Публічний реєстрДобрий
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-29 14:13 UTC
containerd / nri
Node Resource Interface
containerd/nri має індекс здоров’я 71 зі 100, що відповідає смузі «Добрий». Найвищий показник — Vitality (81/100), найнижчий — Security (51/100). Останнє оновлення було 9 днів тому. Більшість нещодавньої роботи виконують 3 учасники.
71
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
71
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Власність
containerdОрганізація
1 307 підписників39 публічних репозиторіївз серп. 2015 р.
За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.
Пакетні екосистеми
| Реєстр | Пакет | Версія | Завантажень / міс | Версії | Остання публікація |
|---|---|---|---|---|---|
| Go | github.com/containerd/nri | v0.12.1 | - | 15 | 10 днів тому |
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
81
Активність розробки
74Добрий
Як обчислюється оцінка
| 28.8/36 | Свіжість push — останній push 9 дн. тому |
| 24.2/36 | Ритм комітів — 35/52 тижнів із комітами |
| 18/18 | Обсяг комітів — 181 комітів за останній рік |
| 3/10 | OpenSSF Scorecard: Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
Використані вхідні дані
| commits_last_year | 181 |
| human_commit_share | 1 |
| days_since_last_push | 9 |
| active_weeks_last_year | 35 |
Дисципліна релізів
92Відмінний
Як обчислюється оцінка
| 27/27 | Випускає релізи — опубліковано 12 релізів |
| 36/36 | Свіжість релізів — останній реліз 9 дн. тому |
| 19.8/27 | Ритм релізів — реліз кожні ~108,9 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
Використані вхідні дані
| releases_count | 12 |
| latest_release_tag | v0.12.1 |
| releases_from_tags | ні |
| days_since_latest_release | 9 |
| mean_days_between_releases | 108,9 |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
59
Популярність і впровадження
67Помірний
Як обчислюється оцінка
| 42.1/60 | Зірки — 396 зірок |
| 16.7/25 | Форки — 101 форків |
| 8.2/15 | Спостерігачі — 31 спостерігачів |
Використані вхідні дані
| forks | 101 |
| stars | 396 |
| watchers | 31 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Здоров'я спільноти
50Помірний
Як обчислюється оцінка
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (Apache-2.0) |
| 0/18 | Настанови CONTRIBUTING |
| 0/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | так |
| has_license | так |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | ні |
| has_pull_request_template | ні |
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
78
Як обчислюється оцінка
| 36/54 | Бас-фактор — на 3 контриб’ютор(ів) припадає половина всіх комітів |
| 14.3/22.5 | Розподіл комітів — головний контриб’ютор — автор 37% комітів |
| 13.5/13.5 | Широта контриб’юторів — 45 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 56 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 3 |
| contributors_sampled | 45 |
| top_contributor_share | 0,366 |
Реактивність на issue та PR
66Помірний
Як обчислюється оцінка
| 19.3/46.8 | Вирішення issue — закрито 41% issue |
| 32.2/38.3 | Прийняття PR — злито 180/214 вирішених PR |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
Використані вхідні дані
| merged_prs | 180 |
| open_issues | 40 |
| closed_issues | 28 |
| issue_closed_ratio | 0,412 |
| closed_unmerged_prs | 34 |
Власність та опіка
76Добрий
Як обчислюється оцінка
| 30/30 | Підтримка власника — у власності організації |
| 0/20 | Верифікований домен |
| 22.4/25 | Охоплення власника — 1 307 підписників у containerd |
| 23.7/25 | Послужний список — 39 публічних репозиторіїв, вік облікового запису ~10 р. |
Використані вхідні дані
| followers | 1 307 |
| owner_type | Organization |
| is_verified | — |
| owner_login | containerd |
| public_repos | 39 |
| account_age_days | 3 986 |
Супровід пакетів
100Відмінний
Як обчислюється оцінка
| 25/25 | Опубліковано й доступно — 1 пакет(ів) у go |
| 35/35 | Свіжість публікацій — остання публікація 10 дн. тому |
| 20/20 | Історія версій — 15 опублікованих версій |
| 20/20 | Не застарілий — активний, не deprecated і не yanked |
Використані вхідні дані
| packages | github.com/containerd/nri |
| ecosystems | go |
| any_deprecated | ні |
| min_days_since_publish | 10 |
Інженерна якість
Чи наявні базові інженерні практики та документація?
80
Інженерні практики
84Добрий
Як обчислюється оцінка
| 24/24 | Процеси CI — 4 процес(ів) CI |
| 24/24 | Наявні тести |
| 16/16 | Конфігурація лінтера — .golangci.yml |
| 0/9.6 | Pre-commit-хуки |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
Використані вхідні дані
| has_ci | так |
| has_tests | так |
| has_editorconfig | ні |
| has_linter_config | так |
| has_precommit_config | ні |
Документація
75Добрий
Як обчислюється оцінка
| 30/30 | README |
| 25/25 | Каталог документації |
| 0/15 | Сайт документації / домашня сторінка |
| 10/10 | Опис репозиторію |
| 0/10 | Теми |
| 10/10 | Wiki |
Використані вхідні дані
| topics | — |
| has_wiki | так |
| homepage | — |
| has_readme | так |
| has_docs_dir | так |
| has_description | так |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
51
Стан безпеки
51Помірний
Як обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 56 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 2.2/7.5 | Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — немає даних |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 24 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5,1 |
Виключено з оцінювання (немає даних або не застосовно): signed_releases. Залишкові ваги перенормовано.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
68
Контекст і настанови для агентів
40У зоні ризику
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 40/40 | Читабельна історія комітів — намір зазначено у 85 з 100 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,85 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Як обчислюється оцінка
| 18/18 | Розгортання однією командою — Makefile |
| 22/22 | Автоматизовані тести |
| 11/11 | Конфігурація лінтера / форматера — .golangci.yml |
| 11/11 | Статична перевірка типів — Go (статично типізована) |
| 10/10 | Відтворюване середовище — Dockerfile, lockfile |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 0/8 | Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Використані вхідні дані
| has_nix | ні |
| has_tests | так |
| lockfiles | go.sum |
| has_dockerfile | так |
| typed_language | так |
| bootstrap_files | Makefile |
| has_devcontainer | ні |
| has_linter_config | так |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | examples/go.mod, go.mod, plugins/device-injector/go.mod, plugins/differ/go.mod, plugins/hook-injector/go.mod, plugins/logger/go.mod, plugins/network-device-injector/go.mod, plugins/network-logger/go.mod, plugins/rdt/go.mod, plugins/template/go.mod, plugins/ulimit-adjuster/go.mod, plugins/v010-adapter/go.mod, plugins/wasm/go.mod, plugins/writable-cgroups/go.mod |
| dependency_bot_commit_share | 0 |
Читабельність коду для моделей
98Відмінний
Як обчислюється оцінка
| 45/45 | Типізований код — Go (статично типізована) |
| 53.4/55 | Керовані розміри файлів — 3/100 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | Go |
| largest_source_bytes | 439 028 |
| source_files_sampled | 100 |
| oversized_source_files | 3 |
Машиночитні інтерфейси
80Добрий
Як обчислюється оцінка
| 40/40 | Схема API (OpenAPI/GraphQL/proto) — pkg/api/api.proto |
| 0/20 | Сервер MCP |
| 40/40 | Придатні до запуску приклади — examples, samples |
Використані вхідні дані
| example_dirs | examples, samples |
| has_mcp_signal | ні |
| api_schema_files | pkg/api/api.proto |
Ключові факти
396зірок GitHub
45контриб'юторів
181комітів за останні 12 місяців
9днів від останнього пушу
12релізів
3бас-фактор
40відкритих issue
Goпакетних екосистем
Попередження щодо збору даних
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 0 ★ / 101 ⇿
0Зірки
101Форки
11Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 9Патчі 2
Кожна точка охоплює 6 днів.
OpenSSF Scorecard 5.1 / 10
5.1сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 56 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 3 | Maintained | 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 9 | Security-Policy | security policy file detected |
| н/д | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 24 existing vulnerabilities detected |
Прямі залежності 17
| Реєстр | Пакет | Обмеження версії | Маніфест |
|---|---|---|---|
| Go | github.com/brianvoe/gofakeit/v7 | v7.12.1 | go.mod |
| Go | github.com/containerd/ttrpc | v1.2.7 | go.mod |
| Go | github.com/google/go-cmp | v0.7.0 | go.mod |
| Go | github.com/knqyf263/go-plugin | v0.9.0 | go.mod |
| Go | github.com/moby/sys/mountinfo | v0.7.2 | go.mod |
| Go | github.com/onsi/ginkgo/v2 | v2.19.1 | go.mod |
| Go | github.com/onsi/gomega | v1.34.0 | go.mod |
| Go | github.com/opencontainers/runtime-spec | v1.3.0 | go.mod |
| Go | github.com/opencontainers/runtime-tools | v0.9.1-0.20251114084447-edf4cb3d2116 | go.mod |
| Go | github.com/sirupsen/logrus | v1.9.3 | go.mod |
| Go | github.com/stretchr/testify | v1.8.4 | go.mod |
| Go | github.com/tetratelabs/wazero | v1.11.0 | go.mod |
| Go | golang.org/x/mod | v0.32.0 | go.mod |
| Go | golang.org/x/sys | v0.39.0 | go.mod |
| Go | google.golang.org/grpc | v1.57.1 | go.mod |
| Go | google.golang.org/protobuf | v1.34.1 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
Усі залежності не зібрано
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 4125,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 653408,
"Shell": 5022,
"Makefile": 6513,
"Dockerfile": 1173
},
"pushed_at": "2026-07-20T14:04:51Z",
"created_at": "2020-07-28T18:33:54Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T13:30:26Z",
"description": "Node Resource Interface",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "containerd.io",
"name": "containerd",
"type": "Organization",
"login": "containerd",
"company": null,
"location": null,
"followers": 1307,
"avatar_url": "https://avatars.githubusercontent.com/u/14037953?v=4",
"created_at": "2015-08-30T06:48:09Z",
"is_verified": null,
"public_repos": 39,
"account_age_days": 3986
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2026-07-20T14:04:51Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-04-28T17:42:47Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-12-17T12:45:26Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-08-19T17:59:14Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2024-12-12T17:15:41Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2024-11-01T18:24:32Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2024-10-23T20:49:46Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2024-04-18T21:57:27Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2024-02-03T09:02:14Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2023-11-13T17:57:23Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2023-09-15T22:15:17Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2023-09-12T23:25:56Z"
}
],
"recent_commits": [
{
"oid": "84180b63351d03b54a317a265ba01e3e9db19f24",
"body": "adaptation: avoid holding lock across runtime update callback",
"is_bot": false,
"headline": "Merge pull request #301 from ningmingxiao/fix_deadlock",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-07-18T22:12:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55afaa25d2d7827cd51841a5cc2f09981544b894",
"body": "updateContainers currently holds the Adaptation mutex while calling the\nruntime-provided updateFn. containerd's updateFn acquires its local NRI\nmutex, while CRI lifecycle paths acquire the same locks in the opposite\norder:\n\n lifecycle: local mutex -> Adaptation mutex\n update: Adaptation mutex -\n[…]\ne Adaptation mutex and leave synchronization of\nruntime-owned state to the runtime.\n\nFixes https://github.com/containerd/containerd/issues/13733\n\nSigned-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>",
"is_bot": false,
"headline": "adaptation: avoid holding lock across runtime update callback",
"author_name": "ningmingxiao",
"author_login": "ningmingxiao",
"committed_at": "2026-07-17T05:50:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32e4300b66ad2c1ad00526ab3dd2034d7cb5b58d",
"body": "docs: Fix typo in containerd config for default validator.",
"is_bot": false,
"headline": "Merge pull request #297 from grosskur/grosskur/docs-validation-plugins",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-06-05T23:06:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7e479f52f51be794ff24af3a5103f7db47ce08d",
"body": "The sample config is ignored by containerd:\n\n [plugins.\"io.containerd.nri.v1.runtime\"]\n [plugins.\"io.containerd.nri.v1.runtime\".default_validator]\n\nThe correct config is:\n\n [plugins.\"io.containerd.nri.v1.nri\"]\n [plugins.\"io.containerd.nri.v1.nri\".default_validator]\n\nTested with containerd 2.2.3.\n\nSigned-off-by: Alan Grosskurth <grosskur@google.com>",
"is_bot": false,
"headline": "docs: Fix typo in containerd config for default validator.",
"author_name": "Alan Grosskurth",
"author_login": "grosskur",
"committed_at": "2026-06-05T22:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520641efc61c07ccb5a39b13dcfe5598ab1f9ab9",
"body": "Fix .gitignore",
"is_bot": false,
"headline": "Merge pull request #290 from samuelkarp/fix-gitignore",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d37892494085e17e266a7643d8ac37fe6e7eea1",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "fix .gitignore to include info/none",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:32:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a92ac958717b461fbf43d76fd56e0de6eef3115",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "delete manually-added none file",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:31:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57442b2a20c63d48d69dc600c3fb4f0c063c7ef0",
"body": "wire protocol: use dedicated RPC calls for all pod and container life-cycle events.",
"is_bot": false,
"headline": "Merge pull request #274 from klihub/devel/dedicated-lifecycle-events",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-15T19:11:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3402eba0ccd83c5598adab3289425a4c66fb843d",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "README.md: document deprecation of StateChange.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-14T05:43:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e16af776b1e170c24c8f7c3f83db63eb7788cb8",
"body": "Add a backward compatibility wrapper for old plugins which do not\nsupport the full set of dedicated lifecycle events yet. Fall back\nto relaying StateChange events to them.\n\nRecord deprecation warnings for each unimplemented new plugin\ninterface where we need to fall back and funnel calls through\nthe old StateChange RPC call.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: implement wrapper for old plugins.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-14T05:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "299a3ee685cfef34c8910f46b1386aafe51994ba",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: update unit tests for metrics.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e019dce0ee4cf5d0f4e2980d1398a7f2cabddca7",
"body": "Update to use the new dedicated RPC calls to relay all pod and\ncontainer lifecycle events to plugins. Remove old StateChange\nwhich used to multiplex {Run,PostUpdate,Stop,Remove}PodSandbox\npod and {PostCreate,Start,PostStart,PostUpdate,Remove}Container\ncontainer events.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: use dedicated RPC calls for all events.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbf892d2e5e6adc647e602022dcfe7079e4cd6f4",
"body": "Define dedicated RPC calls on the wire for all pod and container\nlifecycle events. Update stub, builtin and WASM plugins accordingly.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,stub: add dedicated RPC calls for all events.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8da10364032fa9fb507f1857da5a1b3141b3800",
"body": "add basic metrics for NRI framework",
"is_bot": false,
"headline": "Merge pull request #277 from chrishenzie/feat/prometheus-metrics",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06a64ce0607484b3c901cdf5aa1568c79e837ffc",
"body": "Add a background to lifecycle SVGs so they are legible in dark mode",
"is_bot": false,
"headline": "Merge pull request #285 from BenTheElder/background",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-08T16:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "560c0c27fa0c36142447d17399cae30cc5faa908",
"body": "logger: fix logger Shutdown function signature",
"is_bot": false,
"headline": "Merge pull request #284 from pandaWall/main",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-08T06:12:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34f24995b9857c9dec616021f15acf0b161e765c",
"body": "Add writable-cgroups experimental plugin",
"is_bot": false,
"headline": "Merge pull request #269 from chrishenzie/writable-cgroups-experiment",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-08T06:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee23a20df205050a75e3abd1f9490f5ed4a657d",
"body": "I went with a blueprint color that is hopefully acceptable on both light and dark. Currently these images are illegible in dark mode.\n\nWe have to set the background within the SVG due to github markdown stripping out CSS and other inline theming.\n\nSigned-off-by: Benjamin Elder <bentheelder@google.com>",
"is_bot": false,
"headline": "Add a background to lifecycle SVGs so they are legible in dark mode",
"author_name": "Benjamin Elder",
"author_login": "BenTheElder",
"committed_at": "2026-04-08T01:40:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9d9a684de469ce5f9eef0820ab2e79f136c81bc",
"body": "Adds a new `writable-cgroups` plugin, designed to enable safe delegation\nof cgroup management to containers. This plugin allows containers to\nmount `/sys/fs/cgroup` as read-write, enabling workloads (like AI/ML\nframeworks) to manage their own sub-cgroups.\n\nThis plugin serves as a reference implementation and test-bed for\nvalidating the `nsdelegate` security model proposed in KEP-5474 as an\nalternative to introducing new Kubernetes API fields.\n\nSigned-off-by: Chris Henzie <chrishenzie@gmail.com>",
"is_bot": false,
"headline": "Add writable-cgroups experimental plugin",
"author_name": "Chris Henzie",
"author_login": "chrishenzie",
"committed_at": "2026-04-07T18:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b9f03a908552c9105baca9a1cd0f3b7cbaeb6d",
"body": "Signed-off-by: pandaWall <chenxu@kylinos.cn>",
"is_bot": false,
"headline": "logger: fix logger Shutdown function signature",
"author_name": "pandaWall",
"author_login": null,
"committed_at": "2026-04-07T08:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32bf1d5775c1aab91ff143f0a615895ff436f542",
"body": "Provides necessary hooks for container runtimes to collect basic runtime\nmetrics regarding NRI plugin activity. This improves observability and\nhelps satisfy v1.0 requirements.\n\nIntroduces a `Metrics` interface that allows us to collect plugin\ncounts, invocations, adjustments, and latency informatio\n[…]\noption) to route these data points\ninto their existing telemetry setups.\n\nRef: https://github.com/containerd/nri/issues/272\nSigned-off-by: Chris Henzie <chrishenzie@gmail.com>\nAssisted-by: Antigravity",
"is_bot": false,
"headline": "Add metrics interface for NRI framework",
"author_name": "Chris Henzie",
"author_login": "chrishenzie",
"committed_at": "2026-04-02T17:50:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "622bc6c0995bdc93962aae62b0b7d6bc07236e12",
"body": "adaptation,stub: exchange NRI versions in use.",
"is_bot": false,
"headline": "Merge pull request #271 from klihub/devel/version-exchange",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-02T04:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d0e81d72cf35445585b72d0a38e56eae087d2ca",
"body": "Add version exchange test and related test option to adaptation.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add a version exchange test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:30:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee82b966aa4540d81ccc32c0a69e77cda95d5e17",
"body": "Exchange NRI versions in use during plugin registration. If we\ndo not get an NRI version from the runtime (too old peer NRI)\ntry to infer it using the runtime type and version.\n\nThe NRI version in use is discovered using the golang runtime\nprovided build info. For plugins hosted in the main NRI repo\n[…]\n subject\nto a replace directive in the plugins' go.mod). Therefore within\nthe repo we fall back to using a git-describe generated version.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,stub: exchange versions during registration.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:30:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4355b7f94b57c95d55b6d734bc32681a3253b66",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "doc: a few fixes to the feature/version table.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:29:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ea59f914980aea206999290dbc338cafc70cbbe",
"body": "Enable adjusting memory policy from NRI plugins",
"is_bot": false,
"headline": "Merge pull request #166 from askervin/5aW_mempolicy",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-17T15:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da6ea0e656c570e6f3b8ec5e0f42a806f9d4dc07",
"body": null,
"is_bot": false,
"headline": "Merge pull request #279 from klihub/fixes/close-on-sync-failure",
"author_name": "Fu Wei",
"author_login": "fuweid",
"committed_at": "2026-03-14T16:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "370f3d5c8f4f74853c1f054ef697baa1ada716c5",
"body": "Don't leave a plugin connected but effectively unregistered if\ninitial plugin synchronization fails. Log the fact as an error\nand close the plugin.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: close plugin if initial sync fails.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-14T08:37:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695be7e4ebaf5940dadbe9fe596827183c87dea8",
"body": "stub: fix new option logging in stub.",
"is_bot": false,
"headline": "Merge pull request #280 from klihub/fixes/stub-option-logging",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-13T20:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ef04429c02458ea3fd7bb02e1cac8b0fe228818",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "stub: fix new option logging in stub.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-13T19:04:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dda906494c65d12bc3be5615cee69d483a1fe3a",
"body": "stub: allow overriding plugin name with Option",
"is_bot": false,
"headline": "Merge pull request #202 from marquiz/devel/stub-name",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-13T13:48:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4b979599070efec3ec0226c6452786348356cb6",
"body": "Add support for adjusting container linux memory policy based\non annotations.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: implement memory policy adjustment.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4bda62bf690295389fd50482222e824b989f520",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add linux memory policy test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35ace8c05ea68ec4783da6e3a8bf757ffc75ed7",
"body": "Signed-off-by: Antti Kervinen <antti.kervinen@intel.com>",
"is_bot": false,
"headline": "Enable adjusting container Linux memory policy.",
"author_name": "Antti Kervinen",
"author_login": "askervin",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6559db68145e61dbc23a189a9f7080a20fefb2c1",
"body": "docs: add validation plugins guide",
"is_bot": false,
"headline": "Merge pull request #278 from samuelkarp/nri-docs",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-03-06T18:40:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b9d909f1c2624af98358d69c499949593bb4965",
"body": "Add a new guide covering NRI validation plugins, including their purpose, deployment process, available validation types, and the built-in default validator. The guide also details required plugins (global and workload-specific) and version requirements.\n\nThe guide was verified by reviewing the content for accuracy against the codebase and existing documentation.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "docs: add validation plugins guide",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-03-05T18:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f467efabfe5243eaf2b6860a82fcd777ab4e5d1",
"body": "avoid nil deref in ToOCILinuxSyscalls",
"is_bot": false,
"headline": "Merge pull request #276 from grey3228/bugfix/nil-errno-deref",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-04T16:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da1671e2afa9a3c7ed43b45118d88a04c39e1c06",
"body": "In ToOCILinuxSyscalls in case if syscall.ErrnoRet is not nil,\nnil ptr errnoRet will be dereferenced without any previous\ninitialization, so it will cause panic.\n\nAvoid dereferencing nil ptr errnoRet by adding previous initialization.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nSigned-off-by: Mikhail Dmitrichenko <m.dmitrichenko222@gmail.com>",
"is_bot": false,
"headline": "avoid nil deref in ToOCILinuxSyscalls",
"author_name": "Mikhail Dmitrichenko",
"author_login": null,
"committed_at": "2026-03-03T10:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1127602217f00ed4fb4e4adc53cdaada99eab280",
"body": "fix: let stub.Run() select to honor context cancellation",
"is_bot": false,
"headline": "Merge pull request #275 from dottorblaster/stub-context-cancellation",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-02-27T16:12:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a69dfa89005abfef8f8bf5dbea90c66a6e522ca",
"body": "Signed-off-by: Alessio Biancalana <alessio@dottorblaster.it>",
"is_bot": false,
"headline": "fix: let stub.Run() select to honor context cancellation",
"author_name": "Alessio Biancalana",
"author_login": "dottorblaster",
"committed_at": "2026-02-27T11:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b9c0b8c56628c4b30d2da62edcfa89a79169ad1",
"body": "api: generate field ownership functions",
"is_bot": false,
"headline": "Merge pull request #263 from samuelkarp/protoc-gen-owners",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-02-23T18:14:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94fcca38e097bfe35af749b85b6619c6bb733bbb",
"body": "Introduce a `protoc` generator (`tools/protoc-gen-owners`) to\nautomatically generate the repetitive field ownership tracking functions.\nThis refactors the `pkg/api/owners.go` file.\n\nThe new generator uses the `Field` enum in `api.proto` as the source of\ntruth. The original `owners.go` file has been \n[…]\nduces manual boilerplate, improves maintainability, and ensures\nconsistency between the protobuf definitions and the Go API.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: generate field ownership functions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-02-20T23:14:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c8e2beb1cee024fc20547cf32880290c4f22b94",
"body": "api: fix OCI hook ownership tracking.",
"is_bot": false,
"headline": "Merge pull request #264 from klihub/fixes/accumulate-oci-hook-ownership",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-02-18T16:39:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed596cb6aba7eb7e48e527a6151b7f11417bb5e8",
"body": "Add integration tests for hook injector plugin",
"is_bot": false,
"headline": "Merge pull request #187 from sameersaeed/hook-injector-tests",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-01-28T14:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67ebccd435e18cf527378e6ce5bc22689111c635",
"body": "Signed-off-by: Sameer <sameer.saeed@live.ca>",
"is_bot": false,
"headline": "Add integration tests for hook injector plugin",
"author_name": "Sameer",
"author_login": "sameersaeed",
"committed_at": "2026-01-28T14:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "012604f8a24a07ccfc78e28c7f9aba6b7bd05cf0",
"body": "go.mod: move from old containers/common repo to go.podman.io/common",
"is_bot": false,
"headline": "Merge pull request #266 from sameersaeed/move-hook-lib",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-28T06:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "637c8db35c1e04a0e7a0ea3ac013658b55f214a5",
"body": "Signed-off-by: Sameer <sameer.saeed@live.ca>",
"is_bot": false,
"headline": "go.mod: move from old containers/common repo to go.podman.io/common",
"author_name": "Sameer",
"author_login": "sameersaeed",
"committed_at": "2026-01-27T21:38:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbb1b7978a0ea8d45d477fa0e85e36d657f45ec6",
"body": "docs: document which versions various NRI features were first available.",
"is_bot": false,
"headline": "Merge pull request #258 from klihub/devel/docs/features-vs-versions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-21T18:50:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95cbd8f2c4b094c0a72d3e3d6d9dd0f0f63f8885",
"body": "Document which version of NRI, containerd and CRI-O support first\nappeared for each piece of pod and container metadata, container\nadjustment, and container update.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "docs: document first available version of features.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-21T18:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "765f01b7e273cb1928ea17a466cbb12d292d9838",
"body": "…stment\n\ndevice-injector: implement sysctl adjustment annotations.",
"is_bot": false,
"headline": "Merge pull request #262 from klihub/devel/device-injector/sysctl-adju…",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-20T20:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a77603943b4742f7f51e3a002460b1de1f8aa6",
"body": "Verify that a registered plugin name is not empty and only contains\ncharacters from the set [a-zA-Z0-9_.+-].\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation: more strict plugin name check.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-19T08:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95ba09f3d846751de2b693e12c4b3e880029c47c",
"body": "Fix hook ownership tracking and add a proper test case for it.\n\nOwnership tracking for OCI hooks is supposed to be accumulative.\nThe implementation tried to accumulate owners, but it was buggy.\nIt tried to delete existing ownership by unclaiming which marks\nownershipdeleted by the plugin instead of \n[…]\nership accumulation. It was only noticed thanks to #263\nwhich switches much of the ownership tracking code to generated\nfrom hand-written.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api: fix OCI hook ownership tracking.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-16T09:12:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "624ea102f4db619870c603cae4dc91fb23f79a54",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: implement sysctl adjustment annotations.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-15T09:38:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1ee56b9da5b7e9c2762b6a30cd7f184da43f4c",
"body": "protoc: Generate pkg/api/strip.go using plugin",
"is_bot": false,
"headline": "Merge pull request #259 from samuelkarp/protoc-gen-strip",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T23:31:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e76da5e2fcbd8d814cc9e0c23719075d4a3abcc",
"body": "Refactor pkg/api/strip.go to be generated automatically by a new protoc\nplugin, 'protoc-gen-strip'. This addresses inconsistencies and missing\nStrip functions in the hand-written file, ensuring comprehensive\ncoverage for protobuf messages.\n\nThe new plugin iterates over protobuf messages and generate\n[…]\nompleteness.\n4. Executed the full project test suite ('make test'), which passed\n successfully, confirming no regressions.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "protoc: Generate pkg/api/strip.go using plugin",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T22:53:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e46f926147ca928e75db625495c4e28004df1fac",
"body": "Reorder functions in pkg/api/strip.go to match the order of the generated code.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "pkg/api: reorder functions in strip.go",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T18:05:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5becd3d849e79e35ad2fcfe8176cf740e5e4a483",
"body": "pkg/api: adjustment stripping fixes.",
"is_bot": false,
"headline": "Merge pull request #251 from klihub/fixes/adjustment-strip",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T16:53:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33335276ba2f0e339e5ed6b253ec8650238edb10",
"body": "Remove incorrect 'clearing' tests for linux scheduling policy\nand I/O priority. We don't really have support for clearing\neither at the moment.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: ditch semantically broken clearing tests.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5c291411a907fdaf14e51716419438b5942388f",
"body": "Okay, let me try to be less stupid here... Stop Strip()ping expected\nresults before comparing them to collected ones. It only masks bugs\nunnoticable if Strip() incorrectly reduces a non-empty adjustment or\nupdate to nil.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: don't mask Strip() bugs by stripping expected results.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0174fb16c4aa8b498b80670374adf9423764a363",
"body": "Add missing handling for LinuxScheduler, LinuxIOPriority,\nLinuxSeccomp, LinuxNamespaces, Sysctl and LinuxNetDevice\nin adjustment stripping.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "pkg/api: fix adjustment stripping.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16d031f07bae4d21378053def20f569ab60f6260",
"body": "Many of our tests set a single field in a container adjustment\nthen does a protocmp against an expected result. Add tests for\nverifying that stripping an adjustment with a single field set\ndoes not unexpectedly drop that field.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "pkg/api: add tests for adjustment stripping.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc2f8191ef9994f20c864510266a966a8868a69e",
"body": "api,adaptation: fix sysctl adjustment collection, add unit test.",
"is_bot": false,
"headline": "Merge pull request #261 from klihub/fixes/sysctl-adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-12T20:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "232234c7c381265ba9112c62da6d4719302cd1e1",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api: fix adjustment stripping for sysctls.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T17:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6128d9c30f418c90edaaa38552dc06884d62bac",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add minimal sysctl adjustment test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T17:20:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7dd8b0818139f56dc24a9a4c5ddc89277fb4837",
"body": "Initilize sysctl map before collecting results. Failing to do\nso results in a crash if any plugin adjusts sysctls.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: initialize sysctl map before collecting results.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T16:50:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95203e5ebad349314449b137e38f9b810725c250",
"body": "ulimit-adjuster: fix a typo in README.md.",
"is_bot": false,
"headline": "Merge pull request #260 from klihub/fixes/doc/rlimit-example",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-12T15:49:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14c8e174856f442e856db2d3465e289552e9c86f",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "ulimit-adjuster: fix typo/copy-paste-o in README.md.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T14:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e27b321b49760cbb69dec2d70da239dece6d8d7",
"body": "docs: add Linux sysctl's as restrictable by validation.",
"is_bot": false,
"headline": "Merge pull request #257 from klihub/fixes/docs/sysctl-restrictions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-09T07:11:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee5f4534311bbfc97e674db23067aeec4e84ab0a",
"body": "adaptation: ensure namespace adjustment is tested",
"is_bot": false,
"headline": "Merge pull request #256 from samuelkarp/api-namespaces-strip",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-01-08T21:46:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf5d2cc0d8d71c77ce7a7d8bffcf13e83c357b0",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "docs: add Linux sysctl's as restrictable by validation.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-08T17:18:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56a637508e9d82fcf65ac5013adbb9e65b69d0c1",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "adaptation: ensure namespace adjustment is tested",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-06T19:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "009475630ff7946572d57c0ce42fe2885f60d86b",
"body": "go.{mod,sum}: bump wazero deps to v1.11.0.",
"is_bot": false,
"headline": "Merge pull request #255 from klihub/devel/bum-wazero-deps",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-22T17:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c75076d2425956804e92fa09daecc6c764a100",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "go.{mod,sum}: bump wazero deps to v1.11.0.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-22T14:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1078130fa016884b4c03880d9d587e6691a67d98",
"body": "adaptation: allow compiling out WASM support altogether.",
"is_bot": false,
"headline": "Merge pull request #253 from klihub/devel/nowasm-build-flag",
"author_name": "Akihiro Suda",
"author_login": "AkihiroSuda",
"committed_at": "2025-12-17T00:38:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab88fe680c11b35234c38c7d4eac72335721c78d",
"body": "Allow WASM support to be disabled at compile time using the\n\"nri_no_wasm\" build tag.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: allow compiling out WASM support altogether.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-16T19:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29bcfcb361e6c36c633d4a2ce6a00ff3e94e7cc3",
"body": "Support direct editing of the intelRdt config",
"is_bot": false,
"headline": "Merge pull request #215 from marquiz/devel/rdt",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-16T15:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0c9f67a905fb24682239a4d6d94b0dd52c13e7",
"body": "Makes it possible to remove/override the linux.intelRdt object from the\ncontainer configuration. Extend the API by adding new 'Remove' field to\nthe LinuxRdt message which is used as a marker to fully delete/override\nthe IntelRdt configuration. This patch also updates the adaptation\nand runtime-tools correspondingly.\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "Implement removal of RDT",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T12:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfbae8a616b80037798e3cfb8315d70f3f2eff7e",
"body": "Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "plugins: add sample rdt plugin",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T12:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d05dd818ed26c3dbeae0fce88289387b62e4665c",
"body": "Add support for direct manipulation of the intelRdt object of the\ncontainer config.\n\nCo-authored-by: Krisztian Litkey <krisztian.litkey@intel.com>\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/adaptation: support new RDT fields",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "725289b256878de8e965327ab6e70dc883ea771b",
"body": "Add support for direct manipulation of the linuxRdt object in the\ncontainer config.\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/runtime-tools/generate: support new RDT fields",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7832a241411573e03982490197d7eb98a1c9d29",
"body": "Add new message for directly managing the linux.intelRdt object of the\nruntime-spec.\n\nNOTE: the old RdtClass field resides under LinuxResources message but\nthe IntelRdt message is sepate from LinuxResources. This is to maintain\nparity with the OCI runtime-spec. It is also much more logical because\nt\n[…]\nd on container\nupdate (missing from UpdateContainerRequest) as this functionality is\nmissing from the runtime spec and runtimes (runc/crun).\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "api: add rdt",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc0990d81d5ef3de226faf6c99d048128bff4efc",
"body": "update wazero/wazero version to v1.10.1",
"is_bot": false,
"headline": "Merge pull request #252 from ningmingxiao/dev01",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-11T07:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9eb9a0f0f6e223e6060805b55957f117f159f5cc",
"body": "Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>",
"is_bot": false,
"headline": "update tetratelabs/wazero version to v1.10.1",
"author_name": "ningmingxiao",
"author_login": "ningmingxiao",
"committed_at": "2025-12-11T07:54:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49087934b6d5d02e29e0b5740e24f0ca61f82d44",
"body": "…path\n\n[plugins] support specifying a custom NRI socket path",
"is_bot": false,
"headline": "Merge pull request #249 from tariq1890/device-injector-custom-socket-…",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-07T09:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2df656516e73b31e013257f713a1df5baa7fdcb0",
"body": "Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>",
"is_bot": false,
"headline": "[plugins] support specifying a custom NRI socket path",
"author_name": "Tariq Ibrahim",
"author_login": "tariq1890",
"committed_at": "2025-12-04T17:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f3e69e159d135a01e64462da2adfb1681bdbfb6",
"body": "pkg/api: add OptionalRepeatedString type",
"is_bot": false,
"headline": "Merge pull request #212 from marquiz/devel/api-optional-repeated-string",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-04T16:08:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687c1a6a8b5c75056acd176dc89c45251926d0bb",
"body": "Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/api: add OptionalRepeatedString type",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-04T08:09:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1418ab598aca50c87d57ee1c2ad69c36e7eac44",
"body": "api,adaptation,generate: allow setting kernel scheduling policy attributes.",
"is_bot": false,
"headline": "Merge pull request #160 from klihub/devel/linux-scheduler-policy",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T17:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a371ac5e7afcd185ee575828f4822d779f0ded9",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: add scheduling policy adjustment.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T17:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e06369e8d1cad80f12eaf6f2c0da19c7ac78396c",
"body": "Allow setting/resetting container linux scheduler attributes.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,generate: allow setting scheduler attributes.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T17:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "649a151c21069500285bf1e4c9c0c9062fa4482e",
"body": "device-injector: always log injection summary.",
"is_bot": false,
"headline": "Merge pull request #246 from klihub/fixes/log-device-injection-summary",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T13:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d6b07c670a06f55a6e3e3cfea4d6f691405b177",
"body": "api,adaptation,generate: allow adjusting linux net devices",
"is_bot": false,
"headline": "Merge pull request #157 from klihub/devel/linux-net-devices",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T13:46:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5145c92e7c215ce3969805005ebdb0f37749e68b",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: add network device injection.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T12:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a03823fe8afbca00b30f669805c911414c58803",
"body": "Allow adding and removing container linux net devices.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,generate: allow adjusting linux net devices.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T12:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96f0f209b39a7cfe019dcfebf8a652e53005ddef",
"body": "Add support for sysctl adjustment",
"is_bot": false,
"headline": "Merge pull request #248 from samuelkarp/sysctl",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-02T21:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "914fbf3faf42da144376c133541c37211d2f9200",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "default-validator: restrict sysctl adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-01T20:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4189560f80f7c02579eec252ae43034bf21cb8a",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: apply sysctl adjustments",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-01T20:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd33dea7daa63b421a9fe5a8d1162275792e5e07",
"body": "feat: Make logger a configurable struct member for stub",
"is_bot": false,
"headline": "Merge pull request #239 from gauravkghildiyal/configurable-logger",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-11-28T12:12:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8705f9b1eb3107ad8bc422978b0412527e3fd236",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: add sysctl container adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-11-26T23:33:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d8611f87ad7e4c05b1ad84da4d1a63e885f5a4b",
"body": "…ools\n\nDrop dependency on opencontainers/runtime-tools",
"is_bot": false,
"headline": "Merge pull request #247 from AkihiroSuda/drop-dependency-on-runtime-t…",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-11-20T15:39:15Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 181,
"latest_release_at": "2026-07-20T14:04:51Z",
"latest_release_tag": "v0.12.1",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 35,
"days_since_latest_release": 9,
"mean_days_between_releases": 108.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/containerd/nri",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/containerd/nri",
"is_deprecated": false,
"latest_version": "v0.12.1",
"repository_url": "https://github.com/containerd/nri",
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T22:12:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 101,
"stars": 396,
"watchers": 31,
"fork_history": {
"days": [
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2020-12-18",
"count": 1
},
{
"date": "2021-03-16",
"count": 2
},
{
"date": "2021-05-06",
"count": 1
},
{
"date": "2021-05-11",
"count": 1
},
{
"date": "2021-06-19",
"count": 1
},
{
"date": "2021-07-06",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-09-08",
"count": 1
},
{
"date": "2021-09-14",
"count": 2
},
{
"date": "2021-09-15",
"count": 1
},
{
"date": "2021-09-22",
"count": 1
},
{
"date": "2021-09-28",
"count": 1
},
{
"date": "2022-01-05",
"count": 1
},
{
"date": "2022-01-13",
"count": 1
},
{
"date": "2022-10-26",
"count": 1
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-29",
"count": 1
},
{
"date": "2023-02-10",
"count": 1
},
{
"date": "2023-03-13",
"count": 1
},
{
"date": "2023-03-14",
"count": 1
},
{
"date": "2023-05-03",
"count": 1
},
{
"date": "2023-05-18",
"count": 1
},
{
"date": "2023-05-23",
"count": 1
},
{
"date": "2023-08-06",
"count": 1
},
{
"date": "2023-08-18",
"count": 1
},
{
"date": "2023-08-22",
"count": 1
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-09-27",
"count": 1
},
{
"date": "2023-10-17",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-11-04",
"count": 1
},
{
"date": "2023-11-22",
"count": 2
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-21",
"count": 1
},
{
"date": "2024-01-25",
"count": 1
},
{
"date": "2024-01-29",
"count": 1
},
{
"date": "2024-03-08",
"count": 1
},
{
"date": "2024-04-15",
"count": 1
},
{
"date": "2024-04-18",
"count": 1
},
{
"date": "2024-04-29",
"count": 1
},
{
"date": "2024-05-10",
"count": 2
},
{
"date": "2024-05-12",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-06-06",
"count": 1
},
{
"date": "2024-06-19",
"count": 1
},
{
"date": "2024-07-04",
"count": 1
},
{
"date": "2024-07-10",
"count": 1
},
{
"date": "2024-08-10",
"count": 1
},
{
"date": "2024-09-07",
"count": 1
},
{
"date": "2024-09-09",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-11-06",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2024-12-29",
"count": 1
},
{
"date": "2025-01-29",
"count": 1
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-12",
"count": 1
},
{
"date": "2025-03-17",
"count": 1
},
{
"date": "2025-04-11",
"count": 1
},
{
"date": "2025-04-18",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-06-12",
"count": 1
},
{
"date": "2025-06-17",
"count": 1
},
{
"date": "2025-06-25",
"count": 1
},
{
"date": "2025-07-08",
"count": 1
},
{
"date": "2025-07-25",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-08-25",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-12",
"count": 1
},
{
"date": "2025-11-11",
"count": 1
},
{
"date": "2025-11-19",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 99,
"total_forks": 101
},
"star_history": null,
"open_issues_and_prs": 60
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples",
"samples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"pkg/api/api.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"examples/go.mod",
"go.mod",
"plugins/device-injector/go.mod",
"plugins/differ/go.mod",
"plugins/hook-injector/go.mod",
"plugins/logger/go.mod",
"plugins/network-device-injector/go.mod",
"plugins/network-logger/go.mod",
"plugins/rdt/go.mod",
"plugins/template/go.mod",
"plugins/ulimit-adjuster/go.mod",
"plugins/v010-adapter/go.mod",
"plugins/wasm/go.mod",
"plugins/writable-cgroups/go.mod"
],
"largest_source_bytes": 439028,
"source_files_sampled": 100,
"oversized_source_files": 3,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"examples/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/brianvoe/gofakeit/v7",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v7.12.1"
},
{
"name": "github.com/containerd/ttrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.7"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/knqyf263/go-plugin",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.0"
},
{
"name": "github.com/moby/sys/mountinfo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.2"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.19.1"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.0"
},
{
"name": "github.com/opencontainers/runtime-spec",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/opencontainers/runtime-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1-0.20251114084447-edf4cb3d2116"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tetratelabs/wazero",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "golang.org/x/mod",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.32.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.39.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.57.1"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.1"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 20,
"merged_prs": 180,
"open_issues": 40,
"closed_ratio": 0.412,
"closed_issues": 28,
"closed_unmerged_prs": 34
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "klihub",
"commits": 181,
"avatar_url": "https://avatars.githubusercontent.com/u/996268?v=4"
},
{
"type": "User",
"login": "mikebrow",
"commits": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/12767641?v=4"
},
{
"type": "User",
"login": "samuelkarp",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/737750?v=4"
},
{
"type": "User",
"login": "marquiz",
"commits": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/1035625?v=4"
},
{
"type": "User",
"login": "fuweid",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/17510957?v=4"
},
{
"type": "User",
"login": "thaJeztah",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/1804568?v=4"
},
{
"type": "User",
"login": "crosbymichael",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/749551?v=4"
},
{
"type": "User",
"login": "dmcgowan",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/169601?v=4"
},
{
"type": "User",
"login": "champtar",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/3536755?v=4"
},
{
"type": "User",
"login": "saschagrunert",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/695473?v=4"
}
],
"contributors_sampled": 45,
"top_contributor_share": 0.366
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"codeql.yml",
"codespell.yml",
"images.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 56 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "24 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "84180b63351d03b54a317a265ba01e3e9db19f24",
"ran_at": "2026-07-29T14:12:28Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T14:22:40Z",
"oldest_open_prs": [
{
"number": 118,
"created_at": "2024-10-24T16:08:10Z",
"last_comment_at": "2025-11-24T21:06:22Z",
"last_comment_author": "mikebrow"
},
{
"number": 183,
"created_at": "2025-07-16T11:34:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 219,
"created_at": "2025-08-29T06:19:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 227,
"created_at": "2025-09-01T09:36:35Z",
"last_comment_at": "2025-09-04T08:46:04Z",
"last_comment_author": "klihub"
},
{
"number": 245,
"created_at": "2025-11-11T19:08:29Z",
"last_comment_at": "2026-04-24T12:09:42Z",
"last_comment_author": "kfox1111"
},
{
"number": 265,
"created_at": "2026-01-20T14:26:10Z",
"last_comment_at": "2026-04-15T22:48:27Z",
"last_comment_author": "samuelkarp"
},
{
"number": 267,
"created_at": "2026-01-28T15:00:20Z",
"last_comment_at": "2026-05-12T13:43:13Z",
"last_comment_author": "MikeZappa87"
},
{
"number": 268,
"created_at": "2026-02-03T19:47:07Z",
"last_comment_at": "2026-03-10T07:25:32Z",
"last_comment_author": "klihub"
},
{
"number": 281,
"created_at": "2026-03-24T00:36:36Z",
"last_comment_at": "2026-03-25T23:42:37Z",
"last_comment_author": "samuelkarp"
},
{
"number": 286,
"created_at": "2026-04-09T19:56:54Z",
"last_comment_at": "2026-05-26T23:21:16Z",
"last_comment_author": "SergeyKanzhelev"
},
{
"number": 288,
"created_at": "2026-04-24T07:11:39Z",
"last_comment_at": "2026-07-20T19:58:41Z",
"last_comment_author": "mikebrow"
},
{
"number": 291,
"created_at": "2026-04-28T18:55:46Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 292,
"created_at": "2026-05-07T11:29:26Z",
"last_comment_at": "2026-06-17T12:55:40Z",
"last_comment_author": "egorikas"
},
{
"number": 293,
"created_at": "2026-05-11T13:24:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 294,
"created_at": "2026-05-11T18:50:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 295,
"created_at": "2026-05-12T13:42:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 296,
"created_at": "2026-05-13T18:03:55Z",
"last_comment_at": "2026-05-26T07:49:03Z",
"last_comment_author": "arpitjain099"
},
{
"number": 298,
"created_at": "2026-07-03T00:21:49Z",
"last_comment_at": "2026-07-16T16:46:41Z",
"last_comment_author": "wevans-ant"
},
{
"number": 300,
"created_at": "2026-07-10T03:42:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 302,
"created_at": "2026-07-22T16:11:04Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T22:12:11Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 35,
"created_at": "2023-03-20T11:53:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2023-06-01T22:30:38Z",
"last_comment_at": "2023-06-02T18:15:00Z",
"last_comment_author": "haircommander"
},
{
"number": 45,
"created_at": "2023-06-14T07:19:56Z",
"last_comment_at": "2023-10-10T17:04:14Z",
"last_comment_author": "kad"
},
{
"number": 49,
"created_at": "2023-09-01T12:38:45Z",
"last_comment_at": "2025-05-23T21:43:06Z",
"last_comment_author": "samuelkarp"
},
{
"number": 56,
"created_at": "2023-09-22T08:03:54Z",
"last_comment_at": "2025-05-23T21:40:08Z",
"last_comment_author": "samuelkarp"
},
{
"number": 63,
"created_at": "2023-12-13T21:34:07Z",
"last_comment_at": "2023-12-14T11:18:41Z",
"last_comment_author": "kad"
},
{
"number": 64,
"created_at": "2024-01-11T09:57:17Z",
"last_comment_at": "2025-05-26T04:36:31Z",
"last_comment_author": "mythi"
},
{
"number": 65,
"created_at": "2024-01-25T22:53:57Z",
"last_comment_at": "2025-05-23T21:36:59Z",
"last_comment_author": "samuelkarp"
},
{
"number": 72,
"created_at": "2024-02-22T09:55:13Z",
"last_comment_at": "2025-08-16T08:37:04Z",
"last_comment_author": "ZiMengSheng"
},
{
"number": 77,
"created_at": "2024-04-12T08:12:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 80,
"created_at": "2024-05-07T12:26:03Z",
"last_comment_at": "2024-05-29T08:34:31Z",
"last_comment_author": "liangjingtao11"
},
{
"number": 83,
"created_at": "2024-05-13T07:56:24Z",
"last_comment_at": "2024-05-15T08:05:49Z",
"last_comment_author": "klihub"
},
{
"number": 86,
"created_at": "2024-05-22T21:10:50Z",
"last_comment_at": "2024-05-23T23:17:12Z",
"last_comment_author": "mikebrow"
},
{
"number": 99,
"created_at": "2024-07-11T11:50:23Z",
"last_comment_at": "2024-07-22T06:52:56Z",
"last_comment_author": "samuelkarp"
},
{
"number": 106,
"created_at": "2024-09-06T13:46:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 114,
"created_at": "2024-10-05T14:59:06Z",
"last_comment_at": "2026-04-16T10:04:26Z",
"last_comment_author": "Andreagit97"
},
{
"number": 122,
"created_at": "2024-11-19T09:22:28Z",
"last_comment_at": "2025-09-17T17:26:33Z",
"last_comment_author": "klihub"
},
{
"number": 127,
"created_at": "2024-12-12T09:19:25Z",
"last_comment_at": "2025-05-23T21:03:11Z",
"last_comment_author": "samuelkarp"
},
{
"number": 129,
"created_at": "2024-12-26T14:21:23Z",
"last_comment_at": "2025-05-23T21:01:36Z",
"last_comment_author": "samuelkarp"
},
{
"number": 142,
"created_at": "2025-01-02T03:17:26Z",
"last_comment_at": "2025-05-23T21:10:07Z",
"last_comment_author": "samuelkarp"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/containerd/nri",
"host": "github.com",
"name": "nri",
"owner": "containerd"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 51,
"vitality": 81,
"community": 59,
"governance": 78,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 181,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 35
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "35/52 weeks with commits",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 35
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "181 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 181
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v0.12.1",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 108.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~108.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 108.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 59,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"forks": 101,
"stars": 396,
"watchers": 31,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "396 stars",
"points": 42.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 396
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "101 forks",
"points": 16.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 101
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "31 watchers",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 31
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 78,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 45,
"top_contributor_share": 0.366
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 37% of commits",
"points": 14.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 37
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "45 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 45
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 56 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"merged_prs": 180,
"open_issues": 40,
"closed_issues": 28,
"issue_closed_ratio": 0.412,
"closed_unmerged_prs": 34
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "41% of issues closed",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 41
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "180/214 decided PRs merged",
"points": 32.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 180,
"decided": 214
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 1307,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "containerd",
"public_repos": 39,
"account_age_days": 3986
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,307 followers of containerd",
"points": 22.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1307,
"login": "containerd"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "39 public repos, account ~10 yr old",
"points": 23.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 39
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/containerd/nri"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 56 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "24 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 68,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.85,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "85 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 85,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"examples/go.mod",
"go.mod",
"plugins/device-injector/go.mod",
"plugins/differ/go.mod",
"plugins/hook-injector/go.mod",
"plugins/logger/go.mod",
"plugins/network-device-injector/go.mod",
"plugins/network-logger/go.mod",
"plugins/rdt/go.mod",
"plugins/template/go.mod",
"plugins/ulimit-adjuster/go.mod",
"plugins/v010-adapter/go.mod",
"plugins/wasm/go.mod",
"plugins/writable-cgroups/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 439028,
"source_files_sampled": 100,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/100 source files over 60KB",
"points": 53.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 100,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples",
"samples"
],
"has_mcp_signal": false,
"api_schema_files": [
"pkg/api/api.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "pkg/api/api.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "pkg/api/api.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples, samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples, samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T14:13:02.593177Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/containerd/nri.svg",
"full_name": "containerd/nri",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — Go.