.1.8непряма
Gogithub.com/mailru/easyjsonv0.9.1непряма
Gogithub.com/mattn/go-colorablev0.1.15непряма
Gogithub.com/mattn/go-isattyv0.0.23непряма
Gogithub.com/mattn/go-runewidthv0.0.20непряма
Gogithub.com/mfridman/interpolatev0.0.2непряма
Gogithub.com/microsoft/go-mssqldbv1.10.0непряма
Gogithub.com/minio/sha256-simdv1.0.1непряма
Gogithub.com/mitchellh/copystructurev1.2.0непряма
Gogithub.com/mitchellh/reflectwalkv1.0.2непряма
Gogithub.com/mohae/deepcopyv0.0.0-20170929034955-c48cc78d4826непряма
Gogithub.com/mr-tron/base58v1.3.0непряма
Gogithub.com/multiformats/go-base32v0.1.0непряма
Gogithub.com/multiformats/go-base36v0.2.0непряма
Gogithub.com/multiformats/go-varintv0.1.0непряма
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822непряма
Gogithub.com/ncruces/go-strftimev1.0.0непряма
Gogithub.com/oasdiff/yamlv0.0.0-20260313112342-a3ea61cb4d4cнепряма
Gogithub.com/oasdiff/yaml3v0.0.0-20260224194419-61cd415a242bнепряма
Gogithub.com/oschwald/geoip2-golangv1.13.0непряма
Gogithub.com/oschwald/maxminddb-golangv1.13.1непряма
Gogithub.com/paulmach/orbv0.13.0непряма
Gogithub.com/pb33f/ordered-map/v2v2.3.1непряма
Gogithub.com/perimeterx/marshmallowv1.1.5непряма
Gogithub.com/pierrec/lz4/v4v4.1.27непряма
Gogithub.com/pkg/errorsv0.9.1непряма
Gogithub.com/pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2непряма
Gogithub.com/prometheus/commonv0.70.1непряма
Gogithub.com/prometheus/procfsv0.21.1непряма
Gogithub.com/quic-go/qpackv0.6.0непряма
Gogithub.com/quic-go/quic-gov0.60.0непряма
Gogithub.com/quic-go/webtransport-gov0.11.1непряма
Gogithub.com/remyoudompheng/bigfftv0.0.0-20230129092748-24d4a6f8daecнепряма
Gogithub.com/robfig/cron/v3v3.0.1непряма
Gogithub.com/rs/corsv1.11.1непряма
Gogithub.com/ryszard/goskiplistv0.0.0-20150312221310-2dfbae5fcf46непряма
Gogithub.com/segmentio/asmv1.2.1непряма
Gogithub.com/sethvargo/go-retryv0.4.0непряма
Gogithub.com/shopspring/decimalv1.4.0непряма
Gogithub.com/spaolacci/murmur3v1.1.0непряма
Gogithub.com/spf13/castv1.10.0непряма
Gogithub.com/stretchr/objxv0.5.3непряма
Gogithub.com/valyala/bytebufferpoolv1.0.0непряма
Gogithub.com/valyala/fasttemplatev1.2.2непряма
Gogithub.com/woodsbury/decimal128v1.4.0непряма
Gogithub.com/xo/terminfov0.0.0-20220910002029-abceb7e1c41eнепряма
Gogithub.com/yuin/gopher-luav1.1.1непряма
Gogo.etcd.io/etcd/api/v3v3.7.0непряма
Gogo.etcd.io/etcd/client/pkg/v3v3.7.0непряма
Gogo.etcd.io/etcd/client/v3v3.7.0непряма
Gogo.lumeweb.com/gswaggerv0.20.12непряма
Gogo.opentelemetry.io/auto/sdkv1.2.1непряма
Gogo.opentelemetry.io/otel/exporters/otlp/otlptracev1.44.0непряма
Gogo.opentelemetry.io/otel/metricv1.44.0непряма
Gogo.opentelemetry.io/proto/otlpv1.10.0непряма
Gogo.shabbyrobe.org/gocovmergev0.0.0-20230507111327-fa4f82cfbf4dнепряма
Gogo.sia.tech/japev0.14.1непряма
Gogo.sia.tech/muxv1.5.3непряма
Gogo.uber.org/atomicv1.11.0непряма
Gogo.uber.org/multierrv1.11.0непряма
Gogo.yaml.in/yaml/v2v2.4.4непряма
Gogo.yaml.in/yaml/v3v3.0.4непряма
Gogo.yaml.in/yaml/v4v4.0.0-rc.2непряма
Gogolang.org/x/archv0.24.0непряма
Gogolang.org/x/modv0.38.0непряма
Gogolang.org/x/netv0.57.0непряма
Gogolang.org/x/syncv0.22.0непряма
Gogolang.org/x/sysv0.47.0непряма
Gogolang.org/x/termv0.45.0непряма
Gogolang.org/x/textv0.40.0непряма
Gogolang.org/x/timev0.15.0непряма
Gogolang.org/x/toolsv0.48.0непряма
Gogoogle.golang.org/genproto/googleapis/apiv0.0.0-20260526163538-3dc84a4a5aaaнепряма
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20260720211330-0afa2a65878aнепряма
Gogoogle.golang.org/grpcv1.82.1непряма
Gogoogle.golang.org/protobufv1.36.11непряма
Gogopkg.in/yaml.v2v2.4.0непряма
Gogorm.io/driver/clickhousev0.7.0непряма
Gogorm.io/driver/postgresv1.6.0непряма
Gogorm.io/driver/sqlserverv1.6.3непряма
Gogorm.io/plugin/dbresolverv1.6.2непряма
Golukechampine.com/blake3v1.4.1непряма
Golukechampine.com/frandv1.5.1непряма
Gomodernc.org/libcv1.74.3непряма
Gomodernc.org/mathutilv1.7.1непряма
Gomodernc.org/memoryv1.11.0непряма
Gomodernc.org/sqlitev1.54.0непряма
npm@babel/runtime7.28.4непряма
npm@changesets/apply-release-plan7.0.14непряма
npm@changesets/assemble-release-plan6.0.9непряма
npm@changesets/changelog-git0.2.1непряма
npm@changesets/cli2.29.8непряма
npm@changesets/config3.1.2непряма
npm@changesets/errors0.2.0непряма
npm@changesets/get-dependents-graph2.1.3непряма
npm@changesets/get-release-plan4.0.14непряма
npm@changesets/get-version-range-type0.4.0непряма
npm@changesets/git3.0.4непряма
npm@changesets/logger0.1.1непряма
npm@changesets/parse0.4.2непряма
npm@changesets/pre2.0.2непряма
npm@changesets/read0.6.6непряма
npm@changesets/should-skip-package0.1.2непряма
npm@changesets/types4.1.0непряма
npm@changesets/types6.1.0непряма
npm@changesets/write0.4.0непряма
npm@inquirer/external-editor1.0.3непряма
npm@manypkg/find-root1.1.0непряма
npm@manypkg/get-packages1.1.3непряма
npm@nodelib/fs.scandir2.1.5непряма
npm@nodelib/fs.stat2.0.5непряма
npm@nodelib/fs.walk1.2.8непряма
npm@types/node12.20.55непряма
npmansi-colors4.1.3непряма
npmansi-regex5.0.1непряма
npmargparse1.0.10непряма
npmargparse2.0.1непряма
npmarray-union2.1.0непряма
npmbetter-path-resolve1.0.0непряма
npmbraces3.0.3непряма
npmchardet2.1.1непряма
npmci-info3.9.0непряма
npmcross-spawn7.0.6непряма
npmdetect-indent6.1.0непряма
npmdir-glob3.0.1непряма
npmenquirer2.4.1непряма
npmesprima4.0.1непряма
npmextendable-error0.1.7непряма
npmfast-glob3.3.3непряма
npmfastq1.19.1непряма
npmfill-range7.1.1непряма
npmfind-up4.1.0непряма
npmfs-extra7.0.1непряма
npmfs-extra8.1.0непряма
npmglob-parent5.1.2непряма
npmglobby11.1.0непряма
npmgraceful-fs4.2.11непряма
npmhuman-id4.1.3непряма
npmiconv-lite0.7.1непряма
npmignore5.3.2непряма
npmis-extglob2.1.1непряма
npmis-glob4.0.3непряма
npmis-number7.0.0непряма
npmis-subdir1.2.0непряма
npmis-windows1.0.2непряма
npmisexe2.0.0непряма
npmjs-yaml3.14.2непряма
npmjs-yaml4.1.1непряма
npmjsonfile4.0.0непряма
npmlocate-path5.0.0непряма
npmlodash.startcase4.4.0непряма
npmmerge21.4.1непряма
npmmicromatch4.0.8непряма
npmmri1.2.0непряма
npmoutdent0.5.0непряма
npmp-filter2.1.0непряма
npmp-limit2.3.0непряма
npmp-locate4.1.0непряма
npmp-map2.1.0непряма
npmp-try2.2.0непряма
npmpackage-manager-detector0.2.11непряма
npmpath-exists4.0.0непряма
npmpath-key3.1.1непряма
npmpath-type4.0.0непряма
npmpicocolors1.1.1непряма
npmpicomatch2.3.1непряма
npmpify4.0.1непряма
npmprettier2.8.8непряма
npmquansync0.2.11непряма
npmqueue-microtask1.2.3непряма
npmread-yaml-file1.1.0непряма
npmresolve-from5.0.0непряма
npmreusify1.1.0непряма
npmrun-parallel1.2.0непряма
npmsafer-buffer2.1.2непряма
npmsemver7.7.3непряма
npmshebang-command2.0.0непряма
npmshebang-regex3.0.0непряма
npmsignal-exit4.1.0непряма
npmslash3.0.0непряма
npmspawndamnit3.0.1непряма
npmsprintf-js1.0.3непряма
npmstrip-ansi6.0.1непряма
npmstrip-bom3.0.0непряма
npmterm-size2.2.1непряма
npmto-regex-range5.0.1непряма
npmuniversalify0.1.2непряма
npmwhich2.0.2непряма
Сповіщення про залежності 5

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 342 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 5 мають відомі сповіщення, з них 1 прямі.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
github.com/getkin/kin-openapiv0.134.0непрямакритична10.144.0
js-yaml3.14.2непрямависока24.3.0
js-yaml4.1.1непрямависока24.3.0
picomatch2.3.1непрямависока24.0.4
golang.org/x/cryptov0.54.0пряманевідома1

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 7726,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1980734,
        "Shell": 2301
      },
      "pushed_at": "2026-07-24T13:01:07Z",
      "created_at": "2023-06-28T05:12:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T13:01:41Z",
      "description": "The Web3 Hosting Platform",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "develop",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://lumeweb.com",
      "name": "Lume Web",
      "type": "Organization",
      "login": "LumeWeb",
      "company": null,
      "location": "United States of America",
      "followers": 26,
      "avatar_url": "https://avatars.githubusercontent.com/u/98288234?v=4",
      "created_at": "2022-01-23T22:19:27Z",
      "is_verified": null,
      "public_repos": 317,
      "account_age_days": 1642
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-05-26T16:49:40Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2025-01-07T14:58:31Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2025-01-01T13:40:53Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2024-11-06T10:33:24Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2024-11-06T08:29:00Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2024-11-06T08:05:05Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2024-10-31T14:45:05Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2024-10-30T11:00:33Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2024-06-19T19:24:32Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2024-06-19T04:44:31Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d74f4f158e630272b420d9fec2921a1399c49218",
          "body": "…24.1",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/prometheus/client_golang to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T13:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86a0c12ae99519b2ded285a3c16af55fd078d2da",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.15",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-23T19:16:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c41a9d5fa1b4da47df2f9d42c6104291f2d979af",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/httputil to v0.5.6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T18:15:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e95763dd4179496b2188810fd52821b9a4536585",
          "body": "…32.31",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T18:08:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dadc7cf595818e1c0e29c165384b25aaf89f0b9",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/pressly/goose/v3 to v3.27.3",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T16:46:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c144f8a515cb524f924ad51fcdad8e60be1028c",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.14",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T16:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a32858a7aaedf15cf9e980f8801c7addc77432ed",
          "body": "…o v1.19.30",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/credentials t…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T09:38:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "504215509d051636d08da30c966549bf2d9e14bf",
          "body": "… v1.106.0",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T03:01:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c41c0241abaf9508d59754104cf2ee710a6ecf4",
          "body": "…24.0",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/prometheus/client_golang to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-20T20:36:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f465740515cb2096874b7cae81a1fbe6ade6bde",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update golang.org/x/exp digest to 764159d",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-19T05:18:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bfbfa016507bcb760ad4a05fba818060d2885a1",
          "body": "…0.0-20260717182408-cc444c2a6f2c",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-18T03:12:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "149039d2061018ba0048b066a2457f24295c25c4",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T17:40:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50d94ef81a8af73e9b05f16f5088e8014a130546",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T17:17:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "901049bcdd77c6e71e5cdc782ba686ae23d9d926",
          "body": "Error keys like UPLOAD_QUOTA_EXCEEDED now produce reason UploadQuotaExceeded\ninstead of the raw SCREAMING_SNAKE_CASE value. Account errors with Err\nprefix still work (ErrAccountCreationFailed -> AccountCreationFailed).",
          "is_bot": false,
          "headline": "fix: MarshalJSON converts SCREAMING_SNAKE_CASE to PascalCase",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T14:40:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8e9ba1ab202e80cd12732199a55651d19b813a8",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update go.sia.tech/siastorage digest to c13c067",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T14:15:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efeb01c2a05bad715ffb595d09811e54ba92d317",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.sia.tech/core to v0.21.7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T14:14:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68f0147acf02a6d7fdb9beb717707a5a42847ed8",
          "body": "feat(core): add MarshalJSON to core.Error for canonical error shape",
          "is_bot": false,
          "headline": "Merge pull request #1681 from LumeWeb/feat/core-error-marshal-json",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T14:10:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b60f16e3aba77fe393ef41b12fc5427bea8c94c5",
          "body": "Add json.Marshaler implementation to core.Error producing the canonical\n{\"error\":{\"reason\":\"...\",\"details\":\"...\"}} shape. This is the same\nlogic duplicated across IPFSError, BillingError, and QuotaError plugins.\n\nWith this change, httputil v0.5.5's errors.As-based Marshaler detection\nwill serialize \n[…]\nh ErrKey/Err prefix stripping (matches plugin logic)\n- Add json.Marshaler interface assertion\n- Remove json struct tags (MarshalJSON is now authoritative)\n- Add tests for prefix stripping and nil case",
          "is_bot": false,
          "headline": "feat(core): add MarshalJSON to core.Error for canonical error shape",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T14:09:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3690e7bb2666ac157a1aec0296f5d4baab3877e",
          "body": "…ults\n\nfix: use CamelCase keys in MailConfig.Defaults to match configmanager field lookup",
          "is_bot": false,
          "headline": "Merge pull request #1680 from LumeWeb/fix/mail-config-snake-case-defa…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T09:59:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45fe4898b58d6f7f5b987489808da0d23f53a622",
          "body": "… field lookup\n\nconfigmanager's DefaultConfigSource.findMatchingField matches defaults\nmap keys against Go struct field names (case-sensitive), not config\ntags. Snake_case keys like \"auth_type\" never matched field \"AuthType\",\nso no mail defaults were applied — AuthType stayed empty, causing\nSMTP auth to be silently skipped and MXRoute to reject with 550.",
          "is_bot": false,
          "headline": "fix: use CamelCase keys in MailConfig.Defaults to match configmanager…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T09:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e43559faad0ab8f33081057241582d04cd65e30b",
          "body": "… v1.105.2",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T03:28:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f520b2d3f5851efce7abbd9bff0035875418ee0",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/smithy-go to v1.27.4",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T03:18:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4eacd9b8b04bc32f4239ed5594b92119bfed43be",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go action to v7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-16T06:03:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fa77c4a7d9e545e262be26080c0c67c6868438a",
          "body": "Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.105.0 to 1.105.1.\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.105.0...service/s3/v1.105.1)\n\n---\nupdated-dependencie\n[…]\n.com/aws/aws-sdk-go-v2/service/s3\n  dependency-version: 1.105.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T02:40:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29b8c319ccd8e187022f1d7b83e134e4f0948e43",
          "body": "…32.30",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-14T02:21:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6eeb198b960f61aef407e050e4bdc2652708d05a",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/mattn/go-sqlite3 to v1.14.48",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-13T08:32:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9257904eabb42c1aa4c377fa1fc8127fd88b83e4",
          "body": "…ation\n\nfix(migrator): remove hash computation and drop unused hash column",
          "is_bot": false,
          "headline": "Merge pull request #1670 from LumeWeb/fix/migrator-remove-hash-comput…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:53:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2f1fe247fed6728433328fb4da9e7a2ebcdab19",
          "body": "- Removed protocol.Hash() call — objectKey from renterd is already the encoded hash\n- Eliminated double-download (hash consumed reader, then re-downloaded for upload)\n- Dropped unused hash column from renter_objects table (migration + model)\n- Removed Hash field assignments from pinAndStore and uploadStaged\n- Updated tests to remove Hash field references and mock expectations",
          "is_bot": false,
          "headline": "fix(migrator): remove hash computation and drop unused hash column",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:52:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26a4f0a721391f8fe88b3c2aaac7e489b77b4a51",
          "body": "fix(db): replace gorm-prometheus plugin with core registry integration",
          "is_bot": false,
          "headline": "Merge pull request #1669 from LumeWeb/fix/db-metrics-into-core-registry",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:36:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0a57b40e54b16588e515085b0e4213f82030998",
          "body": "The gorm-prometheus plugin ran its own HTTP server on :9091\n(StartServer: true), causing port bind conflicts when multiple\nprocesses (e.g. the migrate CLI) initialize the DB.\n\nReplace it with a native dbStatsCollector that registers DB stats\ngauges on the portal's core metrics registry, exposed through the\nexisting /metrics endpoint. Same metric names (gorm_dbstats_*),\nsame refresh interval, no separate HTTP server.\n\nRemoves gorm.io/plugin/prometheus dependency.",
          "is_bot": false,
          "headline": "fix(db): replace gorm-prometheus plugin with core registry integration",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4dbdf245555b67aa16b1eee08117e04a4ae1db2",
          "body": "…oute\n\nfix(migrator): correct renterd worker download route and add missing migration",
          "is_bot": false,
          "headline": "Merge pull request #1668 from LumeWeb/fix/migrator-renterd-download-r…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:28:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afb4fb3cd5f39d04b8843e6b473701a193fc603c",
          "body": "…ing migration\n\n- renterd v2 worker route is /object/*key (singular), not /objects/*key\n- add goose migration for object_sync_cursor table (was registered as\n  a GORM model but never had a migration)",
          "is_bot": false,
          "headline": "fix(migrator): use correct renterd worker download route and add miss…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:28:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3be852fb3363d956996db7b7838ab0086e108adf",
          "body": "feat: add core.WireService for CLI commands to wire individual services",
          "is_bot": false,
          "headline": "Merge pull request #1667 from LumeWeb/feat/wire-service-helper",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3025fe516d11aa1a69bb41a704fe164ed6ac6e9",
          "body": "Add WireService(ctx, service) to core/context.go — extracts the\ncomponent wiring logic from ContextWithStartupComponent's OnStartup\ncallback into a reusable function. CLI commands call this after Init()\nto wire config/DB/logger/tracer into a specific service without\nrunning all startup funcs.\n\nRente\n[…]\nver path unchanged.\n\nThe migrate command now uses WireService + ServiceInit instead of\nStartComponents(), avoiding resource conflicts (LevelDB locks,\nPrometheus port bindings) with the running server.",
          "is_bot": false,
          "headline": "feat: add core.WireService for CLI commands to wire individual services",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T03:58:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "976904345d4e2b51fa54afe6f976d351d1773158",
          "body": "…nents-and-servers\n\nrefactor: split Start() into StartComponents() and StartServers()",
          "is_bot": false,
          "headline": "Merge pull request #1666 from LumeWeb/refactor/split-start-into-compo…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T03:37:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a31519f2175d95d6083df9705761256b196dda29",
          "body": "Start() is now a thin wrapper that calls StartComponents() then\nStartServers():\n\n- StartComponents(): boot start event, startup funcs (wires config/DB\n  into services and runs their init), startup funcs completed event.\n- StartServers(): plugin workflows, protocol workflows, protocols,\n  cron, HTTP,\n[…]\n starting HTTP, cron, or mailer.\n\nAlso fixes the migrate command to use ActivePortal().Context() for\nservice lookup — StartComponents updates the portal's context, making\nthe original portalCtx stale.",
          "is_bot": false,
          "headline": "refactor: split Start() into StartComponents() and StartServers()",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T03:31:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3650ffde346b14ed5e1ce64e55d9d82b6e74deec",
          "body": "fix(migrator): strip leading slash from renterd object keys",
          "is_bot": false,
          "headline": "Merge pull request #1665 from LumeWeb/fix/migrator-leading-slash",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:41:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d5a73b3e0a9ff2b37b52d6b4612c504793de61c",
          "body": "Renterd returns object keys with a leading slash (e.g. /Qm...), but\nnormal uploads use EncodeFileName which produces keys without a leading\nslash. Without stripping, migrated objects would be stored under a\ndifferent key than normal uploads, causing duplicate uploads and failed\nlookups by UploadExists.",
          "is_bot": false,
          "headline": "fix(migrator): strip leading slash from renterd object keys",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a69418094805ca57a1a472d61ca391da36cc9e8",
          "body": "fix(migrator): use ActivePortal context for service lookup",
          "is_bot": false,
          "headline": "Merge pull request #1664 from LumeWeb/fix/migrator-stale-context",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:31:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13ae916f6c78102c704475d4742c7e5f8327b805",
          "body": "portal.Init() creates a new context with registered services and updates\nthe portal's internal context via SetContext. The original portalCtx\npassed to NewActivePortal is stale — it doesn't have any services.\nUse portal.ActivePortal().Context() to get the updated context.",
          "is_bot": false,
          "headline": "fix(migrator): use ActivePortal context for service lookup",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:30:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1666bf5d7a537c06fecf86113fbc4e35a9b894f8",
          "body": "fix(migrator): use portal.Stop instead of portal.Shutdown to avoid os.Exit",
          "is_bot": false,
          "headline": "Merge pull request #1663 from LumeWeb/fix/migrator-stop-not-shutdown",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:15:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23abf85658bfe1640116069056a52a61ba905d3b",
          "body": "….Exit\n\nportal.Shutdown calls os.Exit(), which kills the process before the\nCLI framework can print returned errors. This was swallowing all\nerrors from migrateRenterdAction — including Init failures, missing\nservices, and migration errors. Use portal.Stop() for cleanup instead,\nwhich does not call os.Exit.",
          "is_bot": false,
          "headline": "fix(migrator): use portal.Stop instead of portal.Shutdown to avoid os…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T18:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dcd97c15e5411047689b17e9cfdf74f7ec53290",
          "body": "fix(migrator): correct renterd API endpoints and error handling",
          "is_bot": false,
          "headline": "Merge pull request #1662 from LumeWeb/fix/migrator-renterd-endpoints",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T18:14:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bdabca7950d583332f2bb333a702b2e655d4603c",
          "body": "- Fix bus list endpoint: use /api/bus/objects/* with query params\n- Fix worker download endpoint: use /api/worker/objects/{key}\n- Consolidate bus and worker URLs into single --renterd-url flag\n  (renterd serves both on same port, different path prefixes)\n- Fix portal.Init error being swallowed by portal.Shutdown's os.Exit\n  by logging and shutting down before returning the error\n- Add comprehensive tests for RenterdClient HTTP behavior",
          "is_bot": false,
          "headline": "fix(migrator): correct renterd API endpoints and error handling",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T18:09:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06c5a8233396791b13925a8c93b160e20d2abaef",
          "body": "fix(cli): print CLI errors to stderr before exit",
          "is_bot": false,
          "headline": "Merge pull request #1661 from LumeWeb/fix/cli-print-errors",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:34:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf729225a18941db695e6c30d7b54ed0f46012f1",
          "body": null,
          "is_bot": false,
          "headline": "fix(cli): print CLI errors to stderr before exit",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:33:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06006fe619a7e4d757c12ed3f6901bb07267d780",
          "body": "fix(sia-login): gate env var output behind --print-env flag",
          "is_bot": false,
          "headline": "Merge pull request #1660 from LumeWeb/fix/sia-login-env-vars",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:08:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "768fcb30df547e4d2ad48b492c2a32753d1643c1",
          "body": "Env vars are no longer printed by default after login. Users must\nexplicitly opt in with --print-env. Also changed Persist() to a\nglobal save instead of scoped to core.storage.sia.",
          "is_bot": false,
          "headline": "fix(sia-login): gate env var output behind --print-env flag",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:07:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d4892a38a0d8e9ac192b76cd722efbd6f21c637",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.sia.tech/indexd to v0.4.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T13:43:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b242b55e63aeb3631e15d64c1965b7d421675b6c",
          "body": "fix(sia-login): persist app key to config file after BulkSetAtomic",
          "is_bot": false,
          "headline": "Merge pull request #1659 from LumeWeb/fix/sia-login-persist-app-key",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:40:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1135a48a84010252e55ef7327ff4aa64746691b0",
          "body": "BulkSetAtomic only sets values in-memory (koanf). Persist() must be\ncalled separately to write the values to the file source so they\nsurvive restarts.",
          "is_bot": false,
          "headline": "fix(sia-login): persist app key to config file after BulkSetAtomic",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:39:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "558aa4b195a7418b1ee63d400b7b7bdd0db221bc",
          "body": "fix(cron): guard Stop() against nil BaseComponent",
          "is_bot": false,
          "headline": "Merge pull request #1656 from LumeWeb/fix/cron-stop-nil-panic",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:36:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b622bd0e9483334f036daf4259772dfc0419d97",
          "body": "CronServiceDefault.Stop() calls c.Config() which dereferences the\nembedded *BaseComponent. When the portal shuts down before the\nstartup sequence has wired the component (e.g. migrate-renterd-objects\ncommand), BaseComponent is nil and causes a SIGSEGV.\n\nAdd a nil guard to skip cleanup when the component was never initialized.",
          "is_bot": false,
          "headline": "fix(cron): guard Stop() against nil BaseComponent",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:35:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bd3bf0d4345f73e6a1b5bca19a8be4be9f33f86",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update go.sia.tech/siastorage digest to 49501b7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T12:58:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d83aa1f0689a238879e2f2b38c7c519396a8cb7",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.4",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T12:43:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29428116fa4e5809f36c16d34a293b507ad5ca87",
          "body": "feat: migrate RenterService from renterd to indexd-native storage",
          "is_bot": false,
          "headline": "Merge pull request #1629 from LumeWeb/feat/indexd-renter-service",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T12:39:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71bf77cb08e8783520a62484f97474b3e5af3987",
          "body": "…cing and packing fixes\n\nMigrate RenterService from renterd to indexd-native storage.\n\nTracing (comprehensive, all methods):\n- service/renter.go: 11 methods (UploadObject, DownloadObject, etc.)\n- service/internal/indexd/packing.go: 4 methods (PackStagedObjects, uploadGroup, uploadSubGroup, RecoverSt\n[…]\nFailure_BailsEarly (Bug 4)\n\nMock enhancements:\n- MockRenterPackedUpload: AddFailOnCalls, FinalizeCount\n- MockRenterSDK: UploadFactory for per-call fresh uploads\n- MockStagingBackend: GetErr, DeleteErr",
          "is_bot": false,
          "headline": "feat(indexd): migrate RenterService to indexd-native storage with tra…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T11:32:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a1cfc8c15fe2b35c5e8451a55b63c9b9423fba11",
          "body": "fix(otel): add configurable MaxQueueSize to batch span processor",
          "is_bot": false,
          "headline": "Merge pull request #1653 from LumeWeb/fix/otel-max-queue-size",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T06:50:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2eec07a7fa07d7a36c68c14c360af3e9b0d4051",
          "body": "…cessor\n\n- Add MaxQueueSize field to TracingConfig with schema validation and default (8192)\n- Wire sdktrace.WithMaxQueueSize into the batch processor in otel_setup.go\n- Default OTel SDK MaxQueueSize is 2048, which overflows during upload\n  operations that generate 700+ error spans in a single trace, silently\n  dropping workflow and indexd spans before they reach the exporter",
          "is_bot": false,
          "headline": "[verified] fix(otel): add configurable MaxQueueSize to batch span pro…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T06:49:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abf8c97df62158bfc3a0cd655078f7223d9c0efa",
          "body": "fix(db): migrate RetryableComponentLock callers to RetryableComponentTransaction",
          "is_bot": false,
          "headline": "Merge pull request #1652 from LumeWeb/fix/retryable-component-lock-ctx",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T01:55:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85904212d66370c0884844195c022bee09947dab",
          "body": "…leComponentTransaction\n\nRetryableComponentLock does not accept a context parameter, so DB\nqueries using it had no context propagation for tracing or cancellation.\nAll 8 call sites in renter.go and storage.go already had ctx in scope —\nmigrated all to RetryableComponentTransaction(component, ctx, ...) which\npasses ctx through to the GORM session via .WithContext(ctx).",
          "is_bot": false,
          "headline": "[verified] fix(db): migrate RetryableComponentLock callers to Retryab…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T01:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f70152c49c12804e991ba082ed448a96dd6c4bd2",
          "body": "…0.0-20260710211738-6b80c414e96f",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T01:29:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95ccd1d49f1ff8ca1bb51098945dc0d2382c1fe7",
          "body": "feat(db): add PrepareStmt, connection pool tuning, and configurable pool settings",
          "is_bot": false,
          "headline": "Merge pull request #1650 from LumeWeb/feat/db-pool-tuning",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T01:25:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc73eb4b75a25aa8a366285c54b86fc99deee539",
          "body": "…figurable pool settings\n\n- Enable PrepareStmt in GORM config to cache prepared statements,\n  eliminating COM_STMT_PREPARE round-trips per query (~2-5ms savings)\n- Add MaxOpenConns, MaxIdleConns, ConnMaxLifetime to DatabaseConfig\n  with sensible defaults (25/10/5m)\n- Apply pool tuning in MySQLProvider.Connect() via sql.DB setters\n- Add zog schema validation for new pool config fields",
          "is_bot": false,
          "headline": "[verified] feat(db): add PrepareStmt, connection pool tuning, and con…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T22:12:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "236aafddc70b7df2a1e2ef9d3e9ab3a059f48a49",
          "body": "feat(otel): add trace.id attribute to all spans for orphan span correlation",
          "is_bot": false,
          "headline": "Merge pull request #1649 from LumeWeb/fix/add-trace-id-attribute",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T20:47:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f18413b67748f146ccee5b05fbe60ec5f8f8be01",
          "body": "… span correlation\n\n## Summary\n- Adds trace.id as a span attribute in StartSpan so every span includes its trace ID as a searchable attribute in Tempo\n- Enables correlation of orphan spans whose parent was dropped by tail sampling",
          "is_bot": false,
          "headline": "[verified] feat(otel): add trace.id attribute to all spans for orphan…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T20:46:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1a8997e9971c65af99e11d8533e800bb0a7d88d",
          "body": "revert: remove boot span recording infrastructure",
          "is_bot": false,
          "headline": "Merge pull request #1648 from LumeWeb/fix/revert-boot-span-recording",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:54:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2713c9893d2f0d8de67b94970c6ff8549243896a",
          "body": "Reverts the boot span tracing approach introduced in PRs #1643, #1644,\n#1646, and #1647, plus the boot-span-specific parts of #1640 (portal.boot\nspan, SetBootTraceParent/BootTraceParent, boot traceparent links in\nworkflow and cron coordinator).\n\nThe boot span recording mechanism (DeferredSpanProcess\n[…]\nn StorageHash interface\n- WorkflowSpanAttributes with CIDString\n\nNon-boot-span changes from #1642 are preserved:\n- WithNewRoot and WithSpanKind SpanConfig options\n- Root span at ExecuteJob entry point",
          "is_bot": false,
          "headline": "[verified] revert: remove boot span recording infrastructure",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:52:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53690b0b99b746eeab6b4ae9c7f84ce68db66a26",
          "body": "fix(otel): always use AlwaysSample at builder time to prevent frozen NeverSample",
          "is_bot": false,
          "headline": "Merge pull request #1647 from LumeWeb/fix/tracer-provider-sampler",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:11:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f20dafc670e86438f0a3b310e72ee538b6ac0708",
          "body": "…ent frozen NeverSample\n\nNewContext is called before config.Init() loads the config file. The\ndefaults have Enabled=false, so the builder-time TracerProvider was created\nwith NeverSample(). Since the sampler is immutable after creation, no spans\nwere ever recorded—even after the startup func read th\n[…]\nn\nloading real config (Enabled=true) at startup. TestDeferredSpanProcessor_\nNeverSampleDropsSpans directly proves NeverSample causes 0 spans to\nreach the exporter while AlwaysSample exports correctly.",
          "is_bot": false,
          "headline": "[verified] fix(otel): always use AlwaysSample at builder time to prev…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:07:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c90d28bed8204fd33ddf2c5f6f5ebc6b547c6fa3",
          "body": "fix(otel): register OnExit at builder time to ensure shutdown on all paths",
          "is_bot": false,
          "headline": "Merge pull request #1646 from LumeWeb/fix/deferred-processor-shutdown",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T12:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c4ea1a2c8dbb0a9da405cde244882bdaced2084",
          "body": "…own on all paths\n\nOnExit was registered inside the startup func, after early-return guards\nfor disabled tracing and missing OTLP endpoint. When either guard\ntriggered, tp.Shutdown() was never called, leaving buffered spans in\nthe DeferredSpanProcessor unflushed and silently lost.\n\nMoved OnExit registration to builder time with a closure-scoped lp\nvariable that the startup func sets when logging is enabled.",
          "is_bot": false,
          "headline": "[verified] fix(otel): register OnExit at builder time to ensure shutd…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T12:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d259d0995ef3052df53fb8343438c23209c89043",
          "body": "…ision\n\nfix(content_scan): resolve duplicate Prometheus metric registration",
          "is_bot": false,
          "headline": "Merge pull request #1645 from LumeWeb/fix/content-scanner-metric-coll…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:42:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "959bb41698c6a808db0d7b2a77cd07701cd20ab0",
          "body": "…egistration collision\n\nMetricFailed and MetricOperationFailed were both set to \"failed_total\"\nwith the same subsystem prefix, producing two collectors with the same\nfully-qualified name (content_scanner_failed_total) but different label\nsets (scanner_id vs operation) and help strings. Prometheus rejects the\nsecond registration at startup.\n\nRename MetricOperationFailed to \"operation_failed_total\", following the\nsame pattern as the workflow service (failed_total vs step_failed_total).",
          "is_bot": false,
          "headline": "fix(content_scan): rename MetricOperationFailed to avoid Prometheus r…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:41:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c51294454ad954d9f588e1ee08000afc19112c7",
          "body": "fix(otel): defer exporter attachment so boot spans are captured",
          "is_bot": false,
          "headline": "Merge pull request #1644 from LumeWeb/fix/deferred-span-processor",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:10:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c6958ce9b245c619490b6006e70fcf6f521b757",
          "body": "The TracerProvider was created inside a startup func that runs AFTER\nthe portal.boot span is created. Spans created before the provider\nwas set went to the no-op tracer and were never exported.\n\nSolution: create the TracerProvider with a DeferredSpanProcessor\nimmediately during context construction \n[…]\nContextWithTelemetry builder option\n- Startup func now only attaches the OTLP exporter to the deferred processor\n- 5 regression tests covering buffering, forwarding, shutdown, idempotency, concurrency",
          "is_bot": false,
          "headline": "fix(otel): defer exporter attachment so boot spans are captured",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:08:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d5962dc480f74c61ffe575d9bd175bac1aa892f3",
          "body": "fix(boot): force root span at portal boot",
          "is_bot": false,
          "headline": "Merge pull request #1643 from LumeWeb/fix/boot-root-span",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:37:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a8dac2d42e8957edfc09081cc92c82d958cb180",
          "body": "The portal.boot span was created without WithNewRoot, so if the\ninitial context carried a trace from an external caller the boot\nspan would inherit it as parent instead of being its own root.\n\n- Apply WithNewRoot() + SpanKindServer to portal.boot span\n- Uses the WithNewRoot infrastructure added in PR #1642",
          "is_bot": false,
          "headline": "fix(boot): force root span at portal boot with WithNewRoot",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:37:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "304b5e8a143e24d0a6b5401ba07105e016e74af2",
          "body": "fix(cron): force root span at ExecuteJob entry point",
          "is_bot": false,
          "headline": "Merge pull request #1642 from LumeWeb/fix/cron-root-span",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:35:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba9e563ab956a286a94d1682b85706a809dc3a40",
          "body": "Cron jobs triggered by the scheduler had no parent trace context,\ncausing downstream spans to appear as disconnected orphans in Tempo.\n\n- Add WithNewRoot() and NewRoot field to core.SpanConfig\n- Apply WithNewRoot() + SpanKindServer at ExecuteJob to force a clean\n  root span for every cron job execut\n[…]\n\n- Remove redundant boot traceparent links from per-job-type span (it's\n  now a child of the ExecuteJob root, not a separate trace)\n- Keep boot traceparent as a link on ExecuteJob root for correlation",
          "is_bot": false,
          "headline": "fix(cron): force root span at ExecuteJob entry point with WithNewRoot",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:32:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8efa2e30971d44cb435348cc02146d26c97981f",
          "body": "feat(otel): configurable BSP batch timeout and export batch size",
          "is_bot": false,
          "headline": "Merge pull request #1641 from LumeWeb/fix/bsp-batch-timeout-config",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T08:23:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8e76f4e7817c355ad9d63600054a9ba5bfef8d0",
          "body": "The OTel BatchSpanProcessor (BSP) defaulted to 5s flush interval and 512\nbatch size. Root spans ended last (via defer) and arrived after Alloy's\ntail sampling decision_wait window, causing '<root span not yet received>'\nin Tempo.\n\nAdd batch_timeout (seconds) and max_export_batch_size config fields to\nTracingConfig. Defaults preserve prior behavior (5s / 512) but can be\ntuned lower (e.g. 1s / 256) so root spans flush before Alloy's 10s\ndecision window elapses.",
          "is_bot": false,
          "headline": "feat(otel): configurable BSP batch timeout and export batch size",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T08:22:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73f90a3ae6b7ff5a3a656c1da1b397300988fb3f",
          "body": "fix: workflow tracing — eventCtx, boot root span, CIDString span attribute",
          "is_bot": false,
          "headline": "Merge pull request #1640 from LumeWeb/fix/workflow-tracing-v2",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T01:02:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3a898065b43f78d4e4daefd1e3fe3a279cfb509",
          "body": "…ibute\n\n- Fix eventCtx: workflowStepExecutorJob.Run now passes eventCtx (carries\n  cron job span) instead of ctx (portal root, no span) to all workflow\n  service calls. Spans inside ExecuteWorkflowStep now create proper child\n  spans of the cron execution trace instead of disconnected root spans.\n\n-\n[…]\n making it easier to trace and\n  cross-reference with IPFS gateways.\n\n- Regenerated mocks via mockery, updated hand-written MockStorageHash and\n  testStorageHash to implement the new interface method.",
          "is_bot": false,
          "headline": "fix: workflow tracing - eventCtx, boot root span, CIDString span attr…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T00:56:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d83efb475d64b7fe73966a2366e00e1b5cc6e0ed",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/wneessen/go-mail to v0.8.1",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-10T00:02:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9df4faa3b5aead822bf57063d455599fe6223add",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/v2 to v2.22.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-10T00:02:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53d1bf4ccb922b53923d498b125056eaa906c34c",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/johannesboyne/gofakes3 to v1",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-10T00:02:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2beef927bce8cbfdde533e3a81d05f6dd174aa4",
          "body": "…0.0-20260709183641-10cdd5e5558f",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T20:13:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48afc37f5c6542ad221f47b9b92980ed7bc01118",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update golang.org/x/exp digest to 9ea1abe",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T20:13:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c48b905155a15a9bff8c59c780325914fd865ef",
          "body": "…0.0-20260708234909-c4697d43e545",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T01:09:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11c480c7c492572d79b17e68fe3aa3e6ae8c815b",
          "body": "…32.29",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T00:53:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69986352e5d8947a1b8963ea46d4fd2ebc86b51d",
          "body": "Includes flaky TestFileSource_Watch fix (proper fsnotify lifecycle,\nevent debouncing) and MockKV.GetStream for etcd v3.7.0 compatibility.",
          "is_bot": false,
          "headline": "chore: bump configmanager to v0.3.29",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-09T00:52:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af9467368dff1d46d87c5c13c971866d24d2cee7",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module golang.org/x/crypto to v0.54.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T22:34:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b767bfd3fe50907ce7ed03dc93f0d71dd10f22a6",
          "body": "…0.0-20260708211158-fe80573fdf9e",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T21:25:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a2f303ef2dfd1d03487f5b727bb9680a811f1c6",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.etcd.io/etcd/client/v3 to v3.7.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T21:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a05e068ba2b6ea8cb059add349e59be1abc229f",
          "body": "…0.0-20260708173245-c3fa241ceee5",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T21:20:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea2e65dffb46878d378a63827ec0ee1d8948dae3",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.sia.tech/coreutils to v0.23.5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T10:42:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8c4294836173dc6b12b4a880275ca0c5ffe7a17",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update dependency go to v1.26.5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T05:48:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "046b422d829cf1e955c8c6a31f3c203052a9a2d4",
          "body": "…0.0-20260707215852-f7abd19f08ff",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T23:11:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e50ad0c94aae9eabd5a63b0c9c34d84a50e7ce50",
          "body": "…0.0-20260707142944-b8706290bc4e",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T14:51:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 10,
      "commits_last_year": 835,
      "latest_release_at": "2026-05-26T16:49:40Z",
      "latest_release_tag": "v0.5.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 46,
      "days_since_latest_release": 59,
      "mean_days_between_releases": 78.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "go.lumeweb.com/portal",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": null,
          "registry_url": "https://pkg.go.dev/go.lumeweb.com/portal",
          "is_deprecated": false,
          "latest_version": "v0.5.1",
          "repository_url": null,
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T14:15:09Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 5,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2025-10-21",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 81000,
      "source_files_sampled": 377,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 15112
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/getkin/kin-openapi",
            "direct": false,
            "version": "v0.134.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-r277-6w6q-xmqw"
            ],
            "fixed_version": "0.144.0",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "3.14.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m",
              "GHSA-h67p-54hq-rp68"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 2,
            "oldest_advisory_days": 39
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.1.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m",
              "GHSA-h67p-54hq-rp68"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 2,
            "oldest_advisory_days": 39
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3v7f-55p6-f55p",
              "GHSA-c2c7-rcm5-vvqj"
            ],
            "fixed_version": "4.0.4",
            "advisory_count": 2,
            "oldest_advisory_days": 120
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 16
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "unknown": 1,
          "critical": 1
        },
        "advisory_count": 8,
        "affected_count": 5,
        "assessed_count": 342,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/AfterShip/email-verifier",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.1"
        },
        {
          "name": "github.com/DATA-DOG/go-sqlmock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.2"
        },
        {
          "name": "github.com/Oudwins/zog",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.2"
        },
        {
          "name": "github.com/adjust/rmq/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.2.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.31"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/credentials",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.30"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.106.0"
        },
        {
          "name": "github.com/aws/smithy-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.4"
        },
        {
          "name": "github.com/casbin/casbin/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.10.0"
        },
        {
          "name": "github.com/casbin/gorm-adapter/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.41.0"
        },
        {
          "name": "github.com/docker/go-units",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.0"
        },
        {
          "name": "github.com/eventials/go-tus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250612203642-7827b129cd4c"
        },
        {
          "name": "github.com/fatih/structs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/gabriel-vasile/mimetype",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.15"
        },
        {
          "name": "github.com/gammazero/workerpool",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.1"
        },
        {
          "name": "github.com/go-co-op/gocron/mocks/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.0-20260717182408-cc444c2a6f2c"
        },
        {
          "name": "github.com/go-co-op/gocron/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.22.0"
        },
        {
          "name": "github.com/go-gorm/caches/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.0.5"
        },
        {
          "name": "github.com/go-kiss/monkey",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20240508030602-d03795257a64"
        },
        {
          "name": "github.com/go-sql-driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/go-viper/mapstructure/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.5.0"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/invopop/jsonschema",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.0"
        },
        {
          "name": "github.com/ipfs/go-cid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "github.com/johannesboyne/gofakes3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/kenshaw/snaker",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.3"
        },
        {
          "name": "github.com/knadh/koanf/parsers/json",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/providers/confmap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/providers/rawbytes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/providers/structs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.3.5"
        },
        {
          "name": "github.com/labstack/echo-contrib",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.17.4"
        },
        {
          "name": "github.com/labstack/echo/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.15.4"
        },
        {
          "name": "github.com/looplab/fsm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.3"
        },
        {
          "name": "github.com/mattn/go-sqlite3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.48"
        },
        {
          "name": "github.com/miekg/dns",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.72"
        },
        {
          "name": "github.com/multiformats/go-multibase",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/multiformats/go-multihash",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.3"
        },
        {
          "name": "github.com/pquerna/otp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        },
        {
          "name": "github.com/pressly/goose/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.27.3"
        },
        {
          "name": "github.com/pterm/pterm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.12.83"
        },
        {
          "name": "github.com/redis/go-redis/v9",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v9.21.0"
        },
        {
          "name": "github.com/samber/lo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.53.0"
        },
        {
          "name": "github.com/spf13/afero",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.15.0"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/tus/tusd/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.10.0"
        },
        {
          "name": "github.com/urfave/cli/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.10.1"
        },
        {
          "name": "github.com/wneessen/go-mail",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.8.1"
        },
        {
          "name": "go.lumeweb.com/configmanager",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.29"
        },
        {
          "name": "go.lumeweb.com/event/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.0"
        },
        {
          "name": "go.lumeweb.com/httputil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.6"
        },
        {
          "name": "go.lumeweb.com/portal-middleware",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.7"
        },
        {
          "name": "go.lumeweb.com/portal-router",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.6"
        },
        {
          "name": "go.opentelemetry.io/contrib/bridges/otelzap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.19.0"
        },
        {
          "name": "go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.69.0"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.sia.tech/core",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.7"
        },
        {
          "name": "go.sia.tech/coreutils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.23.5"
        },
        {
          "name": "go.sia.tech/indexd",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "go.sia.tech/siastorage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.1-0.20260714120443-c13c06751808"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.0"
        },
        {
          "name": "go.uber.org/zap/exp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.0"
        },
        {
          "name": "golang.org/x/exp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260718201538-764159d718ef"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "gorm.io/datatypes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.7"
        },
        {
          "name": "gorm.io/driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "gorm.io/driver/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "gorm.io/gorm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.31.2"
        },
        {
          "name": "gorm.io/plugin/opentelemetry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.16"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/knadh/koanf/maps",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.2"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.24.1"
        },
        {
          "name": "github.com/prometheus/client_model",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "go.lumeweb.com/queryutil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.17"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/adjust/rmq/v5",
            "direct": true,
            "version": "v5.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aftership/email-verifier",
            "direct": true,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": true,
            "version": "v1.19.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": true,
            "version": "v1.106.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": true,
            "version": "v1.27.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/casbin/casbin/v3",
            "direct": true,
            "version": "v3.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/casbin/gorm-adapter/v3",
            "direct": true,
            "version": "v3.41.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/data-dog/go-sqlmock",
            "direct": true,
            "version": "v1.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": true,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/eventials/go-tus",
            "direct": true,
            "version": "v0.0.0-20250612203642-7827b129cd4c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/structs",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gabriel-vasile/mimetype",
            "direct": true,
            "version": "v1.4.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gammazero/workerpool",
            "direct": true,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-co-op/gocron/mocks/v2",
            "direct": true,
            "version": "v2.0.0-20260717182408-cc444c2a6f2c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-co-op/gocron/v2",
            "direct": true,
            "version": "v2.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-gorm/caches/v4",
            "direct": true,
            "version": "v4.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-kiss/monkey",
            "direct": true,
            "version": "v0.0.0-20240508030602-d03795257a64",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-sql-driver/mysql",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": true,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/invopop/jsonschema",
            "direct": true,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipfs/go-cid",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/johannesboyne/gofakes3",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kenshaw/snaker",
            "direct": true,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/maps",
            "direct": true,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/parsers/json",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/confmap",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/rawbytes",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/structs",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/v2",
            "direct": true,
            "version": "v2.3.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/labstack/echo-contrib",
            "direct": true,
            "version": "v0.17.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/labstack/echo/v4",
            "direct": true,
            "version": "v4.15.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/looplab/fsm",
            "direct": true,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-sqlite3",
            "direct": true,
            "version": "v1.14.48",
            "ecosystem": "go"
          },
          {
            "name": "github.com/miekg/dns",
            "direct": true,
            "version": "v1.1.72",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multibase",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multihash",
            "direct": true,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oudwins/zog",
            "direct": true,
            "version": "v0.22.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pquerna/otp",
            "direct": true,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pressly/goose/v3",
            "direct": true,
            "version": "v3.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pterm/pterm",
            "direct": true,
            "version": "v0.12.83",
            "ecosystem": "go"
          },
          {
            "name": "github.com/redis/go-redis/v9",
            "direct": true,
            "version": "v9.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/samber/lo",
            "direct": true,
            "version": "v1.53.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": true,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tus/tusd/v2",
            "direct": true,
            "version": "v2.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/urfave/cli/v3",
            "direct": true,
            "version": "v3.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wneessen/go-mail",
            "direct": true,
            "version": "v0.8.1",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/configmanager",
            "direct": true,
            "version": "v0.3.29",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/event/v2",
            "direct": true,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/httputil",
            "direct": true,
            "version": "v0.5.6",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/portal-middleware",
            "direct": true,
            "version": "v0.3.7",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/portal-router",
            "direct": true,
            "version": "v0.7.6",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/queryutil",
            "direct": true,
            "version": "v0.3.17",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/otelzap",
            "direct": true,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho",
            "direct": true,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/log",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/core",
            "direct": true,
            "version": "v0.21.7",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/coreutils",
            "direct": true,
            "version": "v0.23.5",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/indexd",
            "direct": true,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/siastorage",
            "direct": true,
            "version": "v0.1.1-0.20260714120443-c13c06751808",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap/exp",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": true,
            "version": "v0.0.0-20260718201538-764159d718ef",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/datatypes",
            "direct": true,
            "version": "v1.2.7",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/mysql",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/sqlite",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/gorm",
            "direct": true,
            "version": "v1.31.2",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/plugin/opentelemetry",
            "direct": true,
            "version": "v0.1.16",
            "ecosystem": "go"
          },
          {
            "name": "atomicgo.dev/cursor",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "atomicgo.dev/keyboard",
            "direct": false,
            "version": "v0.2.9",
            "ecosystem": "go"
          },
          {
            "name": "atomicgo.dev/schedule",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alicebob/miniredis/v2",
            "direct": false,
            "version": "v2.37.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.32",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.32",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.33.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.45.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bahlo/generic-list-go",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/boombuler/barcode",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/buger/jsonparser",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/casbin/govaluate",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clickhouse/ch-go",
            "direct": false,
            "version": "v0.73.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clickhouse/clickhouse-go/v2",
            "direct": false,
            "version": "v2.47.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/console",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-semver",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-systemd/v22",
            "direct": false,
            "version": "v22.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dunglas/httpsfv",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gammazero/deque",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/getkin/kin-openapi",
            "direct": false,
            "version": "v0.134.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ghodss/yaml",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/glebarez/go-sqlite",
            "direct": false,
            "version": "v1.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/glebarez/sqlite",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-faster/city",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-faster/errors",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.22.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/civil",
            "direct": false,
            "version": "v0.0.0-20220223132316-b832511892a9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/sqlexp",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gookit/color",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hbollon/go-edlib",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/go-tls",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgpassfile",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgservicefile",
            "direct": false,
            "version": "v0.0.0-20240606120523-5a60cdf6a761",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgx/v5",
            "direct": false,
            "version": "v5.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/puddle/v2",
            "direct": false,
            "version": "v2.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/inflection",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/now",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jonboulle/clockwork",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/julienschmidt/httprouter",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/reedsolomon",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/parsers/yaml",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/file",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/labstack/gommon",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lithammer/fuzzysearch",
            "direct": false,
            "version": "v1.1.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mfridman/interpolate",
            "direct": false,
            "version": "v0.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-mssqldb",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/minio/sha256-simd",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mohae/deepcopy",
            "direct": false,
            "version": "v0.0.0-20170929034955-c48cc78d4826",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mr-tron/base58",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-base32",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-base36",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-varint",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml",
            "direct": false,
            "version": "v0.0.0-20260313112342-a3ea61cb4d4c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml3",
            "direct": false,
            "version": "v0.0.0-20260224194419-61cd415a242b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oschwald/geoip2-golang",
            "direct": false,
            "version": "v1.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oschwald/maxminddb-golang",
            "direct": false,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/paulmach/orb",
            "direct": false,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pb33f/ordered-map/v2",
            "direct": false,
            "version": "v2.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/perimeterx/marshmallow",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.70.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/qpack",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/quic-go",
            "direct": false,
            "version": "v0.60.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/webtransport-go",
            "direct": false,
            "version": "v0.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/robfig/cron/v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/cors",
            "direct": false,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryszard/goskiplist",
            "direct": false,
            "version": "v0.0.0-20150312221310-2dfbae5fcf46",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sethvargo/go-retry",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spaolacci/murmur3",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/bytebufferpool",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/fasttemplate",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/woodsbury/decimal128",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/gopher-lua",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/api/v3",
            "direct": false,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/client/pkg/v3",
            "direct": false,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/client/v3",
            "direct": false,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/gswagger",
            "direct": false,
            "version": "v0.20.12",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.shabbyrobe.org/gocovmerge",
            "direct": false,
            "version": "v0.0.0-20230507111327-fa4f82cfbf4d",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/jape",
            "direct": false,
            "version": "v0.14.1",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/mux",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/atomic",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v4",
            "direct": false,
            "version": "v4.0.0-rc.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/arch",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.48.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260720211330-0afa2a65878a",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/clickhouse",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/postgres",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/sqlserver",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/plugin/dbresolver",
            "direct": false,
            "version": "v1.6.2",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/blake3",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/frand",
            "direct": false,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.74.3",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": false,
            "version": "v1.54.0",
            "ecosystem": "go"
          },
          {
            "name": "@babel/runtime",
            "direct": false,
            "version": "7.28.4",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/apply-release-plan",
            "direct": false,
            "version": "7.0.14",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/assemble-release-plan",
            "direct": false,
            "version": "6.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/changelog-git",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/cli",
            "direct": false,
            "version": "2.29.8",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/config",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/errors",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/get-dependents-graph",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/get-release-plan",
            "direct": false,
            "version": "4.0.14",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/get-version-range-type",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/git",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/logger",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/parse",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/pre",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/read",
            "direct": false,
            "version": "0.6.6",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/should-skip-package",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/types",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/types",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/write",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/external-editor",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@manypkg/find-root",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@manypkg/get-packages",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.scandir",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.stat",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.walk",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "12.20.55",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "1.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-union",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "better-path-resolve",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "chardet",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "ci-info",
            "direct": false,
            "version": "3.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "detect-indent",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "dir-glob",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "enquirer",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "esprima",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "extendable-error",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "fast-glob",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "globby",
            "direct": false,
            "version": "11.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "human-id",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-subdir",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-windows",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "3.14.2",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonfile",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash.startcase",
            "direct": false,
            "version": "4.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge2",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mri",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "outdent",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-filter",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-map",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-try",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "package-manager-detector",
            "direct": false,
            "version": "0.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-type",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "pify",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "2.8.8",
            "ecosystem": "npm"
          },
          {
            "name": "quansync",
            "direct": false,
            "version": "0.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "queue-microtask",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "read-yaml-file",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-from",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "run-parallel",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "slash",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "spawndamnit",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "sprintf-js",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-bom",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "term-size",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "universalify",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 342,
        "direct_count": 83,
        "indirect_count": 259
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 1499,
        "open_issues": 3,
        "closed_ratio": 0.25,
        "closed_issues": 1,
        "closed_unmerged_prs": 194
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "pcfreak30",
          "commits": 2768,
          "avatar_url": "https://avatars.githubusercontent.com/u/10647?v=4"
        },
        {
          "type": "User",
          "login": "semantic-release-bot",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.999
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "_build.yml",
        "build.yml",
        "release.yml",
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 8,
            "reason": "Found 4/5 approved changesets -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d74f4f158e630272b420d9fec2921a1399c49218",
        "ran_at": "2026-07-24T19:36:03Z",
        "aggregate_score": 6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T13:01:36Z",
      "oldest_open_prs": [
        {
          "number": 1697,
          "created_at": "2026-07-23T19:11:38Z",
          "last_comment_at": "2026-07-23T19:11:39Z",
          "last_comment_author": "renovate"
        }
      ],
      "last_merged_pr_at": "2026-07-24T13:00:26Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 73,
          "created_at": "2024-05-01T08:35:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 77,
          "created_at": "2024-05-08T18:02:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1115,
          "created_at": "2025-10-08T06:07:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/LumeWeb/portal",
    "host": "github.com",
    "name": "portal",
    "owner": "LumeWeb"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 66,
        "vitality": 94,
        "community": 29,
        "governance": 55,
        "engineering": 61
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 94,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 96,
            "inputs": {
              "commits_last_year": 835,
              "human_commit_share": 0.6,
              "days_since_last_push": 0,
              "active_weeks_last_year": 46
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "46/52 weeks with commits",
                "points": 31.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 46
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "835 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 835
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 10,
              "latest_release_tag": "v0.5.0",
              "releases_from_tags": false,
              "days_since_latest_release": 59,
              "mean_days_between_releases": 78.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "10 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 59 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 59
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~78.5 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 78.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 7,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 7 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 29,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 1,
              "stars": 5,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "5 stars",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.999
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "merged_prs": 1499,
              "open_issues": 3,
              "closed_issues": 1,
              "issue_closed_ratio": 0.25,
              "closed_unmerged_prs": 194
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "25% of issues closed",
                "points": 11.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 25
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1499/1693 decided PRs merged",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1499,
                      "decided": 1693
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/5 approved changesets -- score normalized to 8",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "followers": 26,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "LumeWeb",
              "public_repos": 317,
              "account_age_days": 1642
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "26 followers of LumeWeb",
                "points": 10.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 26,
                      "login": "LumeWeb"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "317 public repos, account ~4 yr old",
                "points": 22,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 317
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 4
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "go.lumeweb.com/portal"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 61,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/5 approved changesets -- score normalized to 8",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 342 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 342
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 8,
              "affected_packages": 5,
              "assessed_packages": 342,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 3, unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.54.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.54.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 342,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 15112
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "60 of 60 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 60,
                      "sampled": 60
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.4
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "40 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 40,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 81000,
              "source_files_sampled": 377,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/377 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 377,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T19:36:19.883509Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/LumeWeb/portal.svg",
  "full_name": "LumeWeb/portal",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаGo.