Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 2.3.1 · 2026-07-27 10:15 UTC

alphagov / gds-api-adapters

A set of API adapters to work with the GOV.UK APIs

RubyMIT★ 21 зірка⑂ 13 форківз груд. 2011 р.Переглянути на GitHub ↗
ТипБібліотекаяк це визначено

alphagov/gds-api-adapters має індекс здоров’я 93 зі 100, що відповідає смузі «Винятковий». Найвищий показник — Sustainability & Governance (92/100), найнижчий — AI Readiness (44/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконують 13 учасників.

93
загалом / 100
Винятковий

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).

93
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Зважений загальний бал 79 калібровано до 93 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).

Власність

Government Digital ServiceОрганізація
1 576 підписників1 528 публічних репозиторіївз лют. 2011 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
RubyGemsgds-api-adapters103.4.0-5890 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

87Відмінний · 21% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 0 дн. тому
22.2/36Ритм комітів — 32/52 тижнів із комітами
18/18Обсяг комітів — 126 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year126
human_commit_share0,85
days_since_last_push0
active_weeks_last_year32
Як обчислюється оцінка
16.2/27Випускає релізи — 100 тегів версій (без релізів GitHub)
36/36Свіжість релізів — останній реліз 0 дн. тому
27/27Ритм релізів — реліз кожні ~24,7 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count100
latest_release_tagv103.4.0
releases_from_tagsтак
days_since_latest_release0
mean_days_between_releases24,7
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

62Помірний · 17% загального індексу
Як обчислюється оцінка
21.1/60Зірки — 21 зірок
9/25Форки — 13 форків
10.8/15Спостерігачі — 88 спостерігачів
Використані вхідні дані
forks13
stars21
watchers88
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
0/18Настанови CONTRIBUTING
13.5/13.5Кодекс поведінки
0/7.2Шаблон issue
6.3/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
readme_badges
has_contributingні
has_issue_templateні
has_code_of_conductтак
readme_badge_services
has_pull_request_templateтак
Як обчислюється оцінка
65.9/80Сумарні завантаження — 2 174 538 завантажень за весь час у rubygems
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packagesgds-api-adapters
dependents
ecosystemsrubygems
total_downloads2 174 538
monthly_downloads
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

92Відмінний · 23% загального індексу
Як обчислюється оцінка
54/54Бас-фактор — на 13 контриб’ютор(ів) припадає половина всіх комітів
21.1/22.5Розподіл комітів — головний контриб’ютор — автор 6% комітів
13.5/13.5Широта контриб’юторів — 99 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 39 contributing companies or organizations
Використані вхідні дані
bus_factor13
contributors_sampled99
top_contributor_share0,062
Як обчислюється оцінка
37.8/42Вирішення issue — закрито 90% issue
27.9/30Прийняття PR — злито 1 301/1 401 вирішених PR
0/13Newcomer PR acceptance — за 30 дн. не вирішено жодного PR від новачка
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Використані вхідні дані
merged_prs1 301
open_issues1
closed_issues9
prs_merged_7d
prs_decided_7d
prs_merged_30d
prs_decided_30d
issue_closed_ratio0,9
closed_unmerged_prs100
first_time_authors_30d
first_time_prs_merged_30d
first_time_prs_decided_30d
Виключено з оцінювання (немає даних або не застосовно): newcomer_pr_acceptance. Залишкові ваги перенормовано.
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
23/25Охоплення власника — 1 576 підписників у alphagov
25/25Послужний список — 1 528 публічних репозиторіїв, вік облікового запису ~15 р.
Використані вхідні дані
followers1 576
owner_typeOrganization
is_verified
owner_loginalphagov
public_repos1 528
account_age_days5 653

Супровід пакетів

100Винятковий
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у rubygems
35/35Свіжість публікацій — остання публікація 0 дн. тому
20/20Історія версій — 589 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesgds-api-adapters
ecosystemsrubygems
any_deprecatedні
min_days_since_publish0

Інженерна якість

Чи наявні базові інженерні практики та документація?

76Добрий · 19% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 4 процес(ів) CI
24/24Наявні тести
16/16Конфігурація лінтера — .rubocop.yml
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configтак
has_precommit_configні
Як обчислюється оцінка
30/30README
0/25Каталог документації
15/15Сайт документації / домашня сторінка — http://www.rubydoc.info/github/alphagov/gds-api-adapters
10/10Опис репозиторію
10/10Теми — 1 тем
0/10Wiki
Використані вхідні дані
topicsgovuk
has_wikiні
homepagehttp://www.rubydoc.info/github/alphagov/gds-api-adapters
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

82Відмінний · 16% загального індексу
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
6/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 39 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — немає даних
1/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2
5/5SAST — SAST tool is run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate7,8
Виключено з оцінювання (немає даних або не застосовно): packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
0/25Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories0
affected_packages0
assessed_packages1
unassessed_packages22
affected_by_severitynone
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень, Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено 1 резолвлених залежностей із OSV. 22 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза межами звітованого переліку пакетів. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.

44Слабкий · 4% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 65 з 85 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,765
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
0/18Розгортання однією командою
22/22Автоматизовані тести
11/11Конфігурація лінтера / форматера — .rubocop.yml
0/11Статична перевірка типів
0/10Відтворюване середовище
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 15 з останніх 100 комітів — автоматичні оновлення залежностей
2/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2
Використані вхідні дані
has_nixні
has_testsтак
lockfiles
has_dockerfileні
typed_languageні
bootstrap_files
has_devcontainerні
has_linter_configтак
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0,15
Як обчислюється оцінка
0/45Типізований код — Ruby без конфігурації перевірки типів
55/55Керовані розміри файлів — 0/123 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageRuby
largest_source_bytes40 393
source_files_sampled123
oversized_source_files0

Ключові факти

21зірок GitHub
99контриб'юторів
126комітів за останні 12 місяців
0днів від останнього пушу
100релізів
13бас-фактор
1відкритих issue
RubyGemsпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

Історія зірок і форків 0 ★ / 13 ⇿
0Зірки
13Форки
93Релізи

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

0246810121112013-092019-122026-02
Мажорні 35Мінорні 44Патчі 14

Кожна точка охоплює 12 днів.

OpenSSF Scorecard 7.8 / 10
7.8сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-27 10:14 UTC

10Binary-Artifactsno binaries found in the repo
8Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 39 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
н/дPackagingpackaging workflow not detected
2Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 2
10SASTSAST tool is run on all commits
10Security-Policysecurity policy file detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Усі залежності 23

Повний розв'язаний набір залежностей із графа залежностей GitHub: 0 прямих і 23 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
RubyGemsaddressableнепряма
RubyGemsbyebugнепряма
RubyGemsclimate_controlнепряма
RubyGemsgovuk_schemasнепряма
RubyGemslink_headerнепряма
RubyGemsminitestнепряма
RubyGemsminitest-aroundнепряма
RubyGemsmochaнепряма
RubyGemsnull_loggerнепряма
RubyGemspactнепряма
RubyGemspact-consumer-minitestнепряма
RubyGemspact-mock_serviceнепряма
RubyGemspact_broker-clientнепряма
RubyGemsplekнепряма
RubyGemsrackнепряма
RubyGemsrack-testнепряма
RubyGemsrakeнепряма
RubyGemsrdocнепряма
RubyGemsrest-clientнепряма
RubyGemsrubocop-govuk5.2.1непряма
RubyGemssimplecovнепряма
RubyGemstimecopнепряма
RubyGemswebmockнепряма
Сповіщення про залежності 0

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 1 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 0 мають відомі сповіщення, з них 0 прямі. 22 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза наведеним переліком пакетів.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "govuk"
      ],
      "is_fork": false,
      "size_kb": 3672,
      "has_wiki": false,
      "homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
      "languages": {
        "Ruby": 583301
      },
      "pushed_at": "2026-07-27T10:08:02Z",
      "created_at": "2011-12-02T14:13:57Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-27T10:06:12Z",
      "description": "A set of API adapters to work with the GOV.UK APIs",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Ruby",
      "significant_languages": [
        "Ruby"
      ]
    },
    "owner": {
      "blog": "https://gds.blog.gov.uk/",
      "name": "Government Digital Service",
      "type": "Organization",
      "login": "alphagov",
      "company": null,
      "location": "The White Chapel Building, 10 Whitechapel High Street, London E1 8QS",
      "followers": 1576,
      "avatar_url": "https://avatars.githubusercontent.com/u/596977?v=4",
      "created_at": "2011-02-02T15:45:37Z",
      "is_verified": null,
      "public_repos": 1528,
      "account_age_days": 5653
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v103.4.0",
          "kind": "minor",
          "published_at": "2026-07-27T10:04:44Z"
        },
        {
          "tag": "v103.3.1",
          "kind": "patch",
          "published_at": "2026-04-20T11:37:43Z"
        },
        {
          "tag": "v103.3.0",
          "kind": "minor",
          "published_at": "2026-04-09T14:01:54Z"
        },
        {
          "tag": "v103.2.0",
          "kind": "minor",
          "published_at": "2026-04-01T09:05:39Z"
        },
        {
          "tag": "v103.1.1",
          "kind": "patch",
          "published_at": "2026-03-30T16:03:54Z"
        },
        {
          "tag": "v103.1.0",
          "kind": "minor",
          "published_at": "2026-03-10T08:39:03Z"
        },
        {
          "tag": "v103.0.0",
          "kind": "major",
          "published_at": "2026-03-02T09:50:37Z"
        },
        {
          "tag": "v102.0.0",
          "kind": "major",
          "published_at": "2026-01-27T11:34:22Z"
        },
        {
          "tag": "v101.2.0",
          "kind": "minor",
          "published_at": "2025-12-17T16:53:45Z"
        },
        {
          "tag": "v101.1.0",
          "kind": "minor",
          "published_at": "2025-12-17T10:00:27Z"
        },
        {
          "tag": "v101.0.0",
          "kind": "major",
          "published_at": "2025-08-14T14:45:59Z"
        },
        {
          "tag": "v100.0.0",
          "kind": "major",
          "published_at": "2025-08-13T12:13:12Z"
        },
        {
          "tag": "v99.3.0",
          "kind": "minor",
          "published_at": "2025-08-08T14:53:34Z"
        },
        {
          "tag": "v99.2.0",
          "kind": "minor",
          "published_at": "2025-05-09T07:09:56Z"
        },
        {
          "tag": "v99.1.0",
          "kind": "minor",
          "published_at": "2025-05-08T12:38:19Z"
        },
        {
          "tag": "v99.0.0",
          "kind": "major",
          "published_at": "2025-03-26T10:21:24Z"
        },
        {
          "tag": "v98.4.0",
          "kind": "minor",
          "published_at": "2025-03-19T15:43:53Z"
        },
        {
          "tag": "v98.3.0",
          "kind": "minor",
          "published_at": "2025-03-12T15:55:40Z"
        },
        {
          "tag": "v98.2.0",
          "kind": "minor",
          "published_at": "2025-01-06T13:57:11Z"
        },
        {
          "tag": "v98.1.0",
          "kind": "minor",
          "published_at": "2024-12-18T12:09:18Z"
        },
        {
          "tag": "v98.0.0",
          "kind": "major",
          "published_at": "2024-12-17T14:03:13Z"
        },
        {
          "tag": "v97.6.0",
          "kind": "minor",
          "published_at": "2024-12-09T16:29:31Z"
        },
        {
          "tag": "v97.5.0",
          "kind": "minor",
          "published_at": "2024-12-03T08:00:42Z"
        },
        {
          "tag": "v97.4.1",
          "kind": "patch",
          "published_at": "2024-11-28T14:51:15Z"
        },
        {
          "tag": "v97.4.0",
          "kind": "minor",
          "published_at": "2024-11-26T14:46:54Z"
        },
        {
          "tag": "v97.3.0",
          "kind": "minor",
          "published_at": "2024-11-14T12:13:19Z"
        },
        {
          "tag": "v97.2.0",
          "kind": "minor",
          "published_at": "2024-11-13T15:59:08Z"
        },
        {
          "tag": "v97.1.0",
          "kind": "minor",
          "published_at": "2024-10-30T14:59:43Z"
        },
        {
          "tag": "v97.0.0",
          "kind": "major",
          "published_at": "2024-10-17T09:03:00Z"
        },
        {
          "tag": "v96.0.3",
          "kind": "patch",
          "published_at": "2024-08-30T15:40:09Z"
        },
        {
          "tag": "v96.0.2",
          "kind": "patch",
          "published_at": "2024-06-25T12:41:52Z"
        },
        {
          "tag": "v96.0.1",
          "kind": "patch",
          "published_at": "2024-05-21T09:21:25Z"
        },
        {
          "tag": "v96.0.0",
          "kind": "major",
          "published_at": "2024-05-09T15:48:06Z"
        },
        {
          "tag": "v95.1.0",
          "kind": "minor",
          "published_at": "2024-04-29T16:23:50Z"
        },
        {
          "tag": "v95.0.1",
          "kind": "patch",
          "published_at": "2024-03-27T13:37:26Z"
        },
        {
          "tag": "v95.0.0",
          "kind": "major",
          "published_at": "2024-03-26T10:50:19Z"
        },
        {
          "tag": "v94.0.0",
          "kind": "major",
          "published_at": "2024-02-28T11:43:10Z"
        },
        {
          "tag": "v93.0.0",
          "kind": "major",
          "published_at": "2024-01-25T11:07:44Z"
        },
        {
          "tag": "v92.1.0",
          "kind": "minor",
          "published_at": "2024-01-11T14:33:20Z"
        },
        {
          "tag": "v92.0.0",
          "kind": "major",
          "published_at": "2023-12-15T11:11:58Z"
        },
        {
          "tag": "v91.1.0",
          "kind": "minor",
          "published_at": "2023-09-14T09:53:50Z"
        },
        {
          "tag": "v91.0.0",
          "kind": "major",
          "published_at": "2023-09-11T13:43:34Z"
        },
        {
          "tag": "v90.0.0",
          "kind": "major",
          "published_at": "2023-07-31T14:19:17Z"
        },
        {
          "tag": "v89.0.0",
          "kind": "major",
          "published_at": "2023-07-19T15:11:42Z"
        },
        {
          "tag": "v88.2.0",
          "kind": "minor",
          "published_at": "2023-06-06T11:26:47Z"
        },
        {
          "tag": "v88.1.0",
          "kind": "minor",
          "published_at": "2023-05-30T10:07:21Z"
        },
        {
          "tag": "v88.0.0",
          "kind": "major",
          "published_at": "2023-05-23T14:05:13Z"
        },
        {
          "tag": "v87.1.0",
          "kind": "minor",
          "published_at": "2023-05-10T08:48:22Z"
        },
        {
          "tag": "v87.0.0",
          "kind": "major",
          "published_at": "2023-03-29T13:25:14Z"
        },
        {
          "tag": "v86.0.0",
          "kind": "major",
          "published_at": "2023-02-20T15:31:01Z"
        },
        {
          "tag": "v85.0.1",
          "kind": "patch",
          "published_at": "2023-01-30T12:33:41Z"
        },
        {
          "tag": "v85.0.0",
          "kind": "major",
          "published_at": "2022-12-05T10:29:58Z"
        },
        {
          "tag": "v84.0.0",
          "kind": "major",
          "published_at": "2022-10-21T13:33:17Z"
        },
        {
          "tag": "v83.0.0",
          "kind": "major",
          "published_at": "2022-10-03T16:00:34Z"
        },
        {
          "tag": "v82.0.0",
          "kind": "major",
          "published_at": "2022-09-12T15:10:22Z"
        },
        {
          "tag": "v81.0.4",
          "kind": "patch",
          "published_at": "2022-08-03T13:10:27Z"
        },
        {
          "tag": "v81.0.3",
          "kind": "patch",
          "published_at": "2022-08-01T14:05:47Z"
        },
        {
          "tag": "v81.0.2",
          "kind": "patch",
          "published_at": "2022-07-26T14:37:57Z"
        },
        {
          "tag": "v81.0.1",
          "kind": "patch",
          "published_at": "2022-07-25T12:11:44Z"
        },
        {
          "tag": "v81.0.0",
          "kind": "major",
          "published_at": "2022-07-12T13:44:12Z"
        },
        {
          "tag": "v80.0.1",
          "kind": "patch",
          "published_at": "2022-06-29T12:05:49Z"
        },
        {
          "tag": "v80.0.0",
          "kind": "major",
          "published_at": "2022-06-21T12:17:12Z"
        },
        {
          "tag": "v79.2.0",
          "kind": "minor",
          "published_at": "2022-05-24T08:55:46Z"
        },
        {
          "tag": "v79.1.2",
          "kind": "patch",
          "published_at": "2022-04-06T16:20:02Z"
        },
        {
          "tag": "v79.1.1",
          "kind": "patch",
          "published_at": "2022-03-29T09:04:08Z"
        },
        {
          "tag": "v79.1.0",
          "kind": "minor",
          "published_at": "2022-03-08T16:29:55Z"
        },
        {
          "tag": "v79.0.0",
          "kind": "major",
          "published_at": "2022-01-25T15:39:29Z"
        },
        {
          "tag": "v78.1.0",
          "kind": "minor",
          "published_at": "2022-01-19T16:29:21Z"
        },
        {
          "tag": "v78.0.0",
          "kind": "major",
          "published_at": "2022-01-18T17:29:40Z"
        },
        {
          "tag": "v77.1.0",
          "kind": "minor",
          "published_at": "2022-01-18T14:40:19Z"
        },
        {
          "tag": "v77.0.0",
          "kind": "major",
          "published_at": "2021-12-10T10:53:32Z"
        },
        {
          "tag": "v76.0.0",
          "kind": "major",
          "published_at": "2021-12-07T16:30:37Z"
        },
        {
          "tag": "v75.3.0",
          "kind": "minor",
          "published_at": "2021-11-03T13:09:31Z"
        },
        {
          "tag": "v75.2.0",
          "kind": "minor",
          "published_at": "2021-10-15T08:29:27Z"
        },
        {
          "tag": "v75.1.0",
          "kind": "minor",
          "published_at": "2021-10-14T13:56:53Z"
        },
        {
          "tag": "v75.0.0",
          "kind": "major",
          "published_at": "2021-09-28T16:20:58Z"
        },
        {
          "tag": "v74.0.0",
          "kind": "major",
          "published_at": "2021-09-22T16:15:47Z"
        },
        {
          "tag": "v73.1.0",
          "kind": "minor",
          "published_at": "2021-09-08T10:08:45Z"
        },
        {
          "tag": "v73.0.0",
          "kind": "major",
          "published_at": "2021-08-26T10:27:03Z"
        },
        {
          "tag": "v72.1.0",
          "kind": "minor",
          "published_at": "2021-07-27T14:06:16Z"
        },
        {
          "tag": "v72.0.0",
          "kind": "major",
          "published_at": "2021-07-13T15:18:17Z"
        },
        {
          "tag": "v71.9.0",
          "kind": "minor",
          "published_at": "2021-07-06T12:09:05Z"
        },
        {
          "tag": "v71.8.0",
          "kind": "minor",
          "published_at": "2021-07-02T11:11:36Z"
        },
        {
          "tag": "v71.7.0",
          "kind": "minor",
          "published_at": "2021-06-29T14:42:20Z"
        },
        {
          "tag": "v71.6.0",
          "kind": "minor",
          "published_at": "2021-06-23T14:27:48Z"
        },
        {
          "tag": "v71.5.0",
          "kind": "minor",
          "published_at": "2021-06-18T09:21:03Z"
        },
        {
          "tag": "v71.4.0",
          "kind": "minor",
          "published_at": "2021-06-10T13:28:58Z"
        },
        {
          "tag": "v71.3.0",
          "kind": "minor",
          "published_at": "2021-06-07T15:17:23Z"
        },
        {
          "tag": "v71.2.0",
          "kind": "minor",
          "published_at": "2021-05-25T10:23:19Z"
        },
        {
          "tag": "v71.1.0",
          "kind": "minor",
          "published_at": "2021-05-06T13:50:04Z"
        },
        {
          "tag": "v71.0.0",
          "kind": "major",
          "published_at": "2021-03-22T13:50:28Z"
        },
        {
          "tag": "v70.0.0",
          "kind": "major",
          "published_at": "2021-03-15T10:15:50Z"
        },
        {
          "tag": "v69.3.0",
          "kind": "minor",
          "published_at": "2021-01-25T13:26:11Z"
        },
        {
          "tag": "v69.2.0",
          "kind": "minor",
          "published_at": "2021-01-20T13:57:59Z"
        },
        {
          "tag": "v69.1.0",
          "kind": "minor",
          "published_at": "2021-01-19T14:20:06Z"
        },
        {
          "tag": "v69.0.0",
          "kind": "major",
          "published_at": "2021-01-18T13:42:42Z"
        },
        {
          "tag": "v68.2.0",
          "kind": "minor",
          "published_at": "2021-01-06T12:59:15Z"
        },
        {
          "tag": "v68.1.0",
          "kind": "minor",
          "published_at": "2021-01-05T15:33:41Z"
        },
        {
          "tag": "v68.0.0",
          "kind": "major",
          "published_at": "2020-12-18T09:18:33Z"
        },
        {
          "tag": "v67.2.1",
          "kind": "patch",
          "published_at": "2020-12-10T09:19:11Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
          "body": "Release 103.4.0",
          "is_bot": false,
          "headline": "Merge pull request #1412 from alphagov/release-104.4.0",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-27T10:04:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8de05691efede1b40ca7d07beebde7285ac78efc",
          "body": null,
          "is_bot": false,
          "headline": "Release 103.4.0",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-27T09:51:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62394c927f371eb15e157e8df6441902681ad412",
          "body": "Improve RFC-192 validator method",
          "is_bot": false,
          "headline": "Merge pull request #1411 from alphagov/rfc-192-adjust-validator",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-27T09:47:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e8ebb927c4e75253a08ccb23655553e65373114",
          "body": "Co-authored-by: Bruce Bolt <6329861+brucebolt@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Update test/validators/base_path_validator_test.rb",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-27T08:25:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "133988b48b976d36f96951db4f525cbe1ffa2a71",
          "body": "- Remove \"Path\" from the front of all error messages - unnecessary because context\n  is provided by the error key\n- We're using a mixture of must/cannot/contains, adjust that all to must/must not\n- Although it probably isn't important, 512 bytes and 512 characters might not\n  be the same, so at least keep the language correct.",
          "is_bot": false,
          "headline": "Standardise language in error messages",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T18:48:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7cb74321c59e27bb16d7f68df52c80e68f08a4b",
          "body": "- The primary user of errors is going to be publishing-api, secondary users the\n  publishing apps. So update the errors to return codes similar to the ones that\n  publishing-api returns at the moment (base_path_invalid and path_too_long).\n- At some future time we might make these more varied, but these two are\n  being returned by publishing-api now, so returning them will help keep\n  it compatible.",
          "is_bot": false,
          "headline": "Return hash of errors with codes",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T16:39:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7371e7e18f76cae38718534a8891d631aa05a67a",
          "body": "- We weren't covering the nil path, and adding the test showed up that some\n  of the error tests rely on the base_path not being nil (okay in the valid? method\n  where the ||'s shortcut returning false, but we need to manually shortcut\n  in the errors method.",
          "is_bot": false,
          "headline": "Improve nil handling",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T16:33:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "139c80e28a0921b87f74ae55a53d489f011d2846",
          "body": "- This regex was actually testing the structure more thoroughly than it needs\n  to to detect invalid_chars? Now that we're explicitly testing if the path is\n  a single / (and we're testing that there are no runs of // .. and the path doesn't\n  end in a .) we can simplify this down to just testing that the path is entirely\n  made of allowed characters (in any order, because other tests are checking\n  that).",
          "is_bot": false,
          "headline": "Simplify invalid_chars? regex",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T16:32:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddb4785c5b72681e1e05f0a3fcff719438e264c6",
          "body": "- We're implicitly testing this in the invalid_chars? method, but that's actually\n  not doing what it says (it's actually testing both chars _and_ structure of the\n  path), so break out an explicit test here so we can simplify invalid_chars? in\n  the next commit.",
          "is_bot": false,
          "headline": "Explicitly test for no leading slash.",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T16:27:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e3f06e5a98c4c68fcf4a0427137f8300ff29912",
          "body": "- The 511 figure came from a misreading of the existing publishing-api regex,\n  which is 511 chars _plus_ the leading slash. The RFC has now been updated,\n  we adjust here to 512 because it's more recognisable.",
          "is_bot": false,
          "headline": "Update max base_path size from 511 chars to 512",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T16:22:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad33e42872399ac229e2b1d34e20bea53bafcd06",
          "body": "- It's important we don't miss any branches in these tests, and this will help.",
          "is_bot": false,
          "headline": "Turn on branch coverage report",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T16:16:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "689b03726ad877b907b8e30bb146b124e9ed543c",
          "body": "…2ca4\n\nUpdate simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
          "is_bot": false,
          "headline": "Merge pull request #1410 from alphagov/dependabot/bundler/test-eb6996…",
          "author_name": "Duncan Garmonsway",
          "author_login": "nacnudus",
          "committed_at": "2026-07-21T12:08:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcda533bbd0e7b9818d3836aed891c86218f1fd5",
          "body": "…ons/checkout-7.0.1\n\nBump actions/checkout from 7.0.0 to 7.0.1",
          "is_bot": false,
          "headline": "Merge pull request #1408 from alphagov/dependabot/github_actions/acti…",
          "author_name": "Duncan Garmonsway",
          "author_login": "nacnudus",
          "committed_at": "2026-07-21T11:35:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82c7b08f0c0de35bf9686bf40db1ddbd3213acb6",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 7.0.0 to 7.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T11:18:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da43243d6b8725edf72fa8ed019e857726fd1208",
          "body": "…/setup-ruby-1.319.0\n\nBump ruby/setup-ruby from 1.316.0 to 1.319.0",
          "is_bot": false,
          "headline": "Merge pull request #1409 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "Duncan Garmonsway",
          "author_login": "nacnudus",
          "committed_at": "2026-07-21T11:16:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ab824157ecfb78b9a935bf13e9ec1a4c1672526",
          "body": "Add RFC-192 compliant base path validator",
          "is_bot": false,
          "headline": "Merge pull request #1406 from alphagov/rfc-192-simplify-base-paths",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-21T08:09:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d29bcf9da4d3736050dba64f32aa31425dbe941a",
          "body": "Updates the requirements on [simplecov](https://github.com/simplecov-ruby/simplecov) to permit the latest version.\n\nUpdates `simplecov` to 1.0.1\n- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)\n- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)\n-\n[…]\n-\nupdated-dependencies:\n- dependency-name: simplecov\n  dependency-version: 1.0.1\n  dependency-type: direct:development\n  dependency-group: test\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Update simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T07:03:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "242b3bc4855181940edcc0668bd57d7021f25adc",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.316.0 to 1.319.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/d45b1a4e94b71acab930e56e\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.319.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1.316.0 to 1.319.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T07:03:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "776ccfdca12cd0c6ed22c613203594d14d7ebcbc",
          "body": "- Implements validation based of the suggestions in RFC-192\n  (https://github.com/alphagov/govuk-rfcs/pull/192)\n- allowed paths are 511 chars or shorter\n- they contain only lowercase letters and numbers, periods, forward slashes and dashes (minus signs)\n- they do not contain runs of forward slashes or periods\n- they do not end in a period",
          "is_bot": false,
          "headline": "Add base_path validator",
          "author_name": "Keith Lawrence",
          "author_login": "KludgeKML",
          "committed_at": "2026-07-20T15:15:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89dfee963bc1f77f18c55b26fcfc1413cee297be",
          "body": "…/setup-ruby-1.316.0\n\nBump ruby/setup-ruby from 1.314.0 to 1.316.0",
          "is_bot": false,
          "headline": "Merge pull request #1407 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-07-07T12:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "236a458e54c626a469b4d04af7c5d3a4f6d48ce7",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.314.0 to 1.316.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/9eb537ca036ebaed86729dcb\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.316.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1.314.0 to 1.316.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T07:02:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d0f81676baa63fd548a16707d8e6a1eed00d4b1e",
          "body": "…ons/checkout-7.0.0\n\nBump actions/checkout from 6.0.3 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #1405 from alphagov/dependabot/github_actions/acti…",
          "author_name": "Duncan Garmonsway",
          "author_login": "nacnudus",
          "committed_at": "2026-06-23T11:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9413940685ce5122167b34f82877bdd2e1ca7fc2",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 6.0.3 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T11:24:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55f020532524c61b3179a46044f61ebb710df7ba",
          "body": "…/setup-ruby-1.314.0\n\nBump ruby/setup-ruby from 1.313.0 to 1.314.0",
          "is_bot": false,
          "headline": "Merge pull request #1404 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "Duncan Garmonsway",
          "author_login": "nacnudus",
          "committed_at": "2026-06-23T11:22:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9115f588c0b92d6eb7780cd2c23f9a0f50416f",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.313.0 to 1.314.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/89f90524b88a01fe6e0b7322\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.314.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1.313.0 to 1.314.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T07:02:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "342ce60fc37d5de76367136213d0f65455a3670c",
          "body": "…rs-test\n\nUpdate search autocomplete tests",
          "is_bot": false,
          "headline": "Merge pull request #1402 from alphagov/SCH-2146-Update-GDS-API-adapte…",
          "author_name": "Emma",
          "author_login": "emmalowe",
          "committed_at": "2026-06-19T12:49:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "524d54f277ceba9fcefb82eda0ab126cafadf97a",
          "body": "…/setup-ruby-1.313.0\n\nBump ruby/setup-ruby from 1.310.0 to 1.313.0",
          "is_bot": false,
          "headline": "Merge pull request #1403 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-06-16T15:02:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c131eee2ec0c3e806d8ef3712ad7034ba17e722e",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.310.0 to 1.313.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/afeafc3d1ab54a631816aba4\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.313.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1.310.0 to 1.313.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-16T07:03:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "791312fca5800c1c661250270d25250f7011009f",
          "body": "We no longer raise internal errors in search-api-v2 if GCP times out or\nitself raises an internal error:\nhttps://github.com/alphagov/search-api-v2/pull/677",
          "is_bot": false,
          "headline": "Update search autocomplete tests",
          "author_name": "Emma",
          "author_login": "emmalowe",
          "committed_at": "2026-06-12T16:15:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "017768c7a4637334321855a51c47b8a36385ae42",
          "body": "…ons/checkout-6.0.3\n\nBump actions/checkout from 6.0.2 to 6.0.3",
          "is_bot": false,
          "headline": "Merge pull request #1400 from alphagov/dependabot/github_actions/acti…",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-06-09T10:41:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c2df6f015ee404866592bdcb9f12dd1c3ce1eaf",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 6.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T07:03:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cd97e2d345aa130cfeabaed1712bfedfc00a77dd",
          "body": "…/setup-ruby-1.310.0\n\nBump ruby/setup-ruby from 1.308.0 to 1.310.0",
          "is_bot": false,
          "headline": "Merge pull request #1399 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "callumknights",
          "author_login": "callumknights",
          "committed_at": "2026-06-03T11:25:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b44e4a4e0f53d21eef8a90778091b09f5a6c7b55",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.308.0 to 1.310.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/97ecb7b512899eb71ab1bf23\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.310.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1.308.0 to 1.310.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T07:06:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38a70d117651633e875a3172c0d7ef7db93c1fa5",
          "body": "[PP-7718] Pin SHAs for third-party actions",
          "is_bot": false,
          "headline": "Merge pull request #1398 from alphagov/pin_gha_actions_to_hashes",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-05-20T16:34:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5af2373416153757241409beaf8a27a15598db1f",
          "body": "As per policy: https://docs.publishing.service.gov.uk/manual/test-and-build-a-project-with-github-actions.html#pin-untrusted-github-actions-to-a-commit-sha",
          "is_bot": false,
          "headline": "Pins non-alphagov actions to a commit SHA",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-05-20T16:21:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6464203ff965c399c998affec606731144a3b2fc",
          "body": "…/setup-ruby-1.308.0\n\nBump ruby/setup-ruby from 1.306.0 to 1.308.0",
          "is_bot": false,
          "headline": "Merge pull request #1397 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "callumknights",
          "author_login": "callumknights",
          "committed_at": "2026-05-20T15:28:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d152089ac60975a8e7bf1b54c4e7dc8f634df852",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.306.0 to 1.308.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1.306.0...v1.308.0)\n\n--\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.308.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1.306.0 to 1.308.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T19:29:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97dba5f9e1c8017542f6fd0a08641755216dff4e",
          "body": "[PP-7606] Update pact tests for Publishing API error responses",
          "is_bot": false,
          "headline": "Merge pull request #1395 from alphagov/publishing-api-error-codes",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-05-19T14:20:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ecca98e2e56963d468a1eb81bdc5319294e3bf2",
          "body": "Update team name in PR template",
          "is_bot": false,
          "headline": "Merge pull request #1396 from alphagov/update-team-name-pr-template",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-05-19T09:02:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d270f4750b7d8337be04f11c4ad92d3c90ffcc8",
          "body": "The team name has changed, so updating the PR template to reflect this.",
          "is_bot": false,
          "headline": "Update team name in PR template",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-05-19T07:39:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18f661b8429a05ec7f847783a6af774566fcbabf",
          "body": "Publishing API will includes error_code in its error responses. It is possible\nthat multiple validation fail simultaneously. In such cases, the top-level\nerror_code would be multiple_validation_errors so the `fields` property is\nexpanded to provide detailed information about each individual failure,\n[…]\n field represented as a hash containing both a human-readable error and a\nmachine-readable code.\n\nThe test is updated to expect this new structure, ensuring it accurately\nreflects the API’s behaviour.",
          "is_bot": false,
          "headline": "Update pact tests for Publishing API error responses",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-05-15T15:47:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "066477582a9b5c8081c9b1deb552ebda18d6c9e5",
          "body": "…/setup-ruby-1.306.0\n\nBump ruby/setup-ruby from 1 to 1.306.0",
          "is_bot": false,
          "headline": "Merge pull request #1394 from alphagov/dependabot/github_actions/ruby…",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-05-13T10:31:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e89bc7bbd6b849096197ef2f4150ef9c46e5579",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1 to 1.306.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1...v1.306.0)\n\n---\nupdated-de\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.306.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump ruby/setup-ruby from 1 to 1.306.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T11:53:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f108be76dcdee4629c30b691c9c2bbdfb2a353c",
          "body": "…-6.0\n\nUpdate minitest requirement from ~> 5.19 to ~> 6.0",
          "is_bot": false,
          "headline": "Merge pull request #1374 from alphagov/dependabot/bundler/minitest-tw…",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-04-28T10:24:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ac4682f53e9ebd354cdb8126a7df5c6a65f5367",
          "body": "[PP-7588] Update Pact to reflect new base path schema definition",
          "is_bot": false,
          "headline": "Merge pull request #1392 from alphagov/update-base-path-pact",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-20T11:37:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c91c639fb73e1437904498c002edb5e7de518030",
          "body": null,
          "is_bot": false,
          "headline": "Add missing PR links",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-20T11:26:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "768b0eca7a1879468386c75579668f2c9013633e",
          "body": null,
          "is_bot": false,
          "headline": "Release 103.3.1",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-20T11:24:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f250317b242b0fb6668a218a27f7717aa216851b",
          "body": "The absolute path definition used by base paths is being updated to have\nmultiple requirements via allOf. This test needs updating to reflect\nthat change",
          "is_bot": false,
          "headline": "Update Pact test for new path schema definition",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-20T10:24:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4396b7e68abc3a295c4f5cbe73e1c772b29b6e20",
          "body": "…uk-eq-5.2.1\n\nUpdate rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
          "is_bot": false,
          "headline": "Merge pull request #1391 from alphagov/dependabot/bundler/rubocop-gov…",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-17T12:29:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "201b958ba26a309bfab7271563b978ab7494826e",
          "body": null,
          "is_bot": false,
          "headline": "Autocorrect rubocop offences",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-17T11:40:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb2b28bbe6ff33a61e555fbec65bad36cd8ff92e",
          "body": "…o-use-govuk_test-index\n\nUpdate search index",
          "is_bot": false,
          "headline": "Merge pull request #1389 from alphagov/SCH-1987-Refactor-pact-tests-t…",
          "author_name": "Emma",
          "author_login": "emmalowe",
          "committed_at": "2026-04-17T10:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "650b9eb72bde5e7863ea62ad815296b5b22dbd8c",
          "body": "[PP-7685] Update Dependabot configuration",
          "is_bot": false,
          "headline": "Merge pull request #1390 from alphagov/configure-dependabot",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T17:36:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e39feefa1ae51ca73c5eec7658da989364e13c7",
          "body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.2.0...v5.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n  dependency-version: 5.2.1\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Update rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-16T17:23:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f29f2aef4737cf87057433eae83298e2838270a8",
          "body": "Configure Dependabot to only open pull requests for direct dependencies,\nreducing noise from transitive updates and keeping changes more relevant and\neasier to review.\n\nApproach recommended in GOV.UK Developer Docs.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#dependency-type-allow",
          "is_bot": false,
          "headline": "Restrict Dependabot updates to direct dependencies",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T16:27:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b16fe511365f5693c20f057027af1a4e80ed76c6",
          "body": "We increase the Dependabot open PR limit to 25 to accommodate our weekly\nschedule and grouped updates, ensuring multiple batches can be raised and\nreviewed without being artificially capped. This helps avoid delays while still\nkeeping changes manageable alongside the cooldown and grouping strategy.\n\n[…]\narate internal limit of ten open pull requests which cannot be changed.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#open-pull-requests-limit-",
          "is_bot": false,
          "headline": "Increase Dependabot Open PR limit to 25",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T16:27:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c55d3f2f2f8b873323b2bdf04c521792c4f3165c",
          "body": "We schedule updates weekly on Tuesdays at 7:00am UTC to balance staying current\nwith a manageable review workload. A monthly cadence would be too infrequent\nfor a single person on the daily rota, and Tuesdays avoid common non-working\ndays in our team (Mondays and Fridays at the time).\n\nThe `timezone\n[…]\nlphagov/govuk-dependabot-merger/blob/main/.github/workflows/merge-dependabot-prs.yml#L5\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#schedule-",
          "is_bot": false,
          "headline": "Change Dependabot schedule to weekly",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T16:27:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b2a1dd83998acd9e828195ad72c8d2aec8461d79",
          "body": "Groups Bundler updates to reduce noise and make reviews more focused by\nbatching related dependencies together. Test libraries (e.g. RSpec, SimpleCov)\nare grouped so they can be reviewed and updated in context. This approach helps\nstreamline pull requests, making them less disruptive to the team’s d\n[…]\nork. We’re only using one linter for ruby so there’s no point in grouping at\nthe moment.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--",
          "is_bot": false,
          "headline": "Group Dependabot PRs",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T16:27:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e858a41b7f2504632c6654b2f249e5783bfa48c",
          "body": "This gives the community time to flag compromised or broken releases before\nupdates are applied, helping us avoid pulling in unstable or unsafe\ndependencies.  Sets the values according to GOV.UK Developer docs\nrecommendations: \n- 3 days for code dependencies\n- 7 days for infrastructure tooling (Terraform, Docker), as these changes tend\n  to carry more risk.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-",
          "is_bot": false,
          "headline": "Introduce Dependabot cooldown period",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T16:27:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7631d498b3bb9ccb186fd3fb204083a943675ca8",
          "body": "For consistency with other repos. The quotes are not needed.",
          "is_bot": false,
          "headline": "Update Dependabot values format",
          "author_name": "Aga Dufrat",
          "author_login": "AgaDufrat",
          "committed_at": "2026-04-16T16:27:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2ab503a89a6257a861f8eac41a2c92f386e62a0",
          "body": "The government index is being retired.\nThis change isn't strictly necessary for the tests\nto pass, but might make them easier to understand\ngoing forward.",
          "is_bot": false,
          "headline": "Update search index",
          "author_name": "Emma",
          "author_login": "emmalowe",
          "committed_at": "2026-04-16T09:22:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "842d89f8071c6177891219f0ab58d4d546c1b967",
          "body": "[PP-7664] Test against Ruby 4.0",
          "is_bot": false,
          "headline": "Merge pull request #1388 from alphagov/support-ruby-4",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-09T14:01:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e58ede88475cea6dcc5a7041344fce43f95c0b27",
          "body": null,
          "is_bot": false,
          "headline": "Release 103.3.0",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-09T13:57:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f04192efa4af369a56427ca9ce01febb9c28d40",
          "body": "rdoc is no longer a default gem in 4.0 so we need to include it in the\ngemspec. I believe rdoc supports the documentation at\nhttps://www.rubydoc.info/gems/gds-api-adapters/52.3.0. This is only\nexplicitly used via the Rakefile, so since Rake is a development\ndependency, I've made this the same\n\nOutpu\n[…]\nrdoc, which is not part of the default gems since Ruby 4.0.0.\nYou can add rdoc to your Gemfile or gemspec to fix this error.\nrake aborted!\nLoadError: cannot load such file -- rdoc/task (LoadError)\n```",
          "is_bot": false,
          "headline": "Test against Ruby 4.0",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-09T13:56:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "868114328195c51bac93a059d1421cb765fa6297",
          "body": "[PP-7274] Drop support for Ruby 3.2",
          "is_bot": false,
          "headline": "Merge pull request #1387 from alphagov/drop-ruby-3-2",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-04-01T09:05:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcfbf54412fd6e9cf4fc43317dc024fee3dda671",
          "body": null,
          "is_bot": false,
          "headline": "Release 103.2.0",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-03-31T11:49:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6c130b6c4e717ab5bbfb1a24404eafe85877e96",
          "body": "This will be end of life from 1 April 2026",
          "is_bot": false,
          "headline": "Drop support for Ruby 3.2",
          "author_name": "Ynda Jas",
          "author_login": "yndajas",
          "committed_at": "2026-03-31T11:14:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c31e026aeaf3adab1ee17892fa5ea299c04a70b5",
          "body": "[PP-7566] Require `plek` in Publishing API test helpers",
          "is_bot": false,
          "headline": "Merge pull request #1386 from alphagov/require-plek-publishing-api",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-03-30T16:03:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d3b12ba775ba5e5ce39955f27bd96730f04c73b",
          "body": null,
          "is_bot": false,
          "headline": "Release version 130.1.1",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-03-30T15:58:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ec65d640df9678f4d66f2868dd2ff94fab32bd5",
          "body": "`Plek` is used in the Publishing API test helpers to define some\nconstants, but has not been required.\n\nThis has never been an issue before, as all consumers of this helper\nalready required `plek` in their tests. However the pact tests in the\n`frontend` app do not.\n\nTherefore requiring `plek` to ensure it is always available.",
          "is_bot": false,
          "headline": "Require `plek` in Publishing API test helpers",
          "author_name": "Bruce Bolt",
          "author_login": "brucebolt",
          "committed_at": "2026-03-30T15:54:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "706692b4a11b48ee8db37308e38e1bee6c5bdb60",
          "body": "[PNP-9879] Update example to use Frontend",
          "is_bot": false,
          "headline": "Merge pull request #1385 from alphagov/update-government-frontend",
          "author_name": "deborahchua",
          "author_login": "deborahchua",
          "committed_at": "2026-03-24T17:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a179287f3c96d2365647afd84f8babc65c3324e",
          "body": "We have retired government-frontend.",
          "is_bot": false,
          "headline": "Update example to use Frontend",
          "author_name": "deborahchua",
          "author_login": "deborahchua",
          "committed_at": "2026-03-24T14:59:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d4b2ab6969f333eb1cab94ff8e93d7ff8aeebf1",
          "body": "Add timeout helper",
          "is_bot": false,
          "headline": "Merge pull request #1384 from alphagov/add-timeout-helper",
          "author_name": "callumknights",
          "author_login": "callumknights",
          "committed_at": "2026-03-10T08:39:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "072714da862ca06d7ecdd5de8c2e03feb7ac7231",
          "body": null,
          "is_bot": false,
          "headline": "Release version 103.1.0",
          "author_name": "Callum Knights",
          "author_login": "callumknights",
          "committed_at": "2026-03-09T18:05:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26d6205f0bba44813a825366e76c948a9e141d0e",
          "body": "Useful for testing graphql work",
          "is_bot": false,
          "headline": "Add timeout publishing API test helper",
          "author_name": "Callum Knights",
          "author_login": "callumknights",
          "committed_at": "2026-03-09T18:05:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47b605ed0db91faa3e2fd1a2f1d1ffc21ee31f28",
          "body": "…ons/upload-artifact-7\n\nBump actions/upload-artifact from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #1383 from alphagov/dependabot/github_actions/acti…",
          "author_name": "callumknights",
          "author_login": "callumknights",
          "committed_at": "2026-03-02T11:25:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "750f8b4c5ed17e928301b3f41688ed9ca8e48bb8",
          "body": "[SCH-1750] Remove unused #batch_search endpoint",
          "is_bot": false,
          "headline": "Merge pull request #1381 from alphagov/remove-batch-search-adapter",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-03-02T09:50:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f98203141d6583fb238caee67e61f268b5f24f2",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/upload-artifact from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-27T17:22:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a5e2d988692b688e2e5546af7401eb404f297d9",
          "body": "Removal of #batch_search adapter is a breaking change.",
          "is_bot": false,
          "headline": "Bump version to 103.0.0",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-19T14:20:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c32caf5bf58261e8e604c1e423ae98d753de15a4",
          "body": "Removing unused method as part of tidying up unused Search API code.",
          "is_bot": false,
          "headline": "Remove unused #batch_search endpoint",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-19T14:20:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9542c80c4a004db1ab37274f8f6f4a4bf90a6e86",
          "body": "[SCH-1679] Add search-api pacts to ci",
          "is_bot": false,
          "headline": "Merge pull request #1382 from alphagov/add-search-api-pacts-to-ci",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-19T14:05:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea3ace6a3f34792974d7a1ab10bdd8457e5220a1",
          "body": "…-enum\n\n[SCH-1679] Add pact tests for Search API #search_enum",
          "is_bot": false,
          "headline": "Merge pull request #1380 from alphagov/search-api-pact-testing-search…",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-17T14:02:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77feffa65c15aae46aa0290c995dcf45fd2f4b9a",
          "body": "#search_enum allows for the /search endpoint to be called page by page. It uses the /search endpoint, and needs params `start` and `count` to be allowed.",
          "is_bot": false,
          "headline": "Add pact tests for #search_enum",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-16T13:33:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8ff5b5bb1d2d849fcafe125cc1ae6c8922d684c",
          "body": "Now that we've added the necessary pact tests for search-api and tested them locally against the published pacts we can add the pact tests to the CI pipeline.\nThere is a companion PR to add the pact-verify workflow to the search-api ci workflow, which should be merged before this PR.",
          "is_bot": false,
          "headline": "Add search-api pacts to ci",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-12T12:20:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4de251f39cca49a06bbd039c847856b1763e2c65",
          "body": "Currently these tests aren't run as part of `bundle exec rake`, as the filename does not have the format `\"test/**/*_test.rb\"`. Changing the filename will mean that the tests are run as part of ci",
          "is_bot": false,
          "headline": "Rename from search.rb to search_test.rb",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-09T11:44:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bfa5aaa0722ba209897b4ac78af2235fa0ea74d",
          "body": "…-endpoint-2\n\n[SCH-1679] Add pact tests for #search",
          "is_bot": false,
          "headline": "Merge pull request #1379 from alphagov/search-api-pact-testing-search…",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-09T09:13:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad6ce1e1f9b568f84fad78de2152112eb86b73ef",
          "body": null,
          "is_bot": false,
          "headline": "Add pact test for search with no keyword included",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-06T16:35:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b7390da6d658490319d1fe04b640c84c4caa81b",
          "body": "This is a representative test of one of the types of user input that would raise a 422 error.",
          "is_bot": false,
          "headline": "Add pact tests for search with invalid ordering field.",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-02-06T16:35:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ddefc2f7d00b93c204076f11672b934cb42219c",
          "body": "[SCH-1679] Contract tests with Search API",
          "is_bot": false,
          "headline": "Merge pull request #1375 from alphagov/search-api-pact-testing",
          "author_name": "Emma",
          "author_login": "emmalowe",
          "committed_at": "2026-01-30T10:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a869d3e8e3ead8b245f7b8aa77a72ca2525ce0a9",
          "body": "We will need multiple pact tests for search, but this PR only adds the most straightforward one so that we can get the pact tests configured correctly.",
          "is_bot": false,
          "headline": "Add initial pact test",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-01-29T17:14:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57c215571238e349c90517a61a8f41bed06a02e9",
          "body": "…uk-eq-5.2.0",
          "is_bot": false,
          "headline": "Merge pull request #1378 from alphagov/dependabot/bundler/rubocop-gov…",
          "author_name": "GOV.UK Continuous Integration User",
          "author_login": "govuk-ci",
          "committed_at": "2026-01-28T08:49:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e45d4150fe21a1a5c1574dba4278db9c689ea84",
          "body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.1.20...v5.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n  dependency-version: 5.2.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Update rubocop-govuk requirement from = 5.1.20 to = 5.2.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-27T17:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b6d37112a594094501f32e5287da771168e3823",
          "body": "[SCH-1704] Removed unused search-api adapters",
          "is_bot": false,
          "headline": "Merge pull request #1376 from alphagov/remove-unused-search-endpoints",
          "author_name": "Jess Jones",
          "author_login": "hannako",
          "committed_at": "2026-01-27T11:34:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d15040f90077d5a912d045eb7287404ffdb519e",
          "body": "Co-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
          "is_bot": false,
          "headline": "Bump version to 102.0.0",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-01-15T14:45:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca7e960c791ad3ba8fe125d0f056339c133cf821",
          "body": "Deleting add_document, delete_document, get_content & delete_content and associated test helpers as they're no longer used.\n\nCo-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
          "is_bot": false,
          "headline": "Removed unused search-api adapters",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-01-15T14:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2aacab914ea582cd37e8248cd1d89f479193958d",
          "body": null,
          "is_bot": false,
          "headline": "Declare new pact with Search API",
          "author_name": "Lucy Stringer",
          "author_login": "stringiest",
          "committed_at": "2026-01-07T09:42:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9faabb2c29c95f5c7243267bf6ded3bb5777765",
          "body": "Updates the requirements on [minitest](https://github.com/minitest/minitest) to permit the latest version.\n- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)\n- [Commits](https://github.com/minitest/minitest/compare/v5.19.0...v6.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: minitest\n  dependency-version: 6.0.1\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Update minitest requirement from ~> 5.19 to ~> 6.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-29T17:04:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9e44f94cbb5dea44a92b453d9b2156ce8119a79",
          "body": "…emoved-version\n\nPact updates for removal of ?version= in GET content",
          "is_bot": false,
          "headline": "Merge pull request #1373 from alphagov/update-pacts-for-get-content-r…",
          "author_name": "Richard Towers",
          "author_login": null,
          "committed_at": "2025-12-17T16:53:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "644126c16e12f66a67f03ffbf74fd6ee70ac558b",
          "body": "Not sure if this is strictly needed to get the Pact tests updated, but\nseems like a new gem version is sensible in any case.",
          "is_bot": false,
          "headline": "Bump the version to 101.2.0",
          "author_name": "Richard Towers",
          "author_login": null,
          "committed_at": "2025-12-17T16:20:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36d3be4efecf79868176aa4328ec87fac1432300",
          "body": "We've replaced the version param with a content_store param.\n\nThis means it's no longer possible to request a superseded edition (so\nthat pact is removed).\n\nIt's still possible to request published content instead of draft (by\nquerying with content_store=live), or to request draft content\nspecifically (with content_store=draft).",
          "is_bot": false,
          "headline": "Pact updates for removal of ?version= in GET content",
          "author_name": "Richard Towers",
          "author_login": null,
          "committed_at": "2025-12-17T15:23:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ac9b57fa121f980cd36bf0aeefae49e6c3139db",
          "body": "[PP-7501] Simplify the get_live_content method",
          "is_bot": false,
          "headline": "Merge pull request #1372 from alphagov/simplify-get-live-content",
          "author_name": "Richard Towers",
          "author_login": null,
          "committed_at": "2025-12-17T10:00:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 126,
      "latest_release_at": "2026-07-27T10:04:44Z",
      "latest_release_tag": "v103.4.0",
      "releases_from_tags": true,
      "days_since_last_push": 0,
      "active_weeks_last_year": 32,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 24.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "gds-api-adapters",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "rubygems",
          "matches_repo": true,
          "registry_url": "https://rubygems.org/gems/gds-api-adapters",
          "is_deprecated": false,
          "latest_version": "103.4.0",
          "repository_url": "http://github.com/alphagov/gds-api-adapters",
          "versions_count": 589,
          "total_downloads": 2174538,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2011-12-06T10:30:58.554000Z",
          "latest_published_at": "2026-07-27T10:07:58.002000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 13,
      "stars": 21,
      "watchers": 88,
      "fork_history": {
        "days": [
          {
            "date": "2013-09-11",
            "count": 1
          },
          {
            "date": "2015-02-26",
            "count": 1
          },
          {
            "date": "2015-10-07",
            "count": 1
          },
          {
            "date": "2016-05-18",
            "count": 1
          },
          {
            "date": "2016-06-23",
            "count": 1
          },
          {
            "date": "2017-05-26",
            "count": 1
          },
          {
            "date": "2019-08-29",
            "count": 1
          },
          {
            "date": "2020-09-10",
            "count": 1
          },
          {
            "date": "2020-12-25",
            "count": 1
          },
          {
            "date": "2021-04-10",
            "count": 1
          },
          {
            "date": "2026-02-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 11,
        "total_forks": 13
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 40393,
      "source_files_sampled": 123,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Gemfile"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 1,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 22,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "rubygems"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "addressable",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "byebug",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "climate_control",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "govuk_schemas",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "link_header",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "minitest",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "minitest-around",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "mocha",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "null_logger",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pact",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pact-consumer-minitest",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pact-mock_service",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pact_broker-client",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "plek",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rack",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rack-test",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rake",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rdoc",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rest-client",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-govuk",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "timecop",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "webmock",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 23,
        "direct_count": 0,
        "indirect_count": 23
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 1301,
        "open_issues": 1,
        "closed_ratio": 0.9,
        "closed_issues": 9,
        "closed_unmerged_prs": 100
      },
      "bus_factor": 13,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "alext",
          "commits": 195,
          "avatar_url": "https://avatars.githubusercontent.com/u/5560?v=4"
        },
        {
          "type": "User",
          "login": "kevindew",
          "commits": 177,
          "avatar_url": "https://avatars.githubusercontent.com/u/282717?v=4"
        },
        {
          "type": "User",
          "login": "barrucadu",
          "commits": 156,
          "avatar_url": "https://avatars.githubusercontent.com/u/75235?v=4"
        },
        {
          "type": "User",
          "login": "tijmenb",
          "commits": 142,
          "avatar_url": "https://avatars.githubusercontent.com/u/233676?v=4"
        },
        {
          "type": "User",
          "login": "elliotcm",
          "commits": 137,
          "avatar_url": "https://avatars.githubusercontent.com/u/109225?v=4"
        },
        {
          "type": "User",
          "login": "JordanHatch",
          "commits": 121,
          "avatar_url": "https://avatars.githubusercontent.com/u/71922?v=4"
        },
        {
          "type": "User",
          "login": "thomasleese",
          "commits": 117,
          "avatar_url": "https://avatars.githubusercontent.com/u/510498?v=4"
        },
        {
          "type": "User",
          "login": "dhwthompson",
          "commits": 111,
          "avatar_url": "https://avatars.githubusercontent.com/u/32775?v=4"
        },
        {
          "type": "User",
          "login": "jamiecobbett",
          "commits": 109,
          "avatar_url": "https://avatars.githubusercontent.com/u/93739?v=4"
        },
        {
          "type": "User",
          "login": "brucebolt",
          "commits": 104,
          "avatar_url": "https://avatars.githubusercontent.com/u/6329861?v=4"
        }
      ],
      "contributors_sampled": 99,
      "top_contributor_share": 0.062
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "actionlint.yml",
        "autorelease.yml",
        "ci.yml",
        "publish.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".rubocop.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 8,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 39 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
        "ran_at": "2026-07-27T10:14:45Z",
        "aggregate_score": 7.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T10:08:05Z",
      "oldest_open_prs": [
        {
          "number": 1401,
          "created_at": "2026-06-12T14:51:35Z",
          "last_comment_at": "2026-07-08T09:03:27Z",
          "last_comment_author": "yndajas"
        }
      ],
      "last_merged_pr_at": "2026-07-27T10:04:44Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 722,
          "created_at": "2017-07-20T17:01:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/alphagov/gds-api-adapters",
    "host": "github.com",
    "name": "gds-api-adapters",
    "owner": "alphagov"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "exceptional",
      "name": "Overall health",
      "note": "The weighted overall 79 is calibrated to 93 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 79,
            "calibrated": 93,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 93,
      "inputs": {
        "security": 82,
        "vitality": 87,
        "community": 62,
        "governance": 92,
        "calibration": "2026-08-02",
        "engineering": 76,
        "ai_readiness": 44,
        "weighted_overall_raw": 79
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 87,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 86,
            "inputs": {
              "commits_last_year": 126,
              "human_commit_share": 0.85,
              "days_since_last_push": 0,
              "active_weeks_last_year": 32
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "32/52 weeks with commits",
                "points": 22.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 32
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "126 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 126
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v103.4.0",
              "releases_from_tags": true,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 24.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~24.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 24.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 6,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 6 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 62,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "weak",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "forks": 13,
              "stars": 21,
              "watchers": 88,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "21 stars",
                "points": 21.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "13 forks",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "88 watchers",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 88
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 82,
            "inputs": {
              "packages": [
                "gds-api-adapters"
              ],
              "dependents": null,
              "ecosystems": "rubygems",
              "total_downloads": 2174538,
              "monthly_downloads": null
            },
            "components": [
              {
                "key": "total_downloads",
                "name": "Total downloads",
                "detail": "2,174,538 downloads all-time across rubygems",
                "points": 65.9,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_total",
                    "params": {
                      "count": 2174538,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "excellent",
        "name": "Sustainability & Governance",
        "value": 92,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "exceptional",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "bus_factor": 13,
              "contributors_sampled": 99,
              "top_contributor_share": 0.062
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "13 contributor(s) cover half of all commits",
                "points": 54,
                "status": "met",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 6% of commits",
                "points": 21.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 6
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "99 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 99
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 39 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "exceptional",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 93,
            "inputs": {
              "merged_prs": 1301,
              "open_issues": 1,
              "closed_issues": 9,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.9,
              "closed_unmerged_prs": 100,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "90% of issues closed",
                "points": 37.8,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 90
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1301/1401 decided PRs merged",
                "points": 27.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1301,
                      "decided": 1401
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "followers": 1576,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "alphagov",
              "public_repos": 1528,
              "account_age_days": 5653
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,576 followers of alphagov",
                "points": 23,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1576,
                      "login": "alphagov"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1528 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1528
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "gds-api-adapters"
              ],
              "ecosystems": "rubygems",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on rubygems",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "589 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 589
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".rubocop.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "govuk"
              ],
              "has_wiki": false,
              "homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "1 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "excellent",
        "name": "Security",
        "value": 82,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 78,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 7.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 39 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 1 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 1
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 22
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 1,
              "unassessed_packages": 22,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 17
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "weak",
        "name": "AI Readiness",
        "value": 44,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.765,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "65 of 85 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 65,
                      "sampled": 85
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "weak",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 43,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.15
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".rubocop.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "15 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 15,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Ruby",
              "largest_source_bytes": 40393,
              "source_files_sampled": 123,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Ruby without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Ruby"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/123 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 123,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library"
      ],
      "scores": {
        "library": 6
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:rubygems",
          "weight": 6
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T10:15:14.238713Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/alphagov/gds-api-adapters.svg",
  "full_name": "alphagov/gds-api-adapters",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.3.1, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаRubyGems.