Публічний реєстрПомірний
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-23 01:33 UTC
balena-io-modules / balena-preload
Script for preloading containers onto balena device images
balena-io-modules/balena-preload має індекс здоров’я 63 зі 100, що відповідає смузі «Помірний». Найвищий показник — Sustainability & Governance (78/100), найнижчий — AI Readiness (35/100). Останнє оновлення було 1 день тому. Більшість нещодавньої роботи виконують 3 учасники.
63
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
63
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Власність
balena-io-modulesОрганізація
15 підписників298 публічних репозиторіївз бер. 2016 р.
За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.
Пакетні екосистеми
| Реєстр | Пакет | Версія | Завантажень / міс | Версії | Остання публікація | Теги |
|---|---|---|---|---|---|---|
| npm | balena-preload | 19.0.5 | 8 044 | 301 | 42 дні тому | balenabalenaosimagedockercontainer |
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
70
Активність розробки
62Помірний
Як обчислюється оцінка
| 36/36 | Свіжість push — останній push 1 дн. тому |
| 4.2/36 | Ритм комітів — 6/52 тижнів із комітами |
| 12.2/18 | Обсяг комітів — 22 комітів за останній рік |
| 10/10 | OpenSSF Scorecard: Maintained — 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Використані вхідні дані
| commits_last_year | 22 |
| human_commit_share | 0,58 |
| days_since_last_push | 1 |
| active_weeks_last_year | 6 |
Дисципліна релізів
83Добрий
Як обчислюється оцінка
| 27/27 | Випускає релізи — опубліковано 19 релізів |
| 36/36 | Свіжість релізів — останній реліз 42 дн. тому |
| 19.8/27 | Ритм релізів — реліз кожні ~49,7 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Використані вхідні дані
| releases_count | 19 |
| latest_release_tag | v19.0.5 |
| releases_from_tags | ні |
| days_since_latest_release | 42 |
| mean_days_between_releases | 49,7 |
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
49
Популярність і впровадження
37У зоні ризику
Як обчислюється оцінка
| 25.2/60 | Зірки — 37 зірок |
| 5.8/25 | Форки — 6 форків |
| 5.8/15 | Спостерігачі — 12 спостерігачів |
Використані вхідні дані
| forks | 6 |
| stars | 37 |
| watchers | 12 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Здоров'я спільноти
50Помірний
Як обчислюється оцінка
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (Apache-2.0) |
| 0/18 | Настанови CONTRIBUTING |
| 0/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | так |
| has_license | так |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | ні |
| has_pull_request_template | ні |
Впровадження в екосистемі (завантаження)
65Помірний
Як обчислюється оцінка
| 52.1/80 | Щомісячні завантаження — 8 044 завантажень/місяць у npm |
| 0/20 | Залежні пакети в реєстрі — ця екосистема цього не повідомляє |
Використані вхідні дані
| packages | balena-preload |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 8 044 |
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
78
Як обчислюється оцінка
| 36/54 | Бас-фактор — на 3 контриб’ютор(ів) припадає половина всіх комітів |
| 16.2/22.5 | Розподіл комітів — головний контриб’ютор — автор 28% комітів |
| 13.5/13.5 | Широта контриб’юторів — 24 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 12 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 3 |
| contributors_sampled | 24 |
| top_contributor_share | 0,28 |
Реактивність на issue та PR
77Добрий
Як обчислюється оцінка
| 39.8/46.8 | Вирішення issue — закрито 85% issue |
| 34.2/38.3 | Прийняття PR — злито 171/191 вирішених PR |
| 3/15 | OpenSSF Scorecard: Code-Review — Found 4/18 approved changesets -- score normalized to 2 |
Використані вхідні дані
| merged_prs | 171 |
| open_issues | 18 |
| closed_issues | 103 |
| issue_closed_ratio | 0,851 |
| closed_unmerged_prs | 20 |
Власність та опіка
64Помірний
Як обчислюється оцінка
| 30/30 | Підтримка власника — у власності організації |
| 0/20 | Верифікований домен |
| 8.7/25 | Охоплення власника — 15 підписників у balena-io-modules |
| 25/25 | Послужний список — 298 публічних репозиторіїв, вік облікового запису ~10 р. |
Використані вхідні дані
| followers | 15 |
| owner_type | Organization |
| is_verified | — |
| owner_login | balena-io-modules |
| public_repos | 298 |
| account_age_days | 3 788 |
Супровід пакетів
100Відмінний
Як обчислюється оцінка
| 25/25 | Опубліковано й доступно — 1 пакет(ів) у npm |
| 35/35 | Свіжість публікацій — остання публікація 42 дн. тому |
| 20/20 | Історія версій — 301 опублікованих версій |
| 20/20 | Не застарілий — активний, не deprecated і не yanked |
Використані вхідні дані
| packages | balena-preload |
| ecosystems | npm |
| any_deprecated | ні |
| min_days_since_publish | 42 |
Інженерна якість
Чи наявні базові інженерні практики та документація?
52
Інженерні практики
44У зоні ризику
Як обчислюється оцінка
| 24/24 | Процеси CI — 1 процес(ів) CI |
| 0/24 | Наявні тести |
| 0/16 | Конфігурація лінтера |
| 0/9.6 | Pre-commit-хуки |
| 6.4/6.4 | .editorconfig |
| 14/20 | OpenSSF Scorecard: CI-Tests — 7 out of 9 merged PRs checked by a CI test -- score normalized to 7 |
Використані вхідні дані
| has_ci | так |
| has_tests | ні |
| has_editorconfig | так |
| has_linter_config | ні |
| has_precommit_config | ні |
Документація
65Помірний
Як обчислюється оцінка
| 30/30 | README |
| 0/25 | Каталог документації |
| 15/15 | Сайт документації / домашня сторінка — https://www.balena.io/ |
| 10/10 | Опис репозиторію |
| 0/10 | Теми |
| 10/10 | Wiki |
Використані вхідні дані
| topics | — |
| has_wiki | так |
| homepage | https://www.balena.io/ |
| has_readme | так |
| has_docs_dir | ні |
| has_description | так |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
58
Стан безпеки
53Помірний
Як обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 1.8/2.5 | CI-Tests — 7 out of 9 merged PRs checked by a CI test -- score normalized to 7 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 1.5/7.5 | Code-Review — Found 4/18 approved changesets -- score normalized to 2 |
| 2.5/2.5 | Contributors — project has 12 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 7.5/7.5 | Maintained — 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — немає даних |
| 1.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
| 4/5 | SAST — SAST tool is not run on all commits -- score normalized to 8 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5,3 |
Виключено з оцінювання (немає даних або не застосовно): packaging. Залишкові ваги перенормовано.
Сповіщення про залежності
79Добрий
Як обчислюється оцінка
| 35/35 | Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень |
| 10/25 | Непрямі залежності без відомих сповіщень — уражено 1: uuid 10.0.0 (high 7.5) |
| 33.7/40 | Немає задавнених сповіщень — 1 пакет(ів) зі сповіщеннями без реакції понад 90 дн.; найдавніше опубліковано 91 дн. тому |
Використані вхідні дані
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 183 |
| unassessed_packages | 0 |
| affected_by_severity | high 1 |
| direct_affected_packages | 0 |
Звірено з runtime-замиканням залежностей npm:balena-preload@19.0.5 — тим, що тягне за собою встановлення опублікованого пакета, — 183 пакетів. Досяжність не аналізується.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
35
Контекст і настанови для агентів
18Критичний
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 17.5/40 | Читабельна історія комітів — намір зазначено у 19 з 58 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,328 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Як обчислюється оцінка
| 0/18 | Розгортання однією командою |
| 0/22 | Автоматизовані тести |
| 0/11 | Конфігурація лінтера / форматера |
| 11/11 | Статична перевірка типів — tsconfig.json |
| 10/10 | Відтворюване середовище — Dockerfile |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 0/8 | Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено |
| 3/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
Використані вхідні дані
| has_nix | ні |
| has_tests | ні |
| lockfiles | — |
| has_dockerfile | так |
| typed_language | так |
| bootstrap_files | — |
| has_devcontainer | ні |
| has_linter_config | ні |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Читабельність коду для моделей
100Відмінний
Як обчислюється оцінка
| 45/45 | Типізований код — TypeScript (статично типізована) |
| 55/55 | Керовані розміри файлів — 0/2 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | TypeScript |
| largest_source_bytes | 33 171 |
| source_files_sampled | 2 |
| oversized_source_files | 0 |
Ключові факти
37зірок GitHub
24контриб'юторів
22комітів за останні 12 місяців
1днів від останнього пушу
19релізів
3бас-фактор
18відкритих issue
npm, PyPIпакетних екосистем
Попередження щодо збору даних
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 6 ⇿
0Зірки
6Форки
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Кожна точка охоплює 7 днів.
OpenSSF Scorecard 5.3 / 10
5.3сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 7 | CI-Tests | 7 out of 9 merged PRs checked by a CI test -- score normalized to 7 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 2 | Code-Review | Found 4/18 approved changesets -- score normalized to 2 |
| 10 | Contributors | project has 12 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| н/д | Packaging | packaging workflow not detected |
| 3 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 3 |
| 8 | SAST | SAST tool is not run on all commits -- score normalized to 8 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Прямі залежності 8
| Реєстр | Пакет | Обмеження версії | Маніфест |
|---|---|---|---|
| npm | balena-sdk | ^23.0.0 | package.json |
| npm | compare-versions | ^4.0.0 | package.json |
| npm | docker-progress | ^5.0.0 | package.json |
| npm | dockerode | ^4.0.2 | package.json |
| npm | get-port | ^3.2.0 | package.json |
| npm | lodash | ^4.17.21 | package.json |
| npm | node-cleanup | ^2.1.2 | package.json |
| npm | tar-fs | ^2.1.1 | package.json |
Усі залежності 17
Повний розв'язаний набір залежностей із графа залежностей GitHub: 8 прямих і 9 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|---|---|---|
| npm | balena-sdk | ^23.0.0 | пряма |
| npm | compare-versions | ^4.0.0 | пряма |
| npm | docker-progress | ^5.0.0 | пряма |
| npm | dockerode | ^4.0.2 | пряма |
| npm | get-port | ^3.2.0 | пряма |
| npm | lodash | ^4.17.21 | пряма |
| npm | node-cleanup | ^2.1.2 | пряма |
| npm | tar-fs | ^2.1.1 | пряма |
| npm | @balena/lint | ^7.2.6 | непряма |
| npm | @types/dockerode | ^3.3.23 | непряма |
| npm | @types/node | ^20.17.22 | непряма |
| npm | @types/request-promise | ^4.1.48 | непряма |
| npm | @types/tar-fs | ^2.0.1 | непряма |
| npm | catch-uncommitted | ^2.0.0 | непряма |
| npm | typescript | ^5.6.2 | непряма |
| PyPI | retry | 0.9.2 | непряма |
| PyPI | sh | 1.14.3 | непряма |
Сповіщення про залежності 1
Встановлення npm:balena-preload@19.0.5 тягне 183 пакетів, прямих і транзитивних: 1 мають відомі сповіщення, з них 0 — прямі залежності.
| Пакет | Версія | Зв'язок | Критичність | Сповіщень | Виправлено в |
|---|---|---|---|---|---|
| uuid | 10.0.0 | непряма | висока | 1 | 13.0.1 |
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 716,
"has_wiki": true,
"homepage": "https://www.balena.io/",
"languages": {
"Python": 32894,
"Dockerfile": 616,
"TypeScript": 33171
},
"pushed_at": "2026-07-21T22:31:48Z",
"created_at": "2015-10-05T15:48:48Z",
"owner_type": "Organization",
"updated_at": "2026-06-10T02:47:30Z",
"description": "Script for preloading containers onto balena device images",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"Python"
]
},
"owner": {
"blog": "https://www.balena.io",
"name": null,
"type": "Organization",
"login": "balena-io-modules",
"company": null,
"location": null,
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/17724750?v=4",
"created_at": "2016-03-08T13:41:49Z",
"is_verified": null,
"public_repos": 298,
"account_age_days": 3788
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v19.0.5",
"kind": "patch",
"published_at": "2026-06-10T02:47:54Z"
},
{
"tag": "v19.0.4",
"kind": "patch",
"published_at": "2026-06-10T01:39:48Z"
},
{
"tag": "v19.0.3",
"kind": "patch",
"published_at": "2026-06-10T01:21:07Z"
},
{
"tag": "v19.0.2",
"kind": "patch",
"published_at": "2026-05-12T17:38:59Z"
},
{
"tag": "v19.0.1",
"kind": "patch",
"published_at": "2026-02-19T14:39:12Z"
},
{
"tag": "v19.0.0",
"kind": "major",
"published_at": "2026-02-10T08:44:00Z"
},
{
"tag": "v18.0.5",
"kind": "patch",
"published_at": "2025-08-07T16:48:27Z"
},
{
"tag": "v18.0.4",
"kind": "patch",
"published_at": "2025-05-21T14:25:36Z"
},
{
"tag": "v18.0.3",
"kind": "patch",
"published_at": "2025-03-19T16:55:21Z"
},
{
"tag": "v18.0.2",
"kind": "patch",
"published_at": "2025-03-19T15:55:55Z"
},
{
"tag": "v18.0.1",
"kind": "patch",
"published_at": "2025-03-04T18:41:57Z"
},
{
"tag": "v18.0.0",
"kind": "major",
"published_at": "2025-03-04T15:51:07Z"
},
{
"tag": "v17.0.0",
"kind": "major",
"published_at": "2024-10-21T16:21:13Z"
},
{
"tag": "v16.0.0",
"kind": "major",
"published_at": "2024-09-17T16:59:59Z"
},
{
"tag": "v15.0.6",
"kind": "patch",
"published_at": "2024-07-12T14:09:40Z"
},
{
"tag": "v15.0.5",
"kind": "patch",
"published_at": "2024-04-09T15:24:49Z"
},
{
"tag": "v15.0.4",
"kind": "patch",
"published_at": "2024-04-09T12:05:45Z"
},
{
"tag": "v15.0.3",
"kind": "patch",
"published_at": "2024-04-09T11:50:38Z"
},
{
"tag": "v15.0.2",
"kind": "patch",
"published_at": "2024-02-13T13:26:53Z"
}
],
"recent_commits": [
{
"oid": "f5581e859eae28522d796245ae4d2ab95c2d023c",
"body": null,
"is_bot": true,
"headline": "v19.0.5",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-06-10T02:47:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b500273ceb7e7fe21c155922a37eee834a130a9",
"body": "Update alpine\n\nChange-type: patch",
"is_bot": true,
"headline": "Update alpine:3.24 Docker digest to a2d49ea (#318)",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-06-10T02:46:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3e2be5abe462cd6abe8c27a33ecef427c9a246b",
"body": "Update alpine\n\nChange-type: patch",
"is_bot": true,
"headline": "Update alpine:3.24 Docker digest to a2d49ea",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-06-10T02:41:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7fb5eb64525424392c6c3e6564389fccb5c92ea",
"body": null,
"is_bot": true,
"headline": "v19.0.4",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-06-10T01:39:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "981082ea97c4c27d215ded4e0fb3e13b6795e3ff",
"body": "Update alpine from 3.23 to 3.24\n\nChange-type: patch",
"is_bot": true,
"headline": "Update alpine Docker tag to v3.24 (#317)",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-06-10T01:38:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "868ad0c60f6738d2cde7fc40d1a58dcc14b747ba",
"body": "Update alpine from 3.23 to 3.24\n\nChange-type: patch",
"is_bot": true,
"headline": "Update alpine Docker tag to v3.24",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-06-10T01:33:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1086f7f2f0fcbf5e9d9eae2bb195263fb231265f",
"body": null,
"is_bot": true,
"headline": "v19.0.3",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-06-10T01:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f375e60e22cf4dd66c48d13db5cf4533ed9ddbe",
"body": "…ons-4.x\n\nUpdate dependency compare-versions to v4",
"is_bot": false,
"headline": "Merge pull request #314 from balena-io-modules/renovate/compare-versi…",
"author_name": "Josh Bowling",
"author_login": "joshbwlng",
"committed_at": "2026-06-10T01:19:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "137d57f8da8a387f102ae3c7153b08007437d559",
"body": "Update compare-versions from 3.6.0 to 4.1.4\n\nChange-type: patch",
"is_bot": true,
"headline": "Update dependency compare-versions to v4",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-05-12T18:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a14ce449e5e620be5902cfc4c4c56f1a2413dfa4",
"body": null,
"is_bot": true,
"headline": "v19.0.2",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-05-12T17:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "369066d6ad180206b701184c564084d209fb2db5",
"body": "Update alpine Docker tag to v3.23",
"is_bot": true,
"headline": "Merge pull request #313 from balena-io-modules/renovate/alpine-3.x",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-05-12T17:37:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "360b2a547d2cefdda50ebf7b7bfe85b29d931354",
"body": "Update alpine from 3.21 to 3.23\n\nChange-type: patch",
"is_bot": true,
"headline": "Update alpine Docker tag to v3.23",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2026-05-12T17:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "feac50e76174b22988e514b05a58390ebf91f1f7",
"body": null,
"is_bot": true,
"headline": "v19.0.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-19T14:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51a63dc47aab1eabd0deba28de284e68652ac703",
"body": "Add id-token: write permission for NPM OIDC publishing",
"is_bot": true,
"headline": "Merge pull request #311 from balena-io-modules/add-npm-oidc-permissions",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-19T14:37:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0595aa5b4bc0d1ca031ca6a2c0d6cb3048b6eda",
"body": null,
"is_bot": false,
"headline": "Update homepage and repository URLs in package.json",
"author_name": "Kyle Harding",
"author_login": "klutchell",
"committed_at": "2026-02-19T14:33:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b32b86fca1b26ef97106800f760df8fb7e259ffc",
"body": "Change-type: patch\nSigned-off-by: Kyle Harding <kyle@balena.io>",
"is_bot": false,
"headline": "Add id-token: write permission for NPM OIDC publishing",
"author_name": "Kyle Harding",
"author_login": "klutchell",
"committed_at": "2026-02-18T18:41:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6344bdf7f556323fbf3f7e607f6a69354d67bf4b",
"body": null,
"is_bot": true,
"headline": "v19.0.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-10T08:43:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3cfb2c44acd0330d19eb9bd961493d7b86310e4",
"body": "preload: Update balena-sdk to 23.0.0",
"is_bot": true,
"headline": "Merge pull request #310 from balena-io-modules/sdk-23",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-10T08:42:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c75eec79633cf4826e2cdb7b525a8128ea4cc067",
"body": "Update balena-sdk from 22.0.0 to 23.0.0\n\nChange-type: major\nSee: https://balena.fibery.io/Work/Project/2196",
"is_bot": false,
"headline": "Update balena-sdk to 23.0.0",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2026-02-10T07:34:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b97549c06bb9177c6134ed35e532e3587dc1ec5c",
"body": "Change-type: major",
"is_bot": false,
"headline": "Drop support for node < 22.18.0",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2026-02-10T07:14:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ef8e0ae9ce612cea57b9d9af3583004f7d46754",
"body": null,
"is_bot": true,
"headline": "v18.0.5",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-08-07T16:48:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebf6cf4887c24790b69e2305e5685bdf5d88e4e2",
"body": "Bump balena-sdk to v22.0.0",
"is_bot": false,
"headline": "Merge pull request #308 from balena-io-modules/bump-balena-sdk",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2025-08-07T16:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89546d800e46bb26d4237b1da5b297d49b072c5c",
"body": "Update balena-sdk from 21.2.1 to 22.0.0\n\nChange-type: patch",
"is_bot": false,
"headline": "Bump balena-sdk to v22.0.0",
"author_name": "Otavio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2025-08-07T12:03:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37e1c07b1951512d17753708c8a059683255bdd5",
"body": null,
"is_bot": true,
"headline": "v18.0.4",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-05-21T14:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efbcb345711bde33ae9081a616faa675f8240de6",
"body": "Fix balena-preload pip deps",
"is_bot": false,
"headline": "Merge pull request #307 from balena-io-modules/fix-pip",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2025-05-21T14:24:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edd39729cfdc630c95ee4b5c1dffdba3b459224d",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Fix balena-preload pip deps",
"author_name": "Otavio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2025-05-21T13:51:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb5c2764909fef3b45a169706f3de7da4711f830",
"body": null,
"is_bot": true,
"headline": "v18.0.3",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-03-19T16:54:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d130130e8dd7aea652aa6b8d86f7ff7b7b6545ab",
"body": "Update dependency sh to v1.14.3",
"is_bot": true,
"headline": "Merge pull request #302 from balena-io-modules/renovate/sh-1.x",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2025-03-19T16:53:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1ad075baee7833286d10466683e0ccba6d4a6a1",
"body": "Update sh from 1.12.14 to 1.14.3\n\nChange-type: patch",
"is_bot": true,
"headline": "Update dependency sh to v1.14.3",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2025-03-19T16:50:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9db4980bad7fb49faf385d4b2c3b9ed13c9f9f55",
"body": null,
"is_bot": true,
"headline": "v18.0.2",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-03-19T15:55:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b6d5c0e099a75e738267c8a612cfe4402953241",
"body": "Update alpine Docker tag to v3.21",
"is_bot": true,
"headline": "Merge pull request #301 from balena-io-modules/renovate/alpine-3.x",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2025-03-19T15:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61081cd3caab334a91a09822144fe4a5be3a47ca",
"body": "Update alpine from 3.12 to 3.21\n\nChange-type: patch",
"is_bot": true,
"headline": "Update alpine Docker tag to v3.21",
"author_name": "balena-renovate[bot]",
"author_login": "balena-renovate[bot]",
"committed_at": "2025-03-19T15:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cd5fd731c8186b47e8a16a47ac0e87502f499a7",
"body": null,
"is_bot": true,
"headline": "v18.0.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-03-04T18:41:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b427acb7984ae2bbaa0676363db4c44c5728141",
"body": "HOTFIX: Fix balena-sdk major bump",
"is_bot": true,
"headline": "Merge pull request #300 from balena-io-modules/fix-sdk-major-bump",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-03-04T18:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03f57f55472f147388756855b0a8fb423fd94d2b",
"body": "Change-type: patch",
"is_bot": false,
"headline": "HOTFIX: Fix balena-sdk major bump",
"author_name": "myarmolinsky",
"author_login": "myarmolinsky",
"committed_at": "2025-03-04T18:25:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "965b80124a1f5e2285e611e633e1a0febd15c8c9",
"body": null,
"is_bot": true,
"headline": "v18.0.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-03-04T15:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b662909cce37f5d13dc2c29e760304c8ae7c7af6",
"body": "MAJOR: Update `balena-sdk` to v21",
"is_bot": true,
"headline": "Merge pull request #299 from balena-io-modules/update-balena-sdk-21",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-03-04T15:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "639fbf09a63414eeceaa3e678a79c31ebb9fa285",
"body": "Change-type: major",
"is_bot": false,
"headline": "Replace use of `contains__image` with `release_image`",
"author_name": "myarmolinsky",
"author_login": "myarmolinsky",
"committed_at": "2025-03-04T15:46:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0110c380b87c6a493b9cd722e2cf7644a596b15d",
"body": "Change-type: major",
"is_bot": false,
"headline": "Update minimum required node version to 20.12.0",
"author_name": "myarmolinsky",
"author_login": "myarmolinsky",
"committed_at": "2025-03-04T15:46:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c9723027dfa8c74150edf57b9651390bcd2e7cb",
"body": "Change-type: major",
"is_bot": false,
"headline": "Update `balena-sdk` to v21.2.0",
"author_name": "myarmolinsky",
"author_login": "myarmolinsky",
"committed_at": "2025-03-04T14:32:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc815602368854ee6a03c90d2fc490a995aee2c4",
"body": null,
"is_bot": true,
"headline": "v17.0.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-10-21T16:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e61befd719bb6b6051c42a34ecb135476036a22",
"body": "Drop bluebird",
"is_bot": false,
"headline": "Merge pull request #298 from balena-io-modules/drop-bluebird",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-10-21T16:19:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67f0f3e9e3b4b37fbaeef2843dc4171a7d661c41",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Improve typings",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-10-21T16:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85375cbc1fdb0ce1ad08756f178ed55596e606d9",
"body": "Change-type: major",
"is_bot": false,
"headline": "Stop returning Bluebird promises & drop it from the dependencies",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-10-21T16:14:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49d4a99cdcd04225911b4572d3684b071f9e5133",
"body": null,
"is_bot": true,
"headline": "v16.0.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-09-17T16:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a66691aeffba2a976334fb694a6783c84dad80d4",
"body": "Api v7",
"is_bot": true,
"headline": "Merge pull request #297 from balena-io-modules/api-v7",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-09-17T16:58:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0206466d090c8b4a8e741ccffbccbad0ad20c29",
"body": "Change-type: major",
"is_bot": false,
"headline": "Update `balena-sdk` to 20.1.3 and API v7",
"author_name": "myarmolinsky",
"author_login": "myarmolinsky",
"committed_at": "2024-09-17T16:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1409bcdbd78903ad4dd50095dedc44dc4e21a93c",
"body": null,
"is_bot": true,
"headline": "v15.0.6",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-07-12T14:09:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a18a4b6001a5f842eec4de4ff4c8bf77f88c4f9",
"body": "Use the sdk instead of `request` for registry requests",
"is_bot": false,
"headline": "Merge pull request #295 from balena-io-modules/drop-request",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-07-12T14:08:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cc71b2246ed89675c7608df6f0806497caf556a",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Reuse the registryRequest helper for all registry requests",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-07-12T10:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "147f0c9cd518d01d0d586d372985704521299afe",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Improve the typings for the registry requests",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-07-12T10:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "494b2457982d9af942085b681c1199ce40872353",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Use the sdk instead of `request` for registry requests",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-07-12T10:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d010ff4b4022f352ea9928b610253e0276016f5b",
"body": "Update balena-sdk from 19.0.1 to 19.7.2\n\nChange-type: patch",
"is_bot": false,
"headline": "Update balena-sdk from 19.0.1 to 19.7.2",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-07-12T10:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d36b5afba626b7851a66b6b9d2daec8194f523",
"body": null,
"is_bot": true,
"headline": "v15.0.5",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-04-09T15:24:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23432c4d12e05a1b3b0c9f0188e8a0c551261b5f",
"body": "…cies\n\nRemove unused dependencies",
"is_bot": true,
"headline": "Merge pull request #292 from balena-io-modules/remove-unused-dependen…",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-04-09T15:23:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "429315f21df769a3408610cdcacfa3a02ac3edc1",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Remove unused dependencies",
"author_name": "Otavio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2024-04-09T14:29:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb30c819d9dca31c2e3d2a7398033bbf64b18a30",
"body": null,
"is_bot": true,
"headline": "v15.0.4",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-04-09T12:05:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95bbe125ef2ff483642a063d2099af154413627d",
"body": "Remove unused resin-cli-visuals dependency",
"is_bot": false,
"headline": "Merge pull request #290 from balena-io-modules/remove-unused-cli-visuals",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-04-09T12:04:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20bd6818f90141ac80d888a338b6326eea528ec0",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Remove unused resin-cli-visuals dependency",
"author_name": "Otavio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2024-04-09T12:00:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5293b9fec9ce6d7cc557f7f89641dc0f02667b4b",
"body": null,
"is_bot": true,
"headline": "v15.0.3",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-04-09T11:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43a16d697d8705546b6c5d9a41dcd5bcec2b20b0",
"body": "Update resin-cli-visuals to v2",
"is_bot": false,
"headline": "Merge pull request #289 from balena-io-modules/etcher-sdk-9",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-04-09T11:49:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0064ac206ffb8e7db103e11806c4f2ee53b67649",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Update resin-cli-visuals to v2",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2024-04-08T18:05:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85e318915289b3ba565221b255f901948c216b3e",
"body": null,
"is_bot": true,
"headline": "v15.0.2",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-02-13T13:26:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18d9ae98cb71c19cfb458e20dd9b7c5b7d023c17",
"body": "Upgrade dockerode to v4.0.2",
"is_bot": true,
"headline": "Merge pull request #288 from balena-io-modules/upgrade-dockerode",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2024-02-13T13:25:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "502c7309af91bc1190b891c99590913c852d4a04",
"body": "Signed-off-by: Ken Bannister <kb2ma@runbox.com>",
"is_bot": false,
"headline": "Upgrade dockerode dependency",
"author_name": "Ken Bannister",
"author_login": "kb2ma",
"committed_at": "2024-01-31T23:12:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "047edfe685c73bddbcf3551a34e7a83ecae341e1",
"body": "Change-type: patch\nSigned-off-by: Ken Bannister <kb2ma@runbox.com>",
"is_bot": false,
"headline": "Update to eslint based linter",
"author_name": "Ken Bannister",
"author_login": "kb2ma",
"committed_at": "2024-01-31T23:11:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0baab90cd46574f8f93801245364c1eb47a9310",
"body": null,
"is_bot": true,
"headline": "v15.0.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2023-10-26T17:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4631cf5ac78ff6b18c60c9cb7385bac0d647d344",
"body": "Update balena-sdk to 19.0.1",
"is_bot": false,
"headline": "Merge pull request #287 from balena-io-modules/bump-balena-sdk",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-10-26T17:01:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "469e95af6c11541a994cd60ec6189dea30568332",
"body": "Update balena-sdk from 18.0.0 to 19.0.1\nChange-type: patch",
"is_bot": false,
"headline": "Update balena-sdk to 19.0.1",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-10-26T16:56:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffc3235165d35ece09785f1280c64679a3f2cf8e",
"body": null,
"is_bot": true,
"headline": "v15.0.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2023-10-26T16:35:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f3bae874e04bdf254ade6575b8a2a87971362d0",
"body": "Drop support for Node.js v16",
"is_bot": false,
"headline": "Merge pull request #286 from balena-io-modules/drop-node-16",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-10-26T16:35:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec2dd2b5be4ff921017e072d65d8aada31fc5caa",
"body": "Change-type: major",
"is_bot": false,
"headline": "Drop support for Node.js v16",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-10-26T16:28:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcaeb6e36398364075c36cd21e016f55c76ea2e5",
"body": null,
"is_bot": true,
"headline": "v14.0.3",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2023-09-25T10:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "213f388f6cca653381cd22e4c0db5efecd219ee1",
"body": "Fix preload with commit hash",
"is_bot": false,
"headline": "Merge pull request #285 from balena-io-modules/fix-preload-with-commit",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-09-25T10:48:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c9da970c63b67a8469843c2c4f940dee4f832ec",
"body": "Change-type: patch\nSee: https://github.com/balena-io/balena-cli/issues/2677",
"is_bot": false,
"headline": "Fix preload with commit hash",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-09-24T19:54:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d504ec8e88b8becf38b8374bbaec247a65075e04",
"body": null,
"is_bot": true,
"headline": "v14.0.2",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2023-08-21T20:46:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f92f8e3c593f4077a4ed8550a24535e7c5557b1",
"body": "Update to balena-sdk 18.0.0",
"is_bot": false,
"headline": "Merge pull request #284 from balena-io-modules/update-balena-sdk-to-18",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-08-21T20:45:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3b7e66b350ff65f3a3e42ce7d681f1c454c0c0f",
"body": "Update balena-sdk from 17.0.0 to 18.0.0\nChange-type: patch",
"is_bot": false,
"headline": "Update to balena-sdk 18.0.0",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-08-21T20:33:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e677393938980e5414150cfa5b35d34cd882a365",
"body": null,
"is_bot": true,
"headline": "v14.0.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2023-08-02T12:13:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc334d46ca19a6acc1a93809034f9409465181dc",
"body": "…pi-for-preloading\n\nUse SDK getSupervisorTargetStateForApp when getting supervisor state",
"is_bot": false,
"headline": "Merge pull request #283 from balena-io-modules/oj/uses-target-state-a…",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-08-02T12:12:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e25beb4bc924b4f6c0008bc1f6570e8e07bc41d",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Use SDK getSupervisorTargetStateForApp when getting supervisor state",
"author_name": "Otávio Jacobi",
"author_login": "otaviojacobi",
"committed_at": "2023-07-25T17:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59c88ab36a12fed0b9afbef1d2fdfd8a31016953",
"body": null,
"is_bot": false,
"headline": "v14.0.0",
"author_name": "Balena CI",
"author_login": "balena-ci",
"committed_at": "2023-05-23T10:00:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9809d7eb7d9cbf8018642669ae3ee9191191e19",
"body": "Drop support for Node.js v12 & update to balena-sdk 17.0.0",
"is_bot": false,
"headline": "Merge pull request #282 from balena-io-modules/sdk-v17",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T10:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98a0b5174457239ee2b0b3270d4089ceb5c6878d",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Improve typings & source type safety",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94773c38f7d4bcb83c9573e82fab6562d86b11c7",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Update dev dependencies",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6a4fd04c6c1b9169aaa3d0aeeb94b7fd72c417d",
"body": "Update to balena-sdk from 16.8.0 to 17.0.0\n\nChange-type: major",
"is_bot": false,
"headline": "Update to balena-sdk 17.0.0",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c3a23146af6fb688331b962f94cf6cf01942734",
"body": "Change-type: minor",
"is_bot": false,
"headline": "Emit type declaration files",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e7cd01a9f6fa959e5ae867615f627ab018f2945",
"body": "Change-type: major",
"is_bot": false,
"headline": "Switch to es6 module exports",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "932dc7b4f75ee528fe7ceb632a7a443c90a58076",
"body": "Change-type: major",
"is_bot": false,
"headline": "Require es2019 capable runtime",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02088fbb87d36cc674ae425e7fdc8defa1334cf3",
"body": "Change-type: major",
"is_bot": false,
"headline": "Drop support for Node.js v12 & v14",
"author_name": "Thodoris Greasidis",
"author_login": "thgreasi",
"committed_at": "2023-05-23T07:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d5c77a4668b688dd21e9d7aec7c333943680adb",
"body": null,
"is_bot": false,
"headline": "v13.0.0",
"author_name": "Balena CI",
"author_login": "balena-ci",
"committed_at": "2022-12-22T13:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bc240be50916893033b2d0b75c6d6493b004b77",
"body": "major: removes Edison DT code",
"is_bot": false,
"headline": "Merge pull request #280 from balena-io-modules/aethernet/removeEdison",
"author_name": "Edwin Joassart",
"author_login": "aethernet",
"committed_at": "2022-12-22T13:14:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee1a63f5d586be8c8c46d2b45d3219dfb300a1d",
"body": null,
"is_bot": false,
"headline": "major: removes Edison DT code",
"author_name": "JOASSART Edwin",
"author_login": null,
"committed_at": "2022-12-22T10:52:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b8d1d42b82790e70533142d53be2cc999c72fa2",
"body": null,
"is_bot": false,
"headline": "v12.3.0",
"author_name": "Balena CI",
"author_login": "balena-ci",
"committed_at": "2022-12-22T10:45:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "192b3de8f7bba071eb618b5e5423851d72755841",
"body": "minor: build for every major node version >=12",
"is_bot": false,
"headline": "Merge pull request #279 from balena-io-modules/aethernet-node12+",
"author_name": "Edwin Joassart",
"author_login": "aethernet",
"committed_at": "2022-12-22T10:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec4b7dd6064d2719d4f1753f5c4ecf57a6c20196",
"body": null,
"is_bot": false,
"headline": "minor: build for every major node version >=12",
"author_name": "Edwin Joassart",
"author_login": "aethernet",
"committed_at": "2022-12-19T10:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71067db011fb4f6f3a20fa47d135749d9c20bb6a",
"body": null,
"is_bot": false,
"headline": "v12.2.0",
"author_name": "Balena CI",
"author_login": "balena-ci",
"committed_at": "2022-12-12T12:00:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c330ff9cfad087a334720d06248ec6009d58174",
"body": "fix stdin with docker 20.10.17",
"is_bot": false,
"headline": "Merge pull request #277 from balena-io-modules/aethernet/fixstdin",
"author_name": "Edwin Joassart",
"author_login": "aethernet",
"committed_at": "2022-12-12T11:58:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6329cb3bc04ece7af043ae1f3ffdd5b20bf27a8",
"body": null,
"is_bot": false,
"headline": "fix typo",
"author_name": "Edwin Joassart",
"author_login": "aethernet",
"committed_at": "2022-12-12T11:31:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89e7647803dcc5c8a47fc707d80596fc7748cc27",
"body": null,
"is_bot": false,
"headline": "fix spacings",
"author_name": "Edwin Joassart",
"author_login": "aethernet",
"committed_at": "2022-12-12T11:31:00Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 19,
"commits_last_year": 22,
"latest_release_at": "2026-06-10T02:47:54Z",
"latest_release_tag": "v19.0.5",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 6,
"days_since_latest_release": 42,
"mean_days_between_releases": 49.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "balena-preload",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"balena",
"balenaos",
"image",
"docker",
"container"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/balena-preload",
"is_deprecated": false,
"latest_version": "19.0.5",
"repository_url": "https://github.com/balena-io-modules/balena-preload",
"versions_count": 301,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 8044,
"first_published_at": "2018-10-15T14:04:44.905000Z",
"latest_published_at": "2026-06-10T02:48:18.526000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 42
}
]
},
"popularity": {
"forks": 6,
"stars": 37,
"watchers": 12,
"fork_history": {
"days": [
{
"date": "2015-10-05",
"count": 1
},
{
"date": "2016-11-13",
"count": 1
},
{
"date": "2017-03-31",
"count": 1
},
{
"date": "2017-06-20",
"count": 1
},
{
"date": "2022-09-08",
"count": 1
},
{
"date": "2022-12-01",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 26
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 33171,
"source_files_sampled": 2,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json",
"requirements.txt"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "uuid",
"direct": false,
"version": "10.0.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 91
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 183,
"malicious_count": 0,
"assessed_package": "npm:balena-preload@19.0.5",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "balena-sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^23.0.0"
},
{
"name": "compare-versions",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "docker-progress",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.0"
},
{
"name": "dockerode",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.2"
},
{
"name": "get-port",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.2.0"
},
{
"name": "lodash",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.17.21"
},
{
"name": "node-cleanup",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.2"
},
{
"name": "tar-fs",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "balena-sdk",
"direct": true,
"version": "^23.0.0",
"ecosystem": "npm"
},
{
"name": "compare-versions",
"direct": true,
"version": "^4.0.0",
"ecosystem": "npm"
},
{
"name": "docker-progress",
"direct": true,
"version": "^5.0.0",
"ecosystem": "npm"
},
{
"name": "dockerode",
"direct": true,
"version": "^4.0.2",
"ecosystem": "npm"
},
{
"name": "get-port",
"direct": true,
"version": "^3.2.0",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": true,
"version": "^4.17.21",
"ecosystem": "npm"
},
{
"name": "node-cleanup",
"direct": true,
"version": "^2.1.2",
"ecosystem": "npm"
},
{
"name": "tar-fs",
"direct": true,
"version": "^2.1.1",
"ecosystem": "npm"
},
{
"name": "@balena/lint",
"direct": false,
"version": "^7.2.6",
"ecosystem": "npm"
},
{
"name": "@types/dockerode",
"direct": false,
"version": "^3.3.23",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^20.17.22",
"ecosystem": "npm"
},
{
"name": "@types/request-promise",
"direct": false,
"version": "^4.1.48",
"ecosystem": "npm"
},
{
"name": "@types/tar-fs",
"direct": false,
"version": "^2.0.1",
"ecosystem": "npm"
},
{
"name": "catch-uncommitted",
"direct": false,
"version": "^2.0.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^5.6.2",
"ecosystem": "npm"
},
{
"name": "retry",
"direct": false,
"version": "0.9.2",
"ecosystem": "pypi"
},
{
"name": "sh",
"direct": false,
"version": "1.14.3",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 17,
"direct_count": 8,
"indirect_count": 9
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 171,
"open_issues": 18,
"closed_ratio": 0.851,
"closed_issues": 103,
"closed_unmerged_prs": 20
},
"bus_factor": 3,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "zvin",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/180331?v=4"
},
{
"type": "User",
"login": "balena-ci",
"commits": 62,
"avatar_url": "https://avatars.githubusercontent.com/u/34882892?v=4"
},
{
"type": "User",
"login": "jhermsmeier",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/244907?v=4"
},
{
"type": "User",
"login": "thgreasi",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/1295829?v=4"
},
{
"type": "User",
"login": "abresas",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/938774?v=4"
},
{
"type": "User",
"login": "Page-",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/360115?v=4"
},
{
"type": "User",
"login": "pdcastro",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/15091591?v=4"
},
{
"type": "User",
"login": "otaviojacobi",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/14330369?v=4"
},
{
"type": "User",
"login": "klutchell",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/20458272?v=4"
},
{
"type": "User",
"login": "aethernet",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/447631?v=4"
}
],
"contributors_sampled": 24,
"top_contributor_share": 0.28
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"flowzone.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 7,
"reason": "7 out of 9 merged PRs checked by a CI test -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 4/18 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 12 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 8,
"reason": "SAST tool is not run on all commits -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f5581e859eae28522d796245ae4d2ab95c2d023c",
"ran_at": "2026-07-23T01:33:16Z",
"aggregate_score": 5.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T09:46:16Z",
"oldest_open_prs": [
{
"number": 242,
"created_at": "2021-05-07T12:20:21Z",
"last_comment_at": "2021-06-02T18:46:00Z",
"last_comment_author": "alexgg"
},
{
"number": 252,
"created_at": "2021-07-22T17:52:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 261,
"created_at": "2021-07-23T16:36:02Z",
"last_comment_at": "2021-07-26T19:12:55Z",
"last_comment_author": "jakogut"
},
{
"number": 312,
"created_at": "2026-04-03T14:56:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 315,
"created_at": "2026-05-12T17:31:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 316,
"created_at": "2026-05-12T18:25:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 319,
"created_at": "2026-06-10T04:09:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 321,
"created_at": "2026-07-17T19:09:08Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-10T02:46:39Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 36,
"created_at": "2017-03-23T18:28:02Z",
"last_comment_at": "2017-04-17T22:19:21Z",
"last_comment_author": "zain"
},
{
"number": 38,
"created_at": "2017-04-17T20:14:20Z",
"last_comment_at": "2017-07-26T10:30:52Z",
"last_comment_author": "zvin"
},
{
"number": 52,
"created_at": "2017-06-20T05:49:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 114,
"created_at": "2017-09-22T13:42:14Z",
"last_comment_at": "2017-10-31T11:46:36Z",
"last_comment_author": "zvin"
},
{
"number": 115,
"created_at": "2017-09-25T15:28:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 156,
"created_at": "2018-02-05T17:03:07Z",
"last_comment_at": "2021-07-27T15:11:18Z",
"last_comment_author": "klutchell"
},
{
"number": 193,
"created_at": "2018-12-13T10:35:15Z",
"last_comment_at": "2019-12-18T12:07:47Z",
"last_comment_author": "tafli"
},
{
"number": 196,
"created_at": "2019-01-28T17:31:38Z",
"last_comment_at": "2021-11-04T18:35:49Z",
"last_comment_author": "cywang117"
},
{
"number": 208,
"created_at": "2019-06-14T15:40:49Z",
"last_comment_at": "2019-06-20T13:55:51Z",
"last_comment_author": "pdcastro"
},
{
"number": 211,
"created_at": "2019-10-01T11:52:43Z",
"last_comment_at": "2019-10-01T17:39:12Z",
"last_comment_author": "mexekanez"
},
{
"number": 217,
"created_at": "2020-06-10T14:19:05Z",
"last_comment_at": "2020-06-10T14:20:32Z",
"last_comment_author": "jellyfish-bot"
},
{
"number": 224,
"created_at": "2020-07-21T11:47:18Z",
"last_comment_at": "2020-07-21T11:48:06Z",
"last_comment_author": "jellyfish-bot"
},
{
"number": 245,
"created_at": "2021-05-25T13:10:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 264,
"created_at": "2021-07-30T13:28:49Z",
"last_comment_at": "2021-08-19T11:49:19Z",
"last_comment_author": "klutchell"
},
{
"number": 265,
"created_at": "2021-09-02T13:13:48Z",
"last_comment_at": "2022-01-27T13:15:08Z",
"last_comment_author": "klutchell"
},
{
"number": 267,
"created_at": "2021-11-23T04:09:44Z",
"last_comment_at": "2021-11-23T18:36:36Z",
"last_comment_author": "klutchell"
},
{
"number": 270,
"created_at": "2022-02-22T16:44:51Z",
"last_comment_at": "2022-02-22T16:55:37Z",
"last_comment_author": "jellyfish-bot"
},
{
"number": 304,
"created_at": "2025-03-19T15:51:05Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/balena-io-modules/balena-preload",
"host": "github.com",
"name": "balena-preload",
"owner": "balena-io-modules"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 58,
"vitality": 70,
"community": 49,
"governance": 78,
"engineering": 52
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 22,
"human_commit_share": 0.58,
"days_since_last_push": 1,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "22 commits in the last year",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 22
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"releases_count": 19,
"latest_release_tag": "v19.0.5",
"releases_from_tags": false,
"days_since_latest_release": 42,
"mean_days_between_releases": 49.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "19 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 19
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 42 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 42
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~49.7 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 49.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 43,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 43 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 43
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 49,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"forks": 6,
"stars": 37,
"watchers": 12,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "37 stars",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 37
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "12 watchers",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 12
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 65,
"inputs": {
"packages": [
"balena-preload"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 8044
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "8,044 downloads/month across npm",
"points": 52.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 8044,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 78,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 24,
"top_contributor_share": 0.28
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "24 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 24
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 12 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"merged_prs": 171,
"open_issues": 18,
"closed_issues": 103,
"issue_closed_ratio": 0.851,
"closed_unmerged_prs": 20
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "85% of issues closed",
"points": 39.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 85
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "171/191 decided PRs merged",
"points": 34.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 171,
"decided": 191
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/18 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 15,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "balena-io-modules",
"public_repos": 298,
"account_age_days": 3788
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of balena-io-modules",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "balena-io-modules"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "298 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 298
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"balena-preload"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 42
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 42 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 42
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "301 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 301
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 52,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 9 merged PRs checked by a CI test -- score normalized to 7",
"points": 14,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://www.balena.io/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.balena.io/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 58,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 53,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 9 merged PRs checked by a CI test -- score normalized to 7",
"points": 1.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/18 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 12 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "good",
"name": "Dependency advisories",
"note": "Matched the npm:balena-preload@19.0.5 runtime dependency closure — what installing the published package pulls in — 183 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:balena-preload@19.0.5",
"assessed": 183
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 79,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 183,
"unassessed_packages": 0,
"affected_by_severity": "high 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "1 affected: uuid 10.0.0 (high 7.5)",
"points": 10,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "uuid 10.0.0 (high 7.5)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 91 days ago",
"points": 33.7,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 183,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 35,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.328,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "19 of 58 human commits state their intent (structured subject or explanatory body)",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 19,
"sampled": 58
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 33171,
"source_files_sampled": 2,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/2 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 2,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-23T01:33:37.596320Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/balena-io-modules/balena-preload.svg",
"full_name": "balena-io-modules/balena-preload",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — npm.