Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"crossplane",
"crossplane-provider",
"sql"
],
"is_fork": false,
"size_kb": 1612,
"has_wiki": true,
"homepage": "https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/",
"languages": {
"Go": 1223131,
"Shell": 40324,
"Makefile": 8992,
"Dockerfile": 270
},
"pushed_at": "2026-07-28T10:33:37Z",
"created_at": "2020-10-05T04:45:23Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T10:33:53Z",
"description": "An SQL provider for @crossplane",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://crossplane.io",
"name": "Crossplane Contrib",
"type": "Organization",
"login": "crossplane-contrib",
"company": null,
"location": null,
"followers": 274,
"avatar_url": "https://avatars.githubusercontent.com/u/65389701?v=4",
"created_at": "2020-05-15T07:13:38Z",
"is_verified": null,
"public_repos": 140,
"account_age_days": 2266
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.16.0-beta.1",
"kind": "prerelease",
"published_at": "2026-07-27T11:16:04Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-07-20T10:28:27Z"
},
{
"tag": "v0.16.0-beta.0",
"kind": "prerelease",
"published_at": "2026-05-18T10:37:41Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-05-14T19:14:00Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-02-14T12:14:52Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2025-10-27T19:03:36Z"
},
{
"tag": "v0.13.0-rc.0",
"kind": "prerelease",
"published_at": "2025-10-22T18:03:36Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2025-05-27T18:40:24Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-01-15T09:44:27Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2024-12-13T14:38:35Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2024-01-24T19:59:02Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2024-01-24T19:57:12Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2023-03-23T09:48:05Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2022-11-22T14:00:51Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2022-05-19T12:13:55Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2022-03-22T07:40:59Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2022-03-21T08:30:31Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2021-11-26T21:23:33Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2021-08-27T10:12:23Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2021-05-12T22:44:17Z"
}
],
"recent_commits": [
{
"oid": "985277d98fb9f0ce663c9ca5766c611032e069b0",
"body": "The MSSQL `User` controller forced `CREATE LOGIN` on every `Create`, so\na second `User` sharing a server-level login (in a different database)\nfailed with \"server principal already exists\". This change makes login\ncreation idempotent so one login can back USERs across multiple\ndatabases.\n\nFor tradit\n[…]\niled. Delete guards `DROP LOGIN` behind the same existence check,\nso a sibling (or orphaned) login already being gone doesn't hard-fail.\n\nFixes #288\n\nSigned-off-by: Cristian Greco <cristian@regolo.cc>",
"is_bot": false,
"headline": "fix: allow multiple users to share the same login (#411)",
"author_name": "Cristian Greco",
"author_login": "cristiangreco",
"committed_at": "2026-07-28T10:33:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b46be88014cdc0c96755a106fe6bd8e64a6a16a0",
"body": "…s-in-marketplance\n\nchore: add provider extensions",
"is_bot": false,
"headline": "Merge pull request #420 from crossplane-contrib/419-missing-extension…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-20T13:51:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "936d69d6a3e7228a574e94ba9cf594eb5ae6a42e",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: add provider extensions",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-20T10:57:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29aa23afa2cf981fcc35625ff7221c7c45765e21",
"body": "…ster/images/provider-sql/distroless/static-f7f8f72\n\nchore: bump distroless/static from `963fa6c` to `f7f8f72` in /cluster/images/provider-sql",
"is_bot": false,
"headline": "Merge pull request #413 from crossplane-contrib/dependabot/docker/clu…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-20T10:10:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be0bb83193f1d219496cd6f20be6cad30fe2ceed",
"body": "…QL-password-for-role-after-restoration\n\nfeat(postgresql): auto-regenerate role password on restore and support rotation trigger",
"is_bot": false,
"headline": "Merge pull request #348 from JevgeniF/issue-227-generate-new-postgreS…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-20T08:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af3cd075b155d3a6a23bf5544206fe90d4b065ab",
"body": "…-for-role-after-restoration",
"is_bot": false,
"headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-20T08:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c639f124cbbf4c91caa2bc7e31a96ae7bc62b6aa",
"body": "feat(mysql/user): support non-default authentication plugins for IAM auth",
"is_bot": false,
"headline": "Merge pull request #363 from ronlevy1211/feat/mysql-iam-auth",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-20T07:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "254e67ef23c4cb53b7deb57a7cf4a0901d97c0a1",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/mysql-iam-auth",
"author_name": "ronlevy1211",
"author_login": "ronlevy1211",
"committed_at": "2026-07-19T20:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2ba201eab37cda411095e1c7a7ee8a3bc2685a8",
"body": "…ions/docker/setup-buildx-action-4.2.0\n\nchore: bump docker/setup-buildx-action from 4.1.0 to 4.2.0",
"is_bot": false,
"headline": "Merge pull request #414 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:51:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "219d37518d41bae3c35c8a0c224c5dc1d0d0e54f",
"body": "…-for-role-after-restoration",
"is_bot": false,
"headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35a113e3290bed5fcb09db2ba36a89813070c377",
"body": "…ldx-action-4.2.0",
"is_bot": false,
"headline": "Merge branch 'master' into dependabot/github_actions/docker/setup-bui…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:39:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f7a054aab60a99ecc5030c8aaec18851451eb1f",
"body": "…ions/actions/setup-go-7.0.0\n\nchore: bump actions/setup-go from 6.5.0 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #418 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:39:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e42e245ad86e65e3f0819fff3d35b38833e1f703",
"body": "…ions/docker/setup-qemu-action-4.2.0\n\nchore: bump docker/setup-qemu-action from 4.1.0 to 4.2.0",
"is_bot": false,
"headline": "Merge pull request #416 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:39:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91efda77b6dec0904476a5681990803b72341f75",
"body": "…ldx-action-4.2.0",
"is_bot": false,
"headline": "Merge branch 'master' into dependabot/github_actions/docker/setup-bui…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:39:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37651653e07fbfb9d7c76a4be90511ecfde16217",
"body": "…ions/actions/cache-6.1.0\n\nchore: bump actions/cache from 5.0.5 to 6.1.0",
"is_bot": false,
"headline": "Merge pull request #415 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:38:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf5323b600f2d00087e6e9b7469d5c4b439d7776",
"body": "…ions/docker/login-action-4.4.0\n\nchore: bump docker/login-action from 4.1.0 to 4.4.0",
"is_bot": false,
"headline": "Merge pull request #417 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d43db76858df999f568c292cd7f43830bc3185e3",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)\n\n---\nupdated\n[…]\n- dependency-name: actions/setup-go\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump actions/setup-go from 6.5.0 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:27:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8807ceeba91615458dc5f38a735666e682347d17",
"body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.4.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...af1e73f918a031802d376d3c8bbc3fe56130a9b0)\n\n[…]\nependency-name: docker/login-action\n dependency-version: 4.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump docker/login-action from 4.1.0 to 4.4.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:27:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0b8966bb1648bde58bf1f8d92086462e30f467e7",
"body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be\n[…]\nency-name: docker/setup-qemu-action\n dependency-version: 4.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump docker/setup-qemu-action from 4.1.0 to 4.2.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:27:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e8e1e9f6000acd5108d99d347371709b188578e4",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fcca\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 6.1.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump actions/cache from 5.0.5 to 6.1.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:27:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5025f5a2aca5832ecc4381bda62fb13ad1f414da",
"body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd8\n[…]\ncy-name: docker/setup-buildx-action\n dependency-version: 4.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump docker/setup-buildx-action from 4.1.0 to 4.2.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:27:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d687e4b49045df91058be372d477cafc737dd6db",
"body": "Bumps distroless/static from `963fa6c` to `f7f8f72`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n dependency-version: nonroot\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump distroless/static in /cluster/images/provider-sql",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:26:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "699502173964485ab2f5c1f22881103ed10d7b70",
"body": "chore(build): codeql broken - sync versions to 4.37.1",
"is_bot": false,
"headline": "Merge pull request #412 from chlunde/codeql-sync",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:26:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff12ac0ed7f4cf7f6a169e3ef221cb5c393ef0c1",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into codeql-sync",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-19T07:14:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7addde329901acd5306946a1e4c1eb2f9d2f7876",
"body": "…efaultPrivileges (#379)\n\n* fix(postgresql): remove schema from DefaultPrivileges objectType enum\n\nSigned-off-by: AGejr <albert.gejr@gmail.com>\n\n* Revert \"fix(postgresql): remove schema from DefaultPrivileges objectType enum\"\n\nThis reverts commit 1a66e40c879f1e6747e1c286d756eaae6e227aa0.\n\nSigned-off\n[…]\nDefaultPrivileges\n\nSigned-off-by: AGejr <albert.gejr@gmail.com>\n\n---------\n\nSigned-off-by: AGejr <albert.gejr@gmail.com>\nCo-authored-by: J. Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(postgresql): make schema optional and conditionally required in D…",
"author_name": "Albert Gejr",
"author_login": "AGejr",
"committed_at": "2026-07-18T18:28:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "505d2ececafa4c92d40e809a3ef31751c2c4ff19",
"body": "…pen action PRs\n\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
"is_bot": false,
"headline": "chore(dependabot): ensure codeql actions are in sync and dont limit o…",
"author_name": "Carl Henrik Lunde",
"author_login": "chlunde",
"committed_at": "2026-07-18T18:05:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f566df5b7a4f81e2935151806e046975fd71799",
"body": "Signed-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
"is_bot": false,
"headline": "chore(build): codeql broken - sync versions to 4.37.1",
"author_name": "Carl Henrik Lunde",
"author_login": "chlunde",
"committed_at": "2026-07-18T17:56:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7628125c5fac43066e3d12b413638a38b796ab9",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-version: 0.55.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump golang.org/x/net from 0.54.0 to 0.55.0 (#407)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T16:24:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75b4745868fbe5d7803a6100dd7817fe2e1bdd08",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/mysql-iam-auth",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-17T16:17:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e57fb1cd1ce6030595485ec877c7031efc1bd343",
"body": "…-for-role-after-restoration",
"is_bot": false,
"headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-17T16:12:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b9a0d1addbef23481994c1a54c22379ca003321",
"body": "…ions/golangci/golangci-lint-action-9.3.0\n\nchore: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0",
"is_bot": false,
"headline": "Merge pull request #402 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-17T16:10:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a686fbe39c78c1aced914529a98f5a35adba8dc0",
"body": "…d infinite reconcile\n\nObserve() unconditionally treated password plugins (caching_sha2_password,\nmysql_native_password, sha256_password) as \"no plugin\", so when the spec\nexplicitly requested one the observed AuthenticationPlugin stayed nil and\nupToDate() could never converge. The User then reconcil\n[…]\nser reconcilers, each with a\nregression test that reproduces the infinite reconcile.\n\nSigned-off-by: ronlevy <rlevy@fireblocks.com>\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mysql/user): hydrate observed plugin for password plugins to avoi…",
"author_name": "ronlevy",
"author_login": "ronlevy1211",
"committed_at": "2026-07-14T06:25:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e412ffdbe42f7d2b5942b31fcfc304a2b2d18df2",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/mysql-iam-auth",
"author_name": "ronlevy1211",
"author_login": "ronlevy1211",
"committed_at": "2026-07-14T05:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9665c434424129d54f2bc265f5921fa3dab29581",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.52.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.52.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump golang.org/x/crypto from 0.50.0 to 0.52.0 (#408)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-09T16:04:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d557e3b1df99f17f5a5c0c4d97a7153f7e62a55b",
"body": "…or-postgres-database-1\n\nfix: add missing ownerRef+ownerSelector field",
"is_bot": false,
"headline": "Merge pull request #377 from crossplane-contrib/372-support-roleref-f…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T15:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32918fc9bfea3cc7777ebe37e68b7ca171382270",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into 372-support-roleref-for-postgres-database-1",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T15:04:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a76bde9446e13719cfee548bc2aefd47230c5550",
"body": "…tance\n\nfeat(postgresql): support WITH INHERIT FALSE on role membership grants (PostgreSQL 16+)",
"is_bot": false,
"headline": "Merge pull request #361 from matthewgreenwaldagility/feat/psql-inheri…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T14:54:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a61926829fd27b35b624d97c14f3aa5904c48b00",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into 372-support-roleref-for-postgres-database-1",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T14:44:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "185499fe0428d7bfd196795cd625a2f9328c8e00",
"body": "Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\nSigned-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "Apply suggestions from code review",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T14:44:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "12f39325f889550d0ccfdfcc50d655da205a5270",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: do not set selector/ref as immutable",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T14:43:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27bb57ed51c28c7916a79c68d978286beb14f9bd",
"body": "Signed-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
"is_bot": false,
"headline": "code review suggestions and test fixes",
"author_name": "Jevgeni Fenko",
"author_login": "JevgeniF",
"committed_at": "2026-07-09T08:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab87bea269ed579c2e350c3aeda9a569d4661c49",
"body": "Co-authored-by: J. Fernández <7312236+fernandezcuesta@users.noreply.github.com>\nSigned-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
"is_bot": false,
"headline": "Update pkg/controller/cluster/postgresql/role/utils.go",
"author_name": "Jevgeni",
"author_login": "JevgeniF",
"committed_at": "2026-07-09T08:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ebda031dc4fe96b58663b87f8f016d81e511893",
"body": "Co-authored-by: J. Fernández <7312236+fernandezcuesta@users.noreply.github.com>\nSigned-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
"is_bot": false,
"headline": "Update pkg/controller/cluster/postgresql/role/utils.go",
"author_name": "Jevgeni",
"author_login": "JevgeniF",
"committed_at": "2026-07-09T08:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a30e415559243474dffc140658a5df18972fc502",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/psql-inheritance",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T07:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0fd0dad529c6629be01792bdd765d4660d086d0",
"body": "…ions/github/codeql-action/analyze-4.36.2\n\nchore: bump github/codeql-action/analyze from 4.36.0 to 4.36.2",
"is_bot": false,
"headline": "Merge pull request #401 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T06:18:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f55394fda520d87a9772c1f35c8bfdd033216444",
"body": "…i-lint-action-9.3.0",
"is_bot": false,
"headline": "Merge branch 'master' into dependabot/github_actions/golangci/golangc…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-09T06:18:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6dbd795131384cc813be1af7d1a928b28328980",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/psql-inheritance",
"author_name": "Matthew Greenwald",
"author_login": "matthewgreenwaldagility",
"committed_at": "2026-07-08T18:07:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91fbbece63ffebd7e2307857cc449d518366cefb",
"body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
"is_bot": false,
"headline": "test: add PG<16 withInherit error path tests; revert build submodule",
"author_name": "Matthew Greenwald",
"author_login": "matthewgreenwaldagility",
"committed_at": "2026-07-08T18:05:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa831f83c66f127321a145e972e7056e8489c5fc",
"body": "…-for-role-after-restoration",
"is_bot": false,
"headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
"author_name": "Jevgeni",
"author_login": "JevgeniF",
"committed_at": "2026-07-06T08:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce9a59f97eb2bb9032df06b067e7133b769887f3",
"body": "Signed-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
"is_bot": false,
"headline": "fix: avoid silent ignore of errors in shouldResetPassword",
"author_name": "Jevgeni Fenko",
"author_login": "JevgeniF",
"committed_at": "2026-07-06T07:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "294f8328cabd46f42f5853c335b76fcdda1c069d",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/mysql-iam-auth",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-05T19:29:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbebae568438d7b80d7a5dc327f81004ddce1f39",
"body": "…ions/codecov/codecov-action-7.0.0\n\nchore: bump codecov/codecov-action from 6.0.1 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #400 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-05T19:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9116f1f27c2cbf99390c316f39134fae6c0abf8e",
"body": "…ions/actions/checkout-7.0.0\n\nchore: bump actions/checkout from 6.0.2 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #403 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-05T19:23:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c39e2ed8434bc501f4e73fb2fe5846984cda878",
"body": "…ions/actions/setup-go-6.5.0\n\nchore: bump actions/setup-go from 6.4.0 to 6.5.0",
"is_bot": false,
"headline": "Merge pull request #404 from crossplane-contrib/dependabot/github_act…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-07-05T19:23:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fcc740a5110e90af9feee5b7be1673a5b01ae24",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)\n\n---\nupdated\n[…]\n- dependency-name: actions/setup-go\n dependency-version: 6.5.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump actions/setup-go from 6.4.0 to 6.5.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T03:34:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a636dbe048bc2e891ce4abaa58f4de7ef20fa73",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump actions/checkout from 6.0.2 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T03:34:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ca35d018acb7854bec53f15795ee678527c2948b",
"body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.1 to 9.3.0.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/82606bf257cbaff209d206a39f5134f0cfbfd2ee...ba\n[…]\nname: golangci/golangci-lint-action\n dependency-version: 9.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T03:34:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98c58bf2d64045ba4c947d80a78d5e3615180571",
"body": "Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/c\n[…]\nname: github/codeql-action/analyze\n dependency-version: 4.36.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump github/codeql-action/analyze from 4.36.0 to 4.36.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T03:34:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "90ce80664825ba4ca5fca5fc1d65701d55e25741",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/c\n[…]\nndency-name: codecov/codecov-action\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore: bump codecov/codecov-action from 6.0.1 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T03:34:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31ce2b305c91ddac79ba4064d85fd22ba6401b4e",
"body": "…-for-role-after-restoration",
"is_bot": false,
"headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
"author_name": "Jevgeni",
"author_login": "JevgeniF",
"committed_at": "2026-06-15T13:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbfc64a276560888bc11b8476af3b126292e0bef",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into 372-support-roleref-for-postgres-database-1",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-06-08T19:10:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee979cfdf62ad8375e12ab17f153848059fe2d14",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/mysql-iam-auth",
"author_name": "ronlevy1211",
"author_login": "ronlevy1211",
"committed_at": "2026-06-08T07:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba992159ea669bc4559cfe937ac1f05ca6727173",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/psql-inheritance",
"author_name": "Matthew Greenwald",
"author_login": "matthewgreenwaldagility",
"committed_at": "2026-06-04T14:27:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f42e34d893b8712518d3399da76d436243271a06",
"body": "Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.9.3 to 1.10.0.\n- [Release notes](https://github.com/go-sql-driver/mysql/releases)\n- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/go-sql-driver/mysql/co\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#383)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T07:00:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c94aa27b7a2a9ce9bd166baee4e7feccba2cdf65",
"body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dc\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 (#384)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T06:59:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3676bf3b80dfd6d8a4db5e375e49ba6908d61cc6",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 6.0.1.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump codecov/codecov-action from 6.0.0 to 6.0.1 (#385)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T06:49:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7ce0411aed765b48d9c233da9bc52241a9e2445c",
"body": "Bumps distroless/static from `e3f9456` to `963fa6c`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n dependency-version: nonroot\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump distroless/static in /cluster/images/provider-sql (#389)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T06:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79f930e981581dfdb7ea6df1d882aa3683b7421b",
"body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.0 to 9.2.1.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/1e7e51e771db61008b38414a730f564565cf7c20...82\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#386)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T06:43:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6b2f021b654205695f0972e5ecc7cdcadc960e35",
"body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.36.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump github/codeql-action from 4.35.4 to 4.36.0 (#387)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T06:43:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "321f8fbcd82f5c7c28eb763a90536f32ba0c596a",
"body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45c\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#388)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-01T06:42:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1ea143cd018716cf0083074a0d8bf38374c92be",
"body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
"is_bot": false,
"headline": "addressing comments and rebasing from master",
"author_name": "Matthew Greenwald",
"author_login": "matthewgreenwaldagility",
"committed_at": "2026-05-28T14:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fda19470ed9143b9d7f76732a2559a7e9b57c4cb",
"body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
"is_bot": false,
"headline": "docs: updating docs for other contributors",
"author_name": "Matthew Greenwald",
"author_login": "matthewgreenwaldagility",
"committed_at": "2026-05-28T13:22:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b24c089ad9217b29e55d02ba144670d894e95b38",
"body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
"is_bot": false,
"headline": "feat: adding support for psql inherit",
"author_name": "Matthew Greenwald",
"author_login": "matthewgreenwaldagility",
"committed_at": "2026-05-28T13:22:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "746612c9b5f7b1fc7dba3edac5d146e799d7bc04",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: add tests",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-18T20:23:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16dd8cf340a70059a4479af6ce14266280459c73",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: add missing ownerRef and ownerSelector fields",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-18T20:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3aedb16f7689a244c1df3d3166b378ee6f64a42",
"body": "CI on the post-master-merge HEAD failed on two checks:\n\n- lint (gocyclo) — the Update function in both cluster and namespaced\n reconcilers had cyclomatic complexity 11 (limit 10). Extracted the\n resource-options drift branch into a small updateResourceOptions\n helper. Behavior unchanged: same ALT\n[…]\nit was not yet\n reflected in the generated CRDs. Ran `make generate` so the\n rendered schema matches the typed Go source.\n\nTests pass on both packages.\n\nSigned-off-by: ronlevy <rlevy@fireblocks.com>",
"is_bot": false,
"headline": "fix(mysql/user): keep Update under gocyclo limit + regen CRDs",
"author_name": "ronlevy",
"author_login": "ronlevy1211",
"committed_at": "2026-05-18T05:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be673c47fe6a2c49d563db1f97163d24282ef96a",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/mysql-iam-auth",
"author_name": "ronlevy1211",
"author_login": "ronlevy1211",
"committed_at": "2026-05-17T06:37:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12cd32253a438c5830cb8857e5d55a44c619a027",
"body": "Address @chlunde's review on #363: Observe didn't read the user's\nactual `plugin` from mysql.user, and Update silently ignored\nauthenticationPlugin changes. Crossplane managed resources should\nreconcile every field the upstream system supports.\n\nChanges:\n\n Observe — extend the SELECT to also fetch \n[…]\nerent AS clause)\n - existing AuthenticationPluginSkipsAlterPassword updated to set\n observed == desired and now asserts no IDENTIFIED WITH OR BY runs\n\nSigned-off-by: ronlevy <rlevy@fireblocks.com>",
"is_bot": false,
"headline": "feat(mysql/user): plugin drift detection and Update support",
"author_name": "ronlevy",
"author_login": "ronlevy1211",
"committed_at": "2026-05-17T06:25:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "271b3c90544a4c0b7ad33b5260fb25c4dda3da73",
"body": "…-format\n\nfeat: add support for alternative connection secret formats",
"is_bot": false,
"headline": "Merge pull request #362 from crossplane-contrib/feat/customize-secret…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T08:37:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3661f4018c9e3fa500fc6bf7189809195b7c182e",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: kube version in make",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T08:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7472ea931120f0f9826d3730516ccba55c69ec51",
"body": "…-for-role-after-restoration",
"is_bot": false,
"headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T08:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40e834d8cb2aaaf0bb3a83959c4c039af16f9bd9",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "chore(docs)",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T08:16:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "693937e55c358ee28a06e1d129e28cf7f344b500",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: move secret key mapping example",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T08:14:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8784f434b6349934c1cf59c20a19f7375c8e5010",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into feat/customize-secret-format",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:57:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a539437c4adbd866ff275bb595b51e316fbe2265",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "chore(docs): add examples",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:54:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d38b4d1173e0b907b4260f7a22a91d4cdb4c2c4",
"body": "The difference between TLS and non-TLS doesn't make it worth running\nboth on e2e. We already try both in cluster vs namespaced mode.\n\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
"is_bot": false,
"headline": "chore: e2e: remove redundant mariadb e2e tests (#373)",
"author_name": "Carl Henrik Lunde",
"author_login": "chlunde",
"committed_at": "2026-05-15T07:43:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "586a8252865edf026aa9d6977b39ccbf71baae82",
"body": "feat(pgsql): extend Grant kind specification with schema, tables, columns, sequences, routines, foreign data wrappers, foreign servers",
"is_bot": false,
"headline": "Merge pull request #345 from crossplane-contrib/follow-up-235",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:43:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5502d7ba48541a7ff3a5bc935972794b06ed76e4",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "Merge branch 'master' into feat/customize-secret-format",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:38:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d945277d344273090db9756249dcae276c3e1742",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into follow-up-235",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:28:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95daf7c4d99820d6fc38cf35c59f6fc3e9f5543d",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: typo",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:24:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2427cb6f1c7f7607c39eaf183b9ab56f1e85919",
"body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: move GetServerVersion call from Observe/Create into Connect",
"author_name": "Jesús Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:24:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c0ee25c751d73347846bf0e6bfa4ef57320b1e7",
"body": "Co-authored-by: Carl Henrik Lunde <chlunde@gmail.com>",
"is_bot": false,
"headline": "Apply suggestions from code review",
"author_name": "J. Fernández",
"author_login": "fernandezcuesta",
"committed_at": "2026-05-15T07:16:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6134e47157d417a8749fcb6503b4631a8abfeac",
"body": "…(#330)\n\n* feat(mysql): Allow to Grant permissions on specific columns in table\nmysql: add e2e tests to cover granting permission on table\n\nSigned-off-by: ymaniukevich <yauheni.maniukevich@gmail.com>\nSigned-off-by: Yauheni Maniukevich <yauheni.maniukevich@gmail.com>\n\n* Fix regexp for stricter syntax\n[…]\nd-off-by: Yauheni Maniukevich <yauheni.maniukevich@gmail.com>\n\n---------\n\nSigned-off-by: ymaniukevich <yauheni.maniukevich@gmail.com>\nSigned-off-by: Yauheni Maniukevich <yauheni.maniukevich@gmail.com>",
"is_bot": false,
"headline": "feat(mysql): Allow to Grant permissions on specific columns in table …",
"author_name": "Yauheni",
"author_login": "ymaniukevich",
"committed_at": "2026-05-14T22:05:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3aac97c71a4d8b2f4070717c0322065dd3adb8dc",
"body": "…#343)\n\n* feat(postgres): Add support for setting STRATEGY during db creation\n\nAdd PostgreSQL Database strategy support for template-based database creation and make its lifecycle explicit in the API. The new strategy field is treated as create-time-only, and validated so updates do not silently dri\n[…]\nrodoulis <aldor94@gmail.com>\n\n* fix: correct kubebuilder validation rules\n\nSigned-off-by: Alexandros Dorodoulis <aldor94@gmail.com>\n\n---------\n\nSigned-off-by: Alexandros Dorodoulis <aldor94@gmail.com>",
"is_bot": false,
"headline": "feat(postgres): Add support for setting STRATEGY during db creation (…",
"author_name": "Alexandros Dorodoulis",
"author_login": "alexdor",
"committed_at": "2026-05-14T20:47:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce2184fb9caf2dc8e2b85cb3fc84c68f19216e35",
"body": "… 2.2.1 (#366)\n\n* chore: bump github.com/crossplane/crossplane-runtime/v2\n\nBumps [github.com/crossplane/crossplane-runtime/v2](https://github.com/crossplane/crossplane-runtime) from 2.1.0 to 2.2.1.\n- [Release notes](https://github.com/crossplane/crossplane-runtime/releases)\n- [Changelog](https://git\n[…]\nub.com>\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
"is_bot": true,
"headline": "chore: bump github.com/crossplane/crossplane-runtime/v2 from 2.1.0 to…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T20:21:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e5cd72d18253447b1da949528b56fbe4467b52ce",
"body": "* chore: bump github.com/lib/pq from 1.11.2 to 1.12.3\n\nBumps [github.com/lib/pq](https://github.com/lib/pq) from 1.11.2 to 1.12.3.\n- [Release notes](https://github.com/lib/pq/releases)\n- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/lib/pq/compare/v1.\n[…]\nub.com>\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
"is_bot": true,
"headline": "chore: bump github.com/lib/pq from 1.11.2 to 1.12.3 (#365)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T19:53:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4eb5d8aa7dbbf2f5892beb4292887f53a2fbca7b",
"body": "Bumps [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) from 1.39.0 to 1.41.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](https://gith\n[…]\nel\n dependency-version: 1.41.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 (#360)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T19:43:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a42cef5ea6aa405be4a2138664185423ae9e2902",
"body": "Bumps distroless/static from `f512d81` to `e3f9456`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n dependency-version: nonroot\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump distroless/static in /cluster/images/provider-sql (#356)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T19:28:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f5b05b08d573e7cad9a815cf6c5be510e81d475",
"body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump github/codeql-action from 4.35.1 to 4.35.4 (#369)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T19:28:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78d298968d7e522e5e7c5d12bd39af2a8bd22dd2",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump actions/upload-artifact from 7.0.0 to 7.0.1 (#368)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T19:25:36Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 20,
"commits_last_year": 218,
"latest_release_at": "2026-07-27T11:16:04Z",
"latest_release_tag": "v0.16.0-beta.1",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 26,
"days_since_latest_release": 2,
"mean_days_between_releases": 65.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/crossplane-contrib/provider-sql",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/crossplane-contrib/provider-sql",
"is_deprecated": false,
"latest_version": "v0.16.0",
"repository_url": "https://github.com/crossplane-contrib/provider-sql",
"versions_count": 25,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T10:10:13Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 112,
"stars": 154,
"watchers": 5,
"fork_history": {
"days": [
{
"date": "2020-11-18",
"count": 1
},
{
"date": "2020-12-12",
"count": 1
},
{
"date": "2020-12-18",
"count": 1
},
{
"date": "2021-03-08",
"count": 1
},
{
"date": "2021-03-31",
"count": 1
},
{
"date": "2021-04-12",
"count": 1
},
{
"date": "2021-04-16",
"count": 1
},
{
"date": "2021-04-22",
"count": 1
},
{
"date": "2021-05-10",
"count": 1
},
{
"date": "2021-05-14",
"count": 1
},
{
"date": "2022-01-22",
"count": 1
},
{
"date": "2022-02-04",
"count": 1
},
{
"date": "2022-02-28",
"count": 1
},
{
"date": "2022-03-22",
"count": 1
},
{
"date": "2022-03-24",
"count": 1
},
{
"date": "2022-04-07",
"count": 1
},
{
"date": "2022-04-08",
"count": 2
},
{
"date": "2022-04-11",
"count": 1
},
{
"date": "2022-05-12",
"count": 1
},
{
"date": "2022-07-16",
"count": 1
},
{
"date": "2022-10-25",
"count": 1
},
{
"date": "2022-10-30",
"count": 1
},
{
"date": "2022-11-10",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-23",
"count": 1
},
{
"date": "2022-12-01",
"count": 1
},
{
"date": "2022-12-11",
"count": 1
},
{
"date": "2022-12-20",
"count": 1
},
{
"date": "2023-02-02",
"count": 1
},
{
"date": "2023-03-29",
"count": 1
},
{
"date": "2023-04-17",
"count": 1
},
{
"date": "2023-05-17",
"count": 1
},
{
"date": "2023-07-26",
"count": 1
},
{
"date": "2023-07-27",
"count": 1
},
{
"date": "2023-08-09",
"count": 1
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-08-31",
"count": 1
},
{
"date": "2023-09-14",
"count": 1
},
{
"date": "2023-11-10",
"count": 1
},
{
"date": "2023-11-26",
"count": 1
},
{
"date": "2023-12-04",
"count": 1
},
{
"date": "2023-12-20",
"count": 1
},
{
"date": "2024-01-04",
"count": 1
},
{
"date": "2024-02-08",
"count": 1
},
{
"date": "2024-02-13",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-04-26",
"count": 1
},
{
"date": "2024-05-28",
"count": 1
},
{
"date": "2024-06-17",
"count": 1
},
{
"date": "2024-06-22",
"count": 1
},
{
"date": "2024-06-29",
"count": 1
},
{
"date": "2024-07-01",
"count": 1
},
{
"date": "2024-07-04",
"count": 1
},
{
"date": "2024-09-19",
"count": 1
},
{
"date": "2024-09-24",
"count": 1
},
{
"date": "2024-10-11",
"count": 1
},
{
"date": "2024-10-12",
"count": 1
},
{
"date": "2024-10-15",
"count": 1
},
{
"date": "2024-10-18",
"count": 1
},
{
"date": "2024-10-25",
"count": 1
},
{
"date": "2024-10-26",
"count": 1
},
{
"date": "2024-12-28",
"count": 1
},
{
"date": "2025-02-16",
"count": 1
},
{
"date": "2025-04-17",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-05-27",
"count": 1
},
{
"date": "2025-06-03",
"count": 1
},
{
"date": "2025-06-20",
"count": 1
},
{
"date": "2025-07-18",
"count": 1
},
{
"date": "2025-07-22",
"count": 1
},
{
"date": "2025-08-12",
"count": 1
},
{
"date": "2025-08-19",
"count": 2
},
{
"date": "2025-08-22",
"count": 1
},
{
"date": "2025-10-06",
"count": 2
},
{
"date": "2025-10-09",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-15",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2025-12-05",
"count": 1
},
{
"date": "2025-12-12",
"count": 1
},
{
"date": "2025-12-29",
"count": 1
},
{
"date": "2026-01-28",
"count": 1
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-17",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-03-12",
"count": 1
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-28",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-12",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-07-01",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-27",
"count": 1
}
],
"complete": true,
"collected": 111,
"total_forks": 112
},
"star_history": null,
"open_issues_and_prs": 57
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"cluster/images/provider-sql/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 46558,
"source_files_sampled": 172,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.79.3",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GO-2026-6061"
],
"fixed_version": "1.82.1",
"advisory_count": 2,
"oldest_advisory_days": 7
},
{
"name": "github.com/yuin/goldmark",
"direct": false,
"version": "v1.4.13",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5320"
],
"fixed_version": "1.7.17",
"advisory_count": 1,
"oldest_advisory_days": 21
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.41.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5158"
],
"fixed_version": "1.44.0",
"advisory_count": 1,
"oldest_advisory_days": 4
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.52.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 21
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5942"
],
"fixed_version": "0.56.0",
"advisory_count": 1,
"oldest_advisory_days": 14
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 14
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 5,
"critical": 1
},
"advisory_count": 7,
"affected_count": 6,
"assessed_count": 115,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/DATA-DOG/go-sqlmock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.2"
},
{
"name": "github.com/alecthomas/kingpin/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "github.com/crossplane/crossplane-runtime/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.1"
},
{
"name": "github.com/crossplane/crossplane-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250731192036-00d407d8b7ec"
},
{
"name": "github.com/crossplane/upjet/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.0"
},
{
"name": "github.com/go-sql-driver/mysql",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.3"
},
{
"name": "github.com/microsoft/go-mssqldb",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/pkg/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.0"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.0"
},
{
"name": "k8s.io/utils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260108192941-914a6e750570"
},
{
"name": "sigs.k8s.io/controller-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.23.1"
},
{
"name": "sigs.k8s.io/controller-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/alecthomas/kingpin/v2",
"direct": true,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/crossplane/crossplane-runtime/v2",
"direct": true,
"version": "v2.2.1",
"ecosystem": "go"
},
{
"name": "github.com/crossplane/crossplane-tools",
"direct": true,
"version": "v0.0.0-20250731192036-00d407d8b7ec",
"ecosystem": "go"
},
{
"name": "github.com/crossplane/upjet/v2",
"direct": true,
"version": "v2.2.0",
"ecosystem": "go"
},
{
"name": "github.com/data-dog/go-sqlmock",
"direct": true,
"version": "v1.5.2",
"ecosystem": "go"
},
{
"name": "github.com/go-sql-driver/mysql",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": true,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": true,
"version": "v1.12.3",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-mssqldb",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": true,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "k8s.io/api",
"direct": true,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "k8s.io/apimachinery",
"direct": true,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "k8s.io/utils",
"direct": true,
"version": "v0.0.0-20260108192941-914a6e750570",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/controller-runtime",
"direct": true,
"version": "v0.23.1",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/controller-tools",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "filippo.io/edwards25519",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/agext/levenshtein",
"direct": false,
"version": "v1.2.3",
"ecosystem": "go"
},
{
"name": "github.com/alecthomas/units",
"direct": false,
"version": "v0.0.0-20240927000941-0f3dac36c52b",
"ecosystem": "go"
},
{
"name": "github.com/antchfx/htmlquery",
"direct": false,
"version": "v1.2.4",
"ecosystem": "go"
},
{
"name": "github.com/antchfx/xpath",
"direct": false,
"version": "v1.3.6",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v15",
"direct": false,
"version": "v15.0.0",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/blang/semver/v4",
"direct": false,
"version": "v4.0.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v5",
"direct": false,
"version": "v5.0.3",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/dave/jennifer",
"direct": false,
"version": "v1.7.1",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/go-restful/v3",
"direct": false,
"version": "v3.13.0",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch",
"direct": false,
"version": "v5.9.11+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": false,
"version": "v5.9.11",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/fxamacker/cbor/v2",
"direct": false,
"version": "v2.9.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/zapr",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v0.22.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v0.21.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/cmdutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/conv",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/fileutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/jsonname",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/jsonutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/loading",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/mangling",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/netutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/stringutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/typeutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/yamlutils",
"direct": false,
"version": "v0.25.4",
"ecosystem": "go"
},
{
"name": "github.com/gobuffalo/flect",
"direct": false,
"version": "v1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/golang-sql/civil",
"direct": false,
"version": "v0.0.0-20220223132316-b832511892a9",
"ecosystem": "go"
},
{
"name": "github.com/golang-sql/sqlexp",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/golang/groupcache",
"direct": false,
"version": "v0.0.0-20210331224755-41bb18bfe9da",
"ecosystem": "go"
},
{
"name": "github.com/google/btree",
"direct": false,
"version": "v1.1.3",
"ecosystem": "go"
},
{
"name": "github.com/google/gnostic-models",
"direct": false,
"version": "v0.7.1",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hcl/v2",
"direct": false,
"version": "v2.23.0",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-wordwrap",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.3-0.20250322232337-35a7c28c31ee",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": false,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.67.5",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.19.2",
"ecosystem": "go"
},
{
"name": "github.com/shopspring/decimal",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": false,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.10",
"ecosystem": "go"
},
{
"name": "github.com/tmccombs/hcl2json",
"direct": false,
"version": "v0.3.3",
"ecosystem": "go"
},
{
"name": "github.com/x448/float16",
"direct": false,
"version": "v0.8.4",
"ecosystem": "go"
},
{
"name": "github.com/xhit/go-str2duration/v2",
"direct": false,
"version": "v2.1.0",
"ecosystem": "go"
},
{
"name": "github.com/yuin/goldmark",
"direct": false,
"version": "v1.4.13",
"ecosystem": "go"
},
{
"name": "github.com/zclconf/go-cty",
"direct": false,
"version": "v1.16.2",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.41.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.41.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": false,
"version": "v1.27.1",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.3",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": false,
"version": "v3.0.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.52.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.34.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.43.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.14.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.44.0",
"ecosystem": "go"
},
{
"name": "gomodules.xyz/jsonpatch/v2",
"direct": false,
"version": "v2.5.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260203192932-546029d2fa20",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.79.3",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/evanphx/json-patch.v4",
"direct": false,
"version": "v4.13.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/inf.v0",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "k8s.io/apiextensions-apiserver",
"direct": false,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "k8s.io/client-go",
"direct": false,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "k8s.io/code-generator",
"direct": false,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "k8s.io/component-base",
"direct": false,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "k8s.io/gengo/v2",
"direct": false,
"version": "v2.0.0-20251215205346-5ee0d033ba5b",
"ecosystem": "go"
},
{
"name": "k8s.io/klog/v2",
"direct": false,
"version": "v2.130.1",
"ecosystem": "go"
},
{
"name": "k8s.io/kube-openapi",
"direct": false,
"version": "v0.0.0-20260127142750-a19766b6e2d4",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/json",
"direct": false,
"version": "v0.0.0-20250730193827-2d320260d730",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/randfill",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/structured-merge-diff/v6",
"direct": false,
"version": "v6.3.2-0.20260122202528-d9cc6641c482",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 115,
"direct_count": 15,
"indirect_count": 100
}
},
"maintainership": {
"issues": {
"open_prs": 20,
"merged_prs": 206,
"open_issues": 37,
"closed_ratio": 0.736,
"closed_issues": 103,
"closed_unmerged_prs": 57
},
"bus_factor": 4,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "fernandezcuesta",
"commits": 85,
"avatar_url": "https://avatars.githubusercontent.com/u/7312236?v=4"
},
{
"type": "User",
"login": "Duologic",
"commits": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/3349855?v=4"
},
{
"type": "User",
"login": "negz",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/1049349?v=4"
},
{
"type": "User",
"login": "chlunde",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/131994?v=4"
},
{
"type": "User",
"login": "srueg",
"commits": 29,
"avatar_url": "https://avatars.githubusercontent.com/u/1105286?v=4"
},
{
"type": "User",
"login": "turkenh",
"commits": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/9900707?v=4"
},
{
"type": "User",
"login": "JevgeniF",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/92082732?v=4"
},
{
"type": "User",
"login": "petteja",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/3305362?v=4"
},
{
"type": "User",
"login": "jdotw",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/222656?v=4"
},
{
"type": "User",
"login": "Sabotaz",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/187283?v=4"
}
],
"contributors_sampled": 46,
"top_contributor_share": 0.235
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"codeql.yml",
"publish-provider-package.yml",
"tag.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 15 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 4,
"reason": "6 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "985277d98fb9f0ce663c9ca5766c611032e069b0",
"ran_at": "2026-07-29T12:52:18Z",
"aggregate_score": 6.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T10:46:08Z",
"oldest_open_prs": [
{
"number": 133,
"created_at": "2023-03-06T18:21:32Z",
"last_comment_at": "2025-11-06T14:55:53Z",
"last_comment_author": "mlubanski"
},
{
"number": 166,
"created_at": "2023-12-04T16:38:23Z",
"last_comment_at": "2025-03-11T13:23:34Z",
"last_comment_author": "bak-fts"
},
{
"number": 237,
"created_at": "2025-05-23T16:30:22Z",
"last_comment_at": "2025-05-27T18:48:31Z",
"last_comment_author": "chlunde"
},
{
"number": 238,
"created_at": "2025-05-27T09:03:14Z",
"last_comment_at": "2025-06-03T14:44:38Z",
"last_comment_author": "zregvart"
},
{
"number": 239,
"created_at": "2025-05-30T13:41:07Z",
"last_comment_at": "2025-05-30T14:02:54Z",
"last_comment_author": "chlunde"
},
{
"number": 287,
"created_at": "2025-11-27T07:32:07Z",
"last_comment_at": "2026-05-28T23:48:09Z",
"last_comment_author": "terwey"
},
{
"number": 357,
"created_at": "2026-04-09T20:37:03Z",
"last_comment_at": "2026-05-15T08:50:21Z",
"last_comment_author": "fernandezcuesta"
},
{
"number": 376,
"created_at": "2026-05-18T20:07:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 381,
"created_at": "2026-05-27T22:41:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 382,
"created_at": "2026-06-01T06:28:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 391,
"created_at": "2026-06-02T15:58:47Z",
"last_comment_at": "2026-06-02T22:36:02Z",
"last_comment_author": "fernandezcuesta"
},
{
"number": 394,
"created_at": "2026-06-04T07:55:53Z",
"last_comment_at": "2026-06-04T09:07:21Z",
"last_comment_author": "fernandezcuesta"
},
{
"number": 396,
"created_at": "2026-06-20T04:19:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 399,
"created_at": "2026-07-01T03:34:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 405,
"created_at": "2026-07-01T13:30:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 421,
"created_at": "2026-07-20T12:46:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 423,
"created_at": "2026-07-22T08:04:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 424,
"created_at": "2026-07-22T19:00:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 425,
"created_at": "2026-07-23T07:40:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 426,
"created_at": "2026-07-25T02:53:40Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-28T10:33:37Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 51,
"created_at": "2021-08-30T17:36:29Z",
"last_comment_at": "2025-02-18T08:25:17Z",
"last_comment_author": "chlunde"
},
{
"number": 72,
"created_at": "2022-03-18T11:08:23Z",
"last_comment_at": "2025-02-20T17:00:39Z",
"last_comment_author": "Bastichou"
},
{
"number": 76,
"created_at": "2022-03-22T17:02:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 77,
"created_at": "2022-03-23T07:52:55Z",
"last_comment_at": "2022-11-10T08:51:43Z",
"last_comment_author": "mateusz-lubanski-sinch"
},
{
"number": 89,
"created_at": "2022-05-09T06:43:36Z",
"last_comment_at": "2025-06-03T07:05:05Z",
"last_comment_author": "chlunde"
},
{
"number": 90,
"created_at": "2022-05-11T08:42:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 110,
"created_at": "2022-10-27T20:52:01Z",
"last_comment_at": "2025-04-23T11:29:55Z",
"last_comment_author": "chlunde"
},
{
"number": 125,
"created_at": "2023-01-27T14:29:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 162,
"created_at": "2023-11-22T11:44:10Z",
"last_comment_at": "2023-11-22T18:17:02Z",
"last_comment_author": "luis-alen"
},
{
"number": 165,
"created_at": "2023-12-04T16:32:11Z",
"last_comment_at": "2024-04-08T13:58:48Z",
"last_comment_author": "markphillips100"
},
{
"number": 176,
"created_at": "2024-05-16T14:37:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 194,
"created_at": "2024-09-25T20:15:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 195,
"created_at": "2024-09-25T20:39:53Z",
"last_comment_at": "2025-05-27T19:51:21Z",
"last_comment_author": "chlunde"
},
{
"number": 196,
"created_at": "2024-10-10T13:37:03Z",
"last_comment_at": "2025-06-16T19:44:28Z",
"last_comment_author": "chlunde"
},
{
"number": 211,
"created_at": "2025-02-04T13:05:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 213,
"created_at": "2025-02-11T20:33:37Z",
"last_comment_at": "2025-05-08T20:27:49Z",
"last_comment_author": "chlunde"
},
{
"number": 217,
"created_at": "2025-02-20T16:59:40Z",
"last_comment_at": "2025-08-05T15:07:37Z",
"last_comment_author": "tomitesh"
},
{
"number": 220,
"created_at": "2025-03-04T10:09:53Z",
"last_comment_at": "2025-05-27T20:22:07Z",
"last_comment_author": "chlunde"
},
{
"number": 240,
"created_at": "2025-05-30T18:31:53Z",
"last_comment_at": "2026-06-05T07:33:55Z",
"last_comment_author": "niralmehtasb1"
},
{
"number": 242,
"created_at": "2025-06-04T07:06:48Z",
"last_comment_at": "2025-06-15T19:35:09Z",
"last_comment_author": "chlunde"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/crossplane-contrib/provider-sql",
"host": "github.com",
"name": "provider-sql",
"owner": "crossplane-contrib"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 77 is calibrated to 91 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 77,
"calibrated": 91,
"calibration": "2026-08-02"
}
}
],
"value": 91,
"inputs": {
"security": 75,
"vitality": 86,
"community": 56,
"governance": 83,
"calibration": "2026-08-02",
"engineering": 80,
"ai_readiness": 69,
"weighted_overall_raw": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 218,
"human_commit_share": 0.74,
"days_since_last_push": 1,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "218 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 218
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 20,
"latest_release_tag": "v0.16.0-beta.1",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 65.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "20 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 20
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~65.7 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 65.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"forks": 112,
"stars": 154,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "154 stars",
"points": 35.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 154
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "112 forks",
"points": 17,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 112
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 83,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "excellent",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"bus_factor": 4,
"contributors_sampled": 46,
"top_contributor_share": 0.235
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "4 contributor(s) cover half of all commits",
"points": 43.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 4
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 24% of commits",
"points": 17.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 24
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "46 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 46
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 15 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"merged_prs": 206,
"open_issues": 37,
"closed_issues": 103,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.736,
"closed_unmerged_prs": 57,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "74% of issues closed",
"points": 30.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 74
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "206/263 decided PRs merged",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 206,
"decided": 263
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 274,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "crossplane-contrib",
"public_repos": 140,
"account_age_days": 2266
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "274 followers of crossplane-contrib",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 274,
"login": "crossplane-contrib"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "140 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 140
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/crossplane-contrib/provider-sql"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "25 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 25
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 80,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"crossplane",
"crossplane-provider",
"sql"
],
"has_wiki": true,
"homepage": "https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 75,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 69,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 6.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 15 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "6 existing vulnerabilities detected",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 115 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 115
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 7,
"affected_packages": 6,
"assessed_packages": 115,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, unknown 5",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 115,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 69,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.635,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "47 of 74 human commits state their intent (structured subject or explanatory body)",
"points": 33.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 47,
"sampled": 74
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "exceptional",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"cluster/images/provider-sql/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.02,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.26
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, cluster/images/provider-sql/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, cluster/images/provider-sql/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "2 of the last 100 commits agent-authored or agent-credited",
"points": 4,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "26 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 26,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 46558,
"source_files_sampled": 172,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/172 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 172,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [],
"labels": [],
"scores": {
"library": 3
},
"primary": null,
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 3
}
],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-29T12:52:46.360178Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/crossplane-contrib/provider-sql.svg",
"full_name": "crossplane-contrib/provider-sql",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}