cloudfoundry / system-metrics-release

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

Кожна точка охоплює 4 днів.

Повний розв'язаний набір залежностей із графа залежностей GitHub: 10 прямих і 54 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 64 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 7 мають відомі сповіщення, з них 1 прямі.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 13778,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 149983,
        "HTML": 1891,
        "Ruby": 4659,
        "Shell": 3805,
        "PowerShell": 329
      },
      "pushed_at": "2026-07-27T19:09:12Z",
      "created_at": "2019-09-17T17:40:08Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-27T19:09:22Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.cloudfoundry.org/",
      "name": "Cloud Foundry",
      "type": "Organization",
      "login": "cloudfoundry",
      "company": null,
      "location": "Worldwide",
      "followers": 743,
      "avatar_url": "https://avatars.githubusercontent.com/u/621746?v=4",
      "created_at": "2011-02-16T18:31:25Z",
      "is_verified": null,
      "public_repos": 571,
      "account_age_days": 5640
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.0.29",
          "kind": "patch",
          "published_at": "2026-07-27T19:11:27Z"
        },
        {
          "tag": "v3.0.28",
          "kind": "patch",
          "published_at": "2026-07-15T21:20:31Z"
        },
        {
          "tag": "v3.0.27",
          "kind": "patch",
          "published_at": "2026-07-08T21:36:24Z"
        },
        {
          "tag": "v3.0.26",
          "kind": "patch",
          "published_at": "2026-07-08T21:30:39Z"
        },
        {
          "tag": "v3.0.25",
          "kind": "patch",
          "published_at": "2026-07-07T01:45:47Z"
        },
        {
          "tag": "v3.0.24",
          "kind": "patch",
          "published_at": "2026-06-06T19:08:09Z"
        },
        {
          "tag": "v3.0.23",
          "kind": "patch",
          "published_at": "2026-06-02T02:49:05Z"
        },
        {
          "tag": "v3.0.22",
          "kind": "patch",
          "published_at": "2026-06-01T18:46:19Z"
        },
        {
          "tag": "v3.0.20",
          "kind": "patch",
          "published_at": "2026-05-06T00:02:06Z"
        },
        {
          "tag": "v3.0.19",
          "kind": "patch",
          "published_at": "2026-05-02T18:48:11Z"
        },
        {
          "tag": "v3.0.18",
          "kind": "patch",
          "published_at": "2026-04-02T18:37:21Z"
        },
        {
          "tag": "v3.0.17",
          "kind": "patch",
          "published_at": "2026-02-13T07:37:06Z"
        },
        {
          "tag": "v3.0.16",
          "kind": "patch",
          "published_at": "2025-12-22T23:10:00Z"
        },
        {
          "tag": "v3.0.15",
          "kind": "patch",
          "published_at": "2025-09-23T01:38:01Z"
        },
        {
          "tag": "v3.0.13",
          "kind": "patch",
          "published_at": "2025-04-08T21:06:59Z"
        },
        {
          "tag": "v3.0.12",
          "kind": "patch",
          "published_at": "2025-02-25T23:00:20Z"
        },
        {
          "tag": "v3.0.11",
          "kind": "patch",
          "published_at": "2025-01-07T01:17:07Z"
        },
        {
          "tag": "v3.0.10",
          "kind": "patch",
          "published_at": "2024-12-12T18:17:12Z"
        },
        {
          "tag": "v3.0.9",
          "kind": "patch",
          "published_at": "2024-11-19T00:10:10Z"
        },
        {
          "tag": "v3.0.8",
          "kind": "patch",
          "published_at": "2024-08-01T00:08:54Z"
        },
        {
          "tag": "v3.0.7",
          "kind": "patch",
          "published_at": "2024-04-10T16:36:39Z"
        },
        {
          "tag": "v3.0.6",
          "kind": "patch",
          "published_at": "2024-03-13T20:42:47Z"
        },
        {
          "tag": "v3.0.5",
          "kind": "patch",
          "published_at": "2024-01-30T18:27:33Z"
        },
        {
          "tag": "v3.0.4",
          "kind": "patch",
          "published_at": "2023-12-06T00:58:17Z"
        },
        {
          "tag": "v3.0.3",
          "kind": "patch",
          "published_at": "2023-11-14T21:35:26Z"
        },
        {
          "tag": "v3.0.2",
          "kind": "patch",
          "published_at": "2023-10-30T18:03:03Z"
        },
        {
          "tag": "v3.0.1",
          "kind": "patch",
          "published_at": "2023-09-09T00:22:10Z"
        },
        {
          "tag": "v3.0.0",
          "kind": "major",
          "published_at": "2023-08-23T20:35:53Z"
        },
        {
          "tag": "v2.3.3",
          "kind": "patch",
          "published_at": "2023-07-13T17:56:35Z"
        },
        {
          "tag": "v2.3.2",
          "kind": "patch",
          "published_at": "2023-06-20T20:59:49Z"
        },
        {
          "tag": "v2.3.1",
          "kind": "patch",
          "published_at": "2023-05-02T21:00:33Z"
        },
        {
          "tag": "v2.3.0",
          "kind": "minor",
          "published_at": "2023-03-03T21:30:40Z"
        },
        {
          "tag": "v2.2.7",
          "kind": "patch",
          "published_at": "2023-02-15T19:48:18Z"
        },
        {
          "tag": "v2.2.6",
          "kind": "patch",
          "published_at": "2023-02-09T18:42:09Z"
        },
        {
          "tag": "v2.2.5",
          "kind": "patch",
          "published_at": "2023-01-30T18:41:32Z"
        },
        {
          "tag": "v2.2.4",
          "kind": "patch",
          "published_at": "2022-12-15T17:25:23Z"
        },
        {
          "tag": "v2.2.3",
          "kind": "patch",
          "published_at": "2022-12-07T23:14:58Z"
        },
        {
          "tag": "v2.2.2",
          "kind": "patch",
          "published_at": "2022-11-01T21:29:39Z"
        },
        {
          "tag": "v2.2.1",
          "kind": "patch",
          "published_at": "2022-10-19T19:45:48Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2022-09-08T14:31:30Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2022-08-08T17:55:04Z"
        },
        {
          "tag": "v2.0.18",
          "kind": "patch",
          "published_at": "2022-07-14T22:36:13Z"
        },
        {
          "tag": "v2.0.17",
          "kind": "patch",
          "published_at": "2022-05-24T17:08:31Z"
        },
        {
          "tag": "v2.0.16",
          "kind": "patch",
          "published_at": "2022-05-19T22:55:14Z"
        },
        {
          "tag": "v2.0.15",
          "kind": "patch",
          "published_at": "2022-05-19T22:53:17Z"
        },
        {
          "tag": "v2.0.14",
          "kind": "patch",
          "published_at": "2022-04-14T17:25:31Z"
        },
        {
          "tag": "v2.0.13",
          "kind": "patch",
          "published_at": "2021-12-10T16:28:37Z"
        },
        {
          "tag": "v2.0.12",
          "kind": "patch",
          "published_at": "2021-05-18T17:34:56Z"
        },
        {
          "tag": "v2.0.11",
          "kind": "patch",
          "published_at": "2020-01-27T15:04:10Z"
        },
        {
          "tag": "v2.0.10",
          "kind": "patch",
          "published_at": "2020-01-20T15:03:06Z"
        },
        {
          "tag": "v2.0.9",
          "kind": "patch",
          "published_at": "2020-01-13T15:02:33Z"
        },
        {
          "tag": "v2.0.8",
          "kind": "patch",
          "published_at": "2020-01-06T15:02:56Z"
        },
        {
          "tag": "v2.0.7",
          "kind": "patch",
          "published_at": "2019-12-30T15:03:07Z"
        },
        {
          "tag": "v2.0.6",
          "kind": "patch",
          "published_at": "2019-12-16T15:02:23Z"
        },
        {
          "tag": "v2.0.5",
          "kind": "patch",
          "published_at": "2019-12-09T19:27:14Z"
        },
        {
          "tag": "v2.0.4",
          "kind": "patch",
          "published_at": "2019-12-05T22:46:02Z"
        },
        {
          "tag": "v2.0.3",
          "kind": "patch",
          "published_at": "2019-12-05T22:44:30Z"
        },
        {
          "tag": "v2.0.2",
          "kind": "patch",
          "published_at": "2019-12-02T15:02:38Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2019-11-25T15:02:11Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2019-11-21T22:04:22Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2019-10-21T22:32:03Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2019-09-30T16:10:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "022c5170f2b71782759f2e89f7b072294851e7f0",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-27T19:08:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8047e413a0cf2fcda7c8a631f91fa5146fe454a8",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-27T19:07:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90460c3300744764e1c2e5670f1b1dbf78f869f6",
          "body": "Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.23.2 to 1.24.1.\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md)\n- [Commits](https://github.com/\n[…]\nithub.com/prometheus/client_golang\n  dependency-version: 1.24.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T22:16:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51c5412ced39fe07762369b4a060e37eaab17113",
          "body": "Also inserts to registry for testing.",
          "is_bot": false,
          "headline": "Test metric content instead of string representation",
          "author_name": "Joris Baum",
          "author_login": "jorbaum",
          "committed_at": "2026-07-24T12:55:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a96562d0faf1eca74e5138c0beaeca5008fc4d41",
          "body": "Because of the BPM changes that removed ctl.erb, when the ctl.erb file was remade, it didn't include the clock_drift_enabled parameter (see: https://github.com/cloudfoundry/system-metrics-release/pull/321/changes#r3581015436).\n\nThis fix allows system metrics to correctly read clock_drift_enabled via ctl.erb and adds true/false unit tests.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Update ctl.erb to include clock_drift_enabled and add unit tests",
          "author_name": "Allan Yu",
          "author_login": "ay901246",
          "committed_at": "2026-07-24T07:48:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6022cb0917509847e1fd6f089bdd95172aca6ffb",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/setup-go from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T08:25:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6686b89bb843d5b235adff1b128c392698795ff",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-15T21:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4350fea8fcb23181110bc07e27d2027ddcb98d26",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-15T21:16:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1e0d814fc40cae70e84dd9caff26c017b78465d",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.61.0 to 0.62.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.61.0...v0.62.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.62.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.61.0 to 0.62.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T11:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43d0a1f599e00acd11e7475da72033095d7450c1",
          "body": "When system-metrics-release is deployed as an add on requiring bpm is\nproblematic as the version of bpm in the add on must exactly match the version\nin the deployment manifest. Making it optional for now, allowing for a\ntransition period.",
          "is_bot": false,
          "headline": "make bpm optional",
          "author_name": "Matthew Kocher",
          "author_login": "mkocher",
          "committed_at": "2026-07-15T11:06:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f71183697c63998cbca145d6a5fe820970d40989",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: add clock drift metrics documentation and clean up comments",
          "author_name": "ay901246",
          "author_login": "ay901246",
          "committed_at": "2026-07-10T15:26:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7e3ffe58fbfd93d583dac1c3e8912bba34cdb29a",
          "body": "Adds explicit integration test coverage for the new CLOCK_DRIFT_ENABLED\nenvironment variable:\n- \"omits clock drift metrics by default (opt-in behavior)\": verifies\n  that a default agent (without the env var set) does not emit any\n  clock_drift_* series.\n- \"when CLOCK_DRIFT_ENABLED is true\": verifies\n[…]\nzation and out to the /metrics endpoint.\n\nAlso removes commented-out chrony-internal smoothing metrics from the\ncodebase to address PR review feedback.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "test: verify clock drift opt-in behavior in integration test",
          "author_name": "ay901246",
          "author_login": "ay901246",
          "committed_at": "2026-07-10T15:26:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "029fa526b4e1d2236e674cc77280c5dbddb4d67b",
          "body": "Clock drift metrics are now disabled by default so existing deployments\nare unaffected. Enable the feature by setting the new BOSH property:\n\n  clock_drift_enabled: true   # on loggr-system-metrics-agent\n\nWhen false (the default), main.go calls collector.WithoutClockSource()\nbefore constructing the \n[…]\nk drift stays at the same 15s\ncadence as all other system metrics, and a lost-sync event surfaces\nwithin one tick rather than up to five minutes later.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat: add clock_drift_enabled BOSH property (opt-in, default false)",
          "author_name": "ay901246",
          "author_login": "ay901246",
          "committed_at": "2026-07-10T15:26:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6b5b6717b5e1b1c623f44dea7b0b5fae091d18b4",
          "body": "chronyc tracking prints the NTP peer's Reference ID as a bare 8-digit\nhex value (e.g. 49B9B6D1) even when the parenthesised host field is\nmissing or unresolvable. That value is used as the reference_id label\non the clock_drift_reference_info gauge, making it opaque to auditors\nand operators who need\n[…]\nt strings (e.g. test stubs like \"REF1\") are passed through\nunchanged, so existing tests required no structural changes beyond\nupdating expected values.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix: decode Reference ID hex string to human-readable IP or ASCII",
          "author_name": "ay901246",
          "author_login": "ay901246",
          "committed_at": "2026-07-10T15:26:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2c8bcc333b5e1fbd903570322de11299dd170c06",
          "body": "Regulated financial customers must satisfy PCI-DSS 10.6:\n\"Time-synchronization mechanisms support consistent time settings across\nall systems.\" Today they rely on a community BOSH addon\n(cfkubo/chrony-tracking) wrapping cron-boshrelease, which breaks on\nhardware refreshes and is unsupported. This ch\n[…]\neus sender tests cover NaN suppression, nil-pointer\nsuppression, leap-status one-hot encoding, reference-info cardinality,\nand the limitedMetrics gate.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Add clock drift monitoring for PCI-DSS 10.6 audit evidence",
          "author_name": "ay901246",
          "author_login": "ay901246",
          "committed_at": "2026-07-10T15:26:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0d219c820db2b0e4ff7f5db1b818ceee5c8266b4",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-08T21:34:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80e3f3cc0534edc3c75bf1d4edb4d3f580119e7a",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-08T21:33:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2034b43027b6db5c6b2e6b14fd6eda6be183c8ca",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-08T21:27:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce50f2e4f32b61b4cf7619409426203ee0bb6e7c",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-08T21:26:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb85e2debdd8e729e491c82c07e650d0a5d0de36",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.200.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-07T23:36:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d170e4e49cb3ba44f12c4734bdfe2a73d280b620",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-07T01:44:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e9d332b718d596c33a15b19536d305791fb827f",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-07T01:43:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27ccb5ab46032f8d9e8a74b43418c3f04c15bf86",
          "body": null,
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-07-07T00:33:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "593af99ab2ecf5e7d933b2dfde9c33973812686f",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.60.0 to 0.61.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.60.0...v0.61.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.61.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.60.0 to 0.61.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T12:20:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5904d380133d096df971f3af595d56bd482bd5b9",
          "body": "The Resolute stemcell removes runit/chpst. Migrate the\nloggr-system-metrics-agent job to BPM, which runs the process as vcap\nnatively. Mount /var/vcap/data and /var/vcap/store as unrestricted\nvolumes so disk partition stats work correctly on real IaaS. Validated\non ubuntu-resolute.\n\nBREAKING CHANGE: the loggr-system-metrics-agent job now requires the\nbpm job to be colocated in the instance group. This is likely already\ntrue anywhere system-metrics-agent is being used.",
          "is_bot": false,
          "headline": "feat: run under bpm instead of chpst",
          "author_name": "Matthew Kocher",
          "author_login": "mkocher",
          "committed_at": "2026-07-01T20:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "030d173da156ccc0d08167cc23821dadf16efd5f",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.1 to 9.3.0.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/v9.2.1...v9.3.0)\n\n---\nupdated-dependencies:\n-\n[…]\nname: golangci/golangci-lint-action\n  dependency-version: 9.3.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T16:55:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21f113d1a50fa2bd6a931b937867794edb9f2cb6",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.42.0 to 1.42.1.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.42.0...v1.42.1)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.42.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T07:26:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5eb6c6772886a1b0ae77499d32e4b4d1a263eb6e",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.31.0 to 2.32.0.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.31.0...v2.32.0)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.32.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T07:07:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "71c19ba7caa1190f9e00e0579cda92c2bf954c4f",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T13:43:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f4c5421fce28ff28b118f095926aaa585284a4e",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.41.0 to 1.42.0.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.41.0...v1.42.0)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.42.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-18T07:58:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b25364de9c7318e625523c9531214a9efd7188be",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.59.0 to 0.60.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.59.0...v0.60.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.60.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.59.0 to 0.60.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T17:03:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a96bb68247abe43d9cc2d170b7bd066716e1b91",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.30.0 to 2.31.0.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.30.0...v2.31.0)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.31.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T16:43:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b2d423a10b63b498c878cb69e47ebb1f200b572",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.29.0 to 2.30.0.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.29.0...v2.30.0)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.30.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T08:50:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c1cf3384cfaf8b3c22743df303a9893dda57c08",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.58.0 to 0.59.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.58.0...v0.59.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.59.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.58.0 to 0.59.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T15:45:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fa1aff589c39202cd64ffca5a0c2e10a43f64f2",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-06T19:06:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ad4665f070842f58847ccb1ea41014c1bfdadac",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-06T19:05:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "080a27727e2d261d1cc6a8535657255ad375153a",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.57.0 to 0.58.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.57.0...v0.58.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.58.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.57.0 to 0.58.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T06:27:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d23adb9b3cc1ce2f968313e32c93e8b44d5826f",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.56.0 to 0.57.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.56.0...v0.57.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.57.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.56.0 to 0.57.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T09:18:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7195f0110443c58ef062a2d8a5f3a22ac0a257a0",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.198.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-02T20:48:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fd644fc228ac501b41252e8497e8aa5ff139bd2",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-02T02:45:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e879fb6c035d0a8b0c8bb5af31995e56a7ff208",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-02T02:45:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17e91c7c4a104c987bf355bb31085ac903255c94",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-01T18:44:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e746fc2478aa82a959338e1ee40c994123e52eae",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-01T18:43:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7de70e1da7dca7aa4704af349dbb6a80f919101",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-01T18:00:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ab6899ebe43eaae700efe27c3b74f36a96c7105",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-06-01T17:59:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a7cc3c302a870fc5096a70d7b00dd52b77c9105",
          "body": null,
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-31T15:54:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8998a3e93759b6a06cb45672342ada882079b7f",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.55.0 to 0.56.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.55.0...v0.56.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.56.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.55.0 to 0.56.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-26T12:31:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9479215d300b63d1163611c403392bfd5f61af5",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.0 to 9.2.1.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/v9.2.0...v9.2.1)\n\n---\nupdated-dependencies:\n-\n[…]\nname: golangci/golangci-lint-action\n  dependency-version: 9.2.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-26T08:35:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8ae6f581ebe41a96904aa02f5a1f50fc53c574d",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.54.0 to 0.55.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.54.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.55.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.54.0 to 0.55.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-22T08:54:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c516c5e80a3a928a26f061b533ab0fe6bbc612d",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.40.0 to 1.41.0.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.40.0...v1.41.0)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.41.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-22T08:53:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9c2e9ed9edea92497a83596d6fb24c8e6a31a579",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.3 to 2.29.0.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.3...v2.29.0)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.29.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-22T08:47:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45a5033dda613758f8635f1899d48509bbab5fd2",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.53.0 to 0.54.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.53.0...v0.54.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.54.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.53.0 to 0.54.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T05:07:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a42c523f7702f0fe6e3b76111135796eeba9c7f",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.196.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-08T01:11:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b39349766114c1d33964e021aff25bab076a96d3",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-06T00:00:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74bb65645eb99de73829c1521edb0b231867301f",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-06T00:00:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "baa0e5c93a594d24ed0b130c1afcad321ea485e5",
          "body": null,
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "CF Logging And Metrics CI Bot",
          "author_login": null,
          "committed_at": "2026-05-05T20:12:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dafdcc1d65794ad2092d55831e346f30e33d4f1d",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.2 to 2.28.3.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.2...v2.28.3)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.28.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-04T12:52:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f334d3f4096ae505d73f8d577607413a7c19c939",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.39.1 to 1.40.0.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.39.1...v1.40.0)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.40.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-04T11:40:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a04adc3ed0c12118accef77cb7f17c71254a4c47",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-02T18:46:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14ed669af594302a84439418d08cec9892404ace",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-02T18:46:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "410568c8dd45738f2c73e83ffea705334c1cc6a6",
          "body": null,
          "is_bot": false,
          "headline": "remove golang-1.25 packages",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-02T18:39:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "412773ab100b04584d1618031256c7a0873374f3",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.195.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-05-02T16:12:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92f67551c94796de14d0810f8f3cb6a91f97c6fa",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.50.0 to 0.52.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.50.0...v0.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.51.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.50.0 to 0.52.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-28T07:48:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c19095c4442c399585a360e8ff1d076afe79846",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.1 to 2.28.2.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.1...v2.28.2)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.28.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-28T07:44:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91eb8327c8203c7d611ab9f46ba71b37d84aa148",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-04-02T18:02:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "507d42fa5ec7c7b9b0eeed9a7a88115c0d9f1254",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-04-02T18:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fead5e07ba45fecd2468daed44304ec399ffb8fa",
          "body": null,
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "CF Logging And Metrics CI Bot",
          "author_login": null,
          "committed_at": "2026-04-01T22:12:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a864f59e7cd31d76884b341247a4e317a4d9d3bf",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.193.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-04-01T20:26:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f754b77e7c7b0ba4e847132548f20deb0a0103f3",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.49.0 to 0.50.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.49.0...v0.50.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.50.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.49.0 to 0.50.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T05:28:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0faa96ca030092fa0f240fe7b95a9ffd6967abbc",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.47.0 to 0.49.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.47.0...v0.49.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.49.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.47.0 to 0.49.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-24T23:40:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f913a299a07fb692d7231ae7ddc64b927d535ea6",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.46.0 to 0.47.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.46.0...v0.47.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.47.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.46.0 to 0.47.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-11T06:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "476968a919035761d6cce858f7b85638ea816eb8",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.193.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-03-09T20:41:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d48d53659363bed22c1a35e4d92b62c21348600",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.45.0 to 0.46.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.45.0...v0.46.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.46.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.45.0 to 0.46.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-25T13:49:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d73ac0ef7e7f359c08e9f2f0e3fd0acc4c6e31e",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-02-13T07:32:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b85af2e144e6dc103c3561bdcc09a83c08024adb",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-02-13T07:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19997cd1005ed71e61c82ce8ceb31658bbaae03f",
          "body": null,
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "CF Logging And Metrics CI Bot",
          "author_login": null,
          "committed_at": "2026-02-12T21:44:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16fd897a7c7b7c7f3c89cda68a7aa895e9d7c2bd",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.44.0 to 0.45.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.44.0...v0.45.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.45.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.44.0 to 0.45.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-12T08:35:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80d3b8ab8e0e4f61e09ed099c0c4a4f7294f9a0e",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.192.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-02-10T22:40:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a898e95693e5a442d6d64408cca71950a04a3923",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.191.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-02-06T23:30:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e7290c4c598c7841be2c69909d1586f61a9698c",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.189.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-02-04T16:19:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bac65bf8ed0759f3c2482b3b51e134d990b7622",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.39.0 to 1.39.1.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.39.0...v1.39.1)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.39.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-03T13:50:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a1f8df6e5fb1547b99ed7a221e6b104f8d01ca9",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.5 to 2.28.1.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.27.5...v2.28.1)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.28.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-03T13:42:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "154519188ca85c00a3a6f134af73aad8923d656a",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.42.0 to 0.44.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.42.0...v0.44.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.44.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.42.0 to 0.44.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-28T08:56:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b1520bb2731b7c3aa44f7fb4e82e5a13c065988",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.188.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-01-15T20:14:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca1da73309c2022fa7536b064843546512b1a67f",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.187.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2026-01-15T19:13:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c47c7fc95e86f91169aebd941e97f0871abdd4c",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.4 to 2.27.5.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.27.4...v2.27.5)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.27.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.27.4 to 2.27.5 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-13T11:30:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb433f5ce1a6ed90d913a83d0ed52d51d48ca756",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.3 to 1.39.0.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.38.3...v1.39.0)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.39.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-08T21:55:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e1ca1e97ae3afc1c4ddb7ecc5f96d05a7ba5ee6",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.3 to 2.27.4.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.27.3...v2.27.4)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.27.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-08T20:57:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "423bd25f1b5f7f7e913439514f821fd209524e22",
          "body": null,
          "is_bot": false,
          "headline": "Create patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2025-12-22T23:06:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c84ad68a42b4f82a7be36288e47a10b20a8239a",
          "body": null,
          "is_bot": false,
          "headline": "update version to make patch release",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2025-12-22T23:06:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11512268455c63377a4674e936365c0691071434",
          "body": null,
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "CF Logging And Metrics CI Bot",
          "author_login": null,
          "committed_at": "2025-12-18T21:46:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c276fbc2f9a1d139527c22882478007a7cba59d",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.186.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2025-12-18T19:46:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf0865e0e47c19c86d0ca946374eb905f7dd7155",
          "body": "Bumps [code.cloudfoundry.org/tlsconfig](https://github.com/cloudfoundry/tlsconfig) from 0.41.0 to 0.42.0.\n- [Release notes](https://github.com/cloudfoundry/tlsconfig/releases)\n- [Commits](https://github.com/cloudfoundry/tlsconfig/compare/v0.41.0...v0.42.0)\n\n---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.42.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.41.0 to 0.42.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-17T14:42:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7b6ec4f5aa5a9b578d8ac373b1ffc6369811036",
          "body": "Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.2 to 2.27.3.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.27.2...v2.27.3)\n\n---\nupdate\n[…]\ncy-name: github.com/onsi/ginkgo/v2\n  dependency-version: 2.27.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-16T23:27:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94f458637fa49b17aebe9aea6c19fedd393289ca",
          "body": "Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.2 to 1.38.3.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.38.2...v1.38.3)\n\n---\nupdated-d\n[…]\ndency-name: github.com/onsi/gomega\n  dependency-version: 1.38.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-16T23:22:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2be9bf67881b5fe8ff359c1577ba390cbb256436",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.1.0 to 9.2.0.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/v9.1.0...v9.2.0)\n\n---\nupdated-dependencies:\n-\n[…]\nname: golangci/golangci-lint-action\n  dependency-version: 9.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-04T08:05:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "859f020ef6b300706c781bedbd9ae1c1bbb1ec29",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.186.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2025-12-02T17:52:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1deb4408c785fc928684c1cbf2b1aeb6b1c98c05",
          "body": null,
          "is_bot": false,
          "headline": "bump-golang to v0.185.0",
          "author_name": "tas-runtime-bot",
          "author_login": null,
          "committed_at": "2025-12-02T01:02:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a567add92a0ac29abe863fb009ad753f441ed037",
          "body": "---\nupdated-dependencies:\n- dependency-name: code.cloudfoundry.org/tlsconfig\n  dependency-version: 0.41.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump code.cloudfoundry.org/tlsconfig from 0.40.0 to 0.41.0 in /src",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-26T13:28:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0c147d23561d691e50f4342f80ae49f59603e3e",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.0.0 to 9.1.0.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/v9.0.0...v9.1.0)\n\n---\nupdated-dependencies:\n-\n[…]\nname: golangci/golangci-lint-action\n  dependency-version: 9.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-22T11:56:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 62,
      "commits_last_year": 131,
      "latest_release_at": "2026-07-27T19:11:27Z",
      "latest_release_tag": "v3.0.29",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 42,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 9.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 8,
      "stars": 6,
      "watchers": 24,
      "fork_history": {
        "days": [
          {
            "date": "2022-09-30",
            "count": 2
          },
          {
            "date": "2025-09-12",
            "count": 1
          },
          {
            "date": "2025-09-20",
            "count": 1
          },
          {
            "date": "2026-04-30",
            "count": 1
          },
          {
            "date": "2026-05-05",
            "count": 1
          },
          {
            "date": "2026-07-01",
            "count": 1
          },
          {
            "date": "2026-07-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 8,
        "total_forks": 8
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "src/vendor/github.com/Masterminds/semver/v3/Makefile",
        "src/vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml",
        "src/vendor/github.com/munnerz/goautoneg/Makefile",
        "src/vendor/github.com/onsi/ginkgo/v2/Makefile",
        "src/vendor/github.com/pkg/errors/Makefile",
        "src/vendor/github.com/prometheus/procfs/Makefile",
        "src/vendor/github.com/shoenig/go-m1cpu/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "src/go.mod"
      ],
      "largest_source_bytes": 75369,
      "source_files_sampled": 29,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Gemfile",
        "src/go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "1.30.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GHSA-m425-mq94-257g",
              "GHSA-p77j-4mvh-x3m3",
              "GO-2023-2153",
              "GO-2026-4762",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 6,
            "oldest_advisory_days": 1005
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "1.7.1",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-cg3q-j54f-5p7p",
              "GO-2022-0322"
            ],
            "fixed_version": "1.11.1",
            "advisory_count": 2,
            "oldest_advisory_days": 1621
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "0.0.0-20200602114024-627f9648deb9",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-2wrh-6pvc-2jm9",
              "GHSA-4374-p667-p6c8",
              "GHSA-4v7x-pqxf-cx7m",
              "GHSA-5cv4-jp36-h3mw",
              "GHSA-69cg-p879-7622",
              "GHSA-83g2-8m93-v3w7",
              "GHSA-h86h-8ppg-mxmh",
              "GHSA-qppj-fm5r-hxr3",
              "GHSA-qxp5-gwg8-xv66",
              "GHSA-vvgc-356p-c3xw"
            ],
            "fixed_version": "12.0.2",
            "advisory_count": 34,
            "oldest_advisory_days": 1621
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "0.3.3",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-69ch-w2m2-3vjp",
              "GHSA-ppp9-7jff-5vj2",
              "GO-2021-0113",
              "GO-2022-1059",
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 5,
            "oldest_advisory_days": 1755
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "1.25.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-8r3f-844c-mc37",
              "GO-2024-2611"
            ],
            "fixed_version": "1.33.0",
            "advisory_count": 2,
            "oldest_advisory_days": 873
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "0.0.0-20200622214017-ed371f2e16b4",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-p782-xgp4-8hr8",
              "GO-2022-0493",
              "GO-2026-5024"
            ],
            "fixed_version": "1.18.2",
            "advisory_count": 3,
            "oldest_advisory_days": 1494
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 19
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 4,
          "unknown": 1,
          "critical": 1,
          "moderate": 1
        },
        "advisory_count": 53,
        "affected_count": 7,
        "assessed_count": 64,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go",
        "rubygems"
      ],
      "dependencies": [
        {
          "name": "code.cloudfoundry.org/go-envstruct",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.0"
        },
        {
          "name": "code.cloudfoundry.org/tlsconfig",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.62.0"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.32.0"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.1"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.24.1"
        },
        {
          "name": "github.com/shirou/gopsutil/v3",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.24.5"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "code.cloudfoundry.org/go-envstruct",
            "direct": true,
            "version": "1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "code.cloudfoundry.org/go-envstruct",
            "direct": true,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "code.cloudfoundry.org/tlsconfig",
            "direct": true,
            "version": "0.0.0-20200131000646-bbe0f8da39b3",
            "ecosystem": "go"
          },
          {
            "name": "code.cloudfoundry.org/tlsconfig",
            "direct": true,
            "version": "v0.62.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v3",
            "direct": true,
            "version": "v3.24.5",
            "ecosystem": "go"
          },
          {
            "name": "code.cloudfoundry.org/go-batching",
            "direct": false,
            "version": "0.0.0-20171020220229-924d2a9b48ac",
            "ecosystem": "go"
          },
          {
            "name": "code.cloudfoundry.org/go-loggregator",
            "direct": false,
            "version": "0.0.0-20190813173818-049b6bf8152a",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20260604005048-7023385849c0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kr/pretty",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kr/text",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20260627054121-477a66015f15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.70.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil",
            "direct": false,
            "version": "2.20.5+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shoenig/go-m1cpu",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/square/certstrap",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stackexchange/wmi",
            "direct": false,
            "version": "0.0.0-20190523213315-cbe66965904d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.step.sm/crypto",
            "direct": false,
            "version": "v0.84.1",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "0.0.0-20200602114024-627f9648deb9",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "0.0.0-20200622214017-ed371f2e16b4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "0.0.0-20200624020401-64a14ca9d1ad",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "1.30.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "1.25.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "bosh-template",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "diff-lcs",
            "direct": false,
            "version": "1.6.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec",
            "direct": false,
            "version": "3.13.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-core",
            "direct": false,
            "version": "3.13.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-expectations",
            "direct": false,
            "version": "3.13.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-mocks",
            "direct": false,
            "version": "3.13.8",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-support",
            "direct": false,
            "version": "3.13.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "semi_semantic",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 64,
        "direct_count": 10,
        "indirect_count": 54
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 229,
        "open_issues": 2,
        "closed_ratio": 0.5,
        "closed_issues": 2,
        "closed_unmerged_prs": 93
      },
      "bus_factor": 2,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "ctlong",
          "commits": 23,
          "avatar_url": "https://avatars.githubusercontent.com/u/12767276?v=4"
        },
        {
          "type": "User",
          "login": "mkocher",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/54996?v=4"
        },
        {
          "type": "User",
          "login": "ay901246",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/265585918?v=4"
        },
        {
          "type": "User",
          "login": "rroberts2222",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/108819446?v=4"
        },
        {
          "type": "User",
          "login": "angelachin",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/5946175?v=4"
        },
        {
          "type": "User",
          "login": "duanemay",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/991170?v=4"
        },
        {
          "type": "User",
          "login": "sethboyles",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/1445593?v=4"
        },
        {
          "type": "User",
          "login": "aqstack",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/20701790?v=4"
        },
        {
          "type": "User",
          "login": "ameowlia",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/7025605?v=4"
        },
        {
          "type": "User",
          "login": "acrmp",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/444264?v=4"
        }
      ],
      "contributors_sampled": 15,
      "top_contributor_share": 0.418
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "codeql-analysis.yml",
        "go.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yaml",
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Gemfile.lock",
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 2,
            "reason": "Found 5/17 approved changesets -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "022c5170f2b71782759f2e89f7b072294851e7f0",
        "ran_at": "2026-07-27T20:23:39Z",
        "aggregate_score": 6.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T19:32:28Z",
      "oldest_open_prs": [
        {
          "number": 265,
          "created_at": "2025-09-20T03:36:44Z",
          "last_comment_at": "2025-09-20T03:36:50Z",
          "last_comment_author": "linux-foundation-easycla"
        },
        {
          "number": 325,
          "created_at": "2026-07-21T19:32:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-24T22:16:19Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 173,
          "created_at": "2024-06-04T20:34:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 179,
          "created_at": "2024-08-01T21:44:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/cloudfoundry/system-metrics-release",
    "host": "github.com",
    "name": "system-metrics-release",
    "owner": "cloudfoundry"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 69,
      "inputs": {
        "security": 63,
        "vitality": 92,
        "community": 40,
        "governance": 64,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 93,
            "inputs": {
              "commits_last_year": 131,
              "human_commit_share": 0.58,
              "days_since_last_push": 0,
              "active_weeks_last_year": 42
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "42/52 weeks with commits",
                "points": 29.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 42
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "131 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 131
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 62,
              "latest_release_tag": "v3.0.29",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 9.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "62 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 62
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~9.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 9.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 40,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "forks": 8,
              "stars": 6,
              "watchers": 24,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "6 stars",
                "points": 11.3,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "8 forks",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "24 watchers",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 15,
              "top_contributor_share": 0.418
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 42% of commits",
                "points": 13.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 42
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "15 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "merged_prs": 229,
              "open_issues": 2,
              "closed_issues": 2,
              "issue_closed_ratio": 0.5,
              "closed_unmerged_prs": 93
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "50% of issues closed",
                "points": 23.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 50
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "229/322 decided PRs merged",
                "points": 27.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 229,
                      "decided": 322
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 5/17 approved changesets -- score normalized to 2",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "followers": 743,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "cloudfoundry",
              "public_repos": 571,
              "account_age_days": 5640
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "743 followers of cloudfoundry",
                "points": 20.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 743,
                      "login": "cloudfoundry"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "571 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 571
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml, .golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml, .golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 63,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 63,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 5/17 approved changesets -- score normalized to 2",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 64 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 64
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "source": "osv",
              "advisories": 53,
              "affected_packages": 7,
              "assessed_packages": 64,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 4, moderate 1, unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: github.com/prometheus/client_golang 1.7.1 (high 7.5)",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "github.com/prometheus/client_golang 1.7.1 (high 7.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 1621 days ago",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 1621
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 64,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 14
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 62,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 7,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.138,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "8 of 58 human commits state their intent (structured subject or explanatory body)",
                "points": 7.4,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 8,
                      "sampled": 58
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Gemfile.lock",
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "src/vendor/github.com/Masterminds/semver/v3/Makefile",
                "src/vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml",
                "src/vendor/github.com/munnerz/goautoneg/Makefile",
                "src/vendor/github.com/onsi/ginkgo/v2/Makefile",
                "src/vendor/github.com/pkg/errors/Makefile",
                "src/vendor/github.com/prometheus/procfs/Makefile",
                "src/vendor/github.com/shoenig/go-m1cpu/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "src/go.mod"
              ],
              "dependency_bot_commit_share": 0.42
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "src/vendor/github.com/Masterminds/semver/v3/Makefile, src/vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml, src/vendor/github.com/munnerz/goautoneg/Makefile, src/vendor/github.com/onsi/ginkgo/v2/Makefile, src/vendor/github.com/pkg/errors/Makefile, src/vendor/github.com/prometheus/procfs/Makefile, src/vendor/github.com/shoenig/go-m1cpu/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "src/vendor/github.com/Masterminds/semver/v3/Makefile, src/vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml, src/vendor/github.com/munnerz/goautoneg/Makefile, src/vendor/github.com/onsi/ginkgo/v2/Makefile, src/vendor/github.com/pkg/errors/Makefile, src/vendor/github.com/prometheus/procfs/Makefile, src/vendor/github.com/shoenig/go-m1cpu/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml, .golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml, .golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "42 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 42,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 75369,
              "source_files_sampled": 29,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/29 source files over 60KB",
                "points": 53.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 29,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch go package 'code.cloudfoundry.org/system-metrics-release/src' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T20:23:58.587444Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cloudfoundry/system-metrics-release.svg",
  "full_name": "cloudfoundry/system-metrics-release",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}