cybertec-postgresql / pg_hardstorage

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

Повний розв'язаний набір залежностей із графа залежностей GitHub: 37 прямих і 158 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 195 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 5 мають відомі сповіщення, з них 2 прямі.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 6820,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 10170374,
        "HTML": 2937,
        "Shell": 218289,
        "PLpgSQL": 21618,
        "Makefile": 30023,
        "Dockerfile": 2373,
        "JavaScript": 2642,
        "Go Template": 2482
      },
      "pushed_at": "2026-07-26T06:53:55Z",
      "created_at": "2026-06-18T09:47:55Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-27T01:18:34Z",
      "description": "pg_hardstorage — enterprise-grade PostgreSQL backup: continuous WAL streaming + base backups, single static Go binary, PostgreSQL 15–18, Apache 2.0.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.cybertec-postgresql.com",
      "name": "CYBERTEC PostgreSQL International GmbH",
      "type": "Organization",
      "login": "cybertec-postgresql",
      "company": null,
      "location": "Austria",
      "followers": 258,
      "avatar_url": "https://avatars.githubusercontent.com/u/9417356?v=4",
      "created_at": "2014-10-27T13:32:57Z",
      "is_verified": null,
      "public_repos": 105,
      "account_age_days": 4290
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.0.16",
          "kind": "patch",
          "published_at": "2026-07-23T22:15:39Z"
        },
        {
          "tag": "v1.0.15",
          "kind": "patch",
          "published_at": "2026-07-23T18:38:39Z"
        },
        {
          "tag": "v1.0.14",
          "kind": "patch",
          "published_at": "2026-07-23T16:26:53Z"
        },
        {
          "tag": "v1.0.13",
          "kind": "patch",
          "published_at": "2026-07-22T15:41:29Z"
        },
        {
          "tag": "v1.0.12",
          "kind": "patch",
          "published_at": "2026-07-16T15:35:04Z"
        },
        {
          "tag": "v1.0.11",
          "kind": "patch",
          "published_at": "2026-07-16T03:54:07Z"
        },
        {
          "tag": "v1.0.10",
          "kind": "patch",
          "published_at": "2026-07-15T18:58:37Z"
        },
        {
          "tag": "v1.0.9",
          "kind": "patch",
          "published_at": "2026-07-13T11:51:30Z"
        },
        {
          "tag": "v1.0.8",
          "kind": "patch",
          "published_at": "2026-07-06T16:30:55Z"
        },
        {
          "tag": "v1.0.7",
          "kind": "patch",
          "published_at": "2026-07-02T12:34:22Z"
        },
        {
          "tag": "v1.0.6",
          "kind": "patch",
          "published_at": "2026-06-27T05:34:06Z"
        },
        {
          "tag": "v1.0.5",
          "kind": "patch",
          "published_at": "2026-06-26T07:21:14Z"
        },
        {
          "tag": "v1.0.4",
          "kind": "patch",
          "published_at": "2026-06-24T20:16:24Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2026-06-24T12:24:58Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-06-23T09:34:29Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-06-18T13:20:50Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "24845355fedfcefe8e731c5ec235a99394633c0a",
          "body": "Promote the integrity-program CHANGELOG entry to 1.0.16 and bump doc\nversion examples. Ships the verify --full / scheduled-verify fix\n(wrong-major sandbox flagged healthy non-PG18 backups as corrupt),\nscheduled recovery drills with doctor freshness checks, mandatory\nstorage-contract concurrency cases, and the nightly chaos soak.",
          "is_bot": false,
          "headline": "release: 1.0.16 — integrity program + verify-sandbox major fix",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T22:05:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4b2475628fd8bad6378675bd08413c87bf0ff8d",
          "body": "…ing-1-3\n\nintegrity: scheduled drills, mandatory contract concurrency, chaos soak",
          "is_bot": false,
          "headline": "Merge pull request #37 from cybertec-postgresql/feat/integrity-harden…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T22:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c65712d4e5f0a58c49b7518648cd5bb090267f4",
          "body": "Implements items 1-3 of the integrity program - three layers that keep\n\"backup that won't restore\" in the class of bugs machines catch first.\n\n1. Chaos soak with a restore-proof gate (nightly workflow + opt-in\n   test): seeded random faults (Patroni switchover, leader pause,\n   concurrent-backup bur\n[…]\n --full failure\nresults now carry the actual pg_verifybackup stderr (previously\npointed at a body field errors don't have), and the schedule fleet\nheader counts distinct deployments instead of rows/2.",
          "is_bot": false,
          "headline": "integrity: scheduled drills, mandatory contract concurrency, chaos soak",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T20:22:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bae8f6c4d711cac0bc15ae03d9bb2540847632f1",
          "body": "Promote the #34 CHANGELOG entry to the 1.0.15 release and bump doc\nversion examples. This ships the correct fix (shutdown keepalive-spin\ndetection) that supersedes the incomplete 1.0.14 attempt (#36).",
          "is_bot": false,
          "headline": "release: 1.0.15 — real fix for the Patroni switchover hang (#34)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T18:32:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa91d761ee029bdba9b05e0ee9977ab165382b23",
          "body": "…supersedes 1.0.14 (#36)\n\nv1.0.14's #34 fix was wrong. Reproducing the bug on a real 3-node\nPatroni cluster (new topology repro test) showed the old leader still\nhung, and revealed the true mechanism:\n\nWhen the demoting primary shuts down, its physical walsender waits for\nthe client to FLUSH-confirm\n[…]\nnd asserts the old leader rejoins as a streaming replica. Proven\n  A/B: pre-fix hangs at \"replica/stopping\"; fixed rejoins in ~90s.\n  (The existing L4 scenario stop+starts the streamer, masking this.)",
          "is_bot": false,
          "headline": "fix: Patroni switchover hang — real cause (shutdown keepalive spin), …",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T18:31:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f22a07aea0a1a0ade6545bb6a49b53d54389d00c",
          "body": "CHANGELOG entry for 1.0.14 (the concurrency-audit fixes and the #34\nswitchover hang, merged via #35) and doc version-example bumps.",
          "is_bot": false,
          "headline": "release: 1.0.14 — concurrency audit + Patroni switchover hang (#34)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T16:19:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71db83c98c8be142bf3315c5c9d190b31121e189",
          "body": "A three-way concurrency review (WAL pipeline, backup/CAS/storage,\ndaemons/audit) surfaced ten distinct bugs; three were demonstrated\nunder -race. Each fix ships with a regression test; the audit also\nuncovered the switchover-hang in issue #34.\n\nBackup lease (mutual exclusion was broken):\n- Stale-rec\n[…]\no fixes a restore postverify false failure: the SELECT-1 probe\nrejected psql stderr diagnostics (e.g. the collation-version WARNING)\nmixed into CombinedOutput; it now checks only the final result row.",
          "is_bot": false,
          "headline": "fix: concurrency audit (10 bugs) + Patroni switchover hang (#34) (#35)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-23T16:18:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9695fb6195c8135ffa69490a990436c877f80fc5",
          "body": "…mand\n\nAdds a workflow_dispatch trigger (input: smoke_version) that runs ONLY\nthe homebrew-smoke job against an already-published release — goreleaser\nis gated to tag pushes (if github.event_name == 'push'), and slsa skips\nwithout goreleaser's outputs. Lets us verify the tap install on a real\nmacOS runner without cutting a release, and confirms the homebrew-smoke\njob (if: !cancelled()) actually runs rather than being skipped by\ngoreleaser's cask-push failure.",
          "is_bot": false,
          "headline": "ci(release): manual entry point to smoke-test the Homebrew cask on de…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-22T15:54:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02d31fdc4d6c8ff1067b5594cfe24d3b4aeb7f31",
          "body": "The homebrew-smoke job (added last release) was always SKIPPED: it\nneeds: [goreleaser], and goreleaser fails every run at the cask-push\nstep (the tap token, HOMEBREW_TAP_TOKEN, is invalid), so the dependent\njob never ran. The release artifacts ARE published before that step, so\nthe cask's tarballs e\n[…]\nOS\nbrew-install smoke test actually runs after goreleaser regardless of its\nconclusion (it still polls the tap for the version, so it's a no-op wait\nuntil the cask lands, then installs + smoke-tests).",
          "is_bot": false,
          "headline": "ci(release): run homebrew-smoke despite goreleaser's cask-push failure",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-22T15:43:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "08cd181e5d7a8710052a4c9cfbdac925403b1458",
          "body": "Promote the #31 CHANGELOG entry to the 1.0.13 release and bump doc\nversion examples. The fix (atomic single-winner shared-DEK mint that\nkeeps concurrent WAL streaming and base backups on one DEK) landed via\n#32; this release ships it — a data-integrity fix where a \"successful\"\nencrypted backup taken during WAL streaming could be silently\nunrestorable.",
          "is_bot": false,
          "headline": "release: 1.0.13 — shared-DEK race fix (#31)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-22T15:35:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e796a6a7fbd15e318e706c44c780d18030730a0",
          "body": "…ncurrent WAL streaming (#32)\n\nWith `wal stream` running, a concurrently-taken base `backup` could\ncommit a manifest that was silently unrestorable: `verify` reported mass\nchunk-integrity failures and `restore` failed with `encryption: unknown\nalgorithm: 1`, while `backup` exited 0.\n\nRoot cause was \n[…]\nconverge), legacy-adopt and wrong-KEK-unusable tests, and an end-to-end\nrepro (encrypted repo + wal stream + racing backups → all verify --full\npass, restore completes, exactly one shared-DEK object).",
          "is_bot": false,
          "headline": "fix: atomic shared-DEK mint — unrestorable encrypted backups under co…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-22T15:32:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fa97bdba9b668a5e3c0f555ef5256ba796c6fc69",
          "body": "Adds a homebrew-smoke job (macos-latest, needs goreleaser) that does the\none end-to-end check the Linux release checks can't: `brew install\n--cask` from the public tap, then runs the installed binary (version\nmatches the tag, --help, repo init, glossary).\n\nBecause the tap cask is pushed by gorelease\n[…]\nPOLLS the\ntap for ~10 min until it serves this release's version, then installs.\nIf the cask isn't up yet it fails cleanly — re-run just this job after\nthe cask lands. Takes effect on the next v* tag.",
          "is_bot": false,
          "headline": "ci(release): add macOS Homebrew cask install smoke test",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-16T15:47:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3671a185ee555a54699e32d9ac322832889f844c",
          "body": "Follow-up audit for the \"documents a capability that doesn't work\"\nclass (prompted by the managed-DBaaS claims). Beyond the DBaaS fixes\nalready on main, corrected:\n\n- internal/audit/transparency.go: the TransparencyLog comment claimed\n  a rekor.Log implementation ships; only self-hosted StorageBacke\n[…]\n(every\nRDS/Aurora/Cloud SQL/Azure/Neon/Supabase mention is now a negation;\nself-hosted/self-managed remains the only supported target).\n\nRelease prep: CHANGELOG 1.0.12 and doc version examples bumped.",
          "is_bot": false,
          "headline": "docs: eliminate false-capability claims + v1.0.12 (#29)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-16T15:28:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "619a19ddf995764c36aa3d2a25fc6e6ef09f9689",
          "body": "Four places wrongly stated pg_hardstorage works against RDS/managed\nDBaaS while the rest of the docs correctly say it can't — managed\nservices do not expose BASE_BACKUP / physical replication to\ncustomers, so a physical base backup is impossible there. Aligned all\nof them to the accurate \"self-manag\n[…]\nhe sidecar supports.\n\nThe removed-host-access-barrier point stands (the replication-protocol\ndata plane needs no OS access) — but that is NOT the BASE_BACKUP\nbarrier, which managed DBaaS still impose.",
          "is_bot": false,
          "headline": "docs: remove every claim that fully-managed DBaaS (RDS) is supported",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-16T15:12:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ed815079a0680a89d5efbda2c460cd2e9c75345",
          "body": "False alarms / silent wrong-target:\n- repo scrub now scrubs manifest-aware so ENCRYPTED chunks decrypt +\n  verify — it previously built a decryptor-less CAS and reported 100%\n  corruption (exit 9) on every encrypted repo, paging on each run.\n- The global -c/--config flag is now honored (reads + writ\n[…]\no a shared\njsonshape helper (yaml/csv/tap/junit/pdf/template).\n\nRelease prep: CHANGELOG 1.0.11 and doc version examples bumped. All\nfixes carry regression tests; CLI reference regenerated (repo init).",
          "is_bot": false,
          "headline": "fix: 12 operator-inconvenience bugs + 1.0.11 release prep (#28)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-16T03:47:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c0295c9535c4ee34630aea05d7afc3d6a06fe1e3",
          "body": "…nvelopes as tables\n\nTwo renderer defects, one shared root cause plus one dead code path:\n\n- Every renderer that flattens the result body via a JSON round-trip\n  (yaml, csv, tap, junit, pdf, template) decoded numbers into float64,\n  so large integers rendered in scientific notation — `list -o yaml`\n\n[…]\nnested\n  objects, scalar arrays) keep the key/value fallback.\n\nBoth covered by regression tests; verified live (`list -o yaml/csv`\nshow plain integers and a real table; kv fallback intact for `show`).",
          "is_bot": false,
          "headline": "fix(renderer): integer-preserving JSON round-trip; CSV renders list e…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-16T01:35:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f6d7d50944194dacbe710c65ab05b869d6e92b4",
          "body": "… + 1.0.10 prep (#27)\n\n- backup compare -o json double-nested its payload under\n  .result.result.* — the ComparisonResult fields now inline at\n  .result.* like every sibling command.\n- list on an empty deployment emitted \"backups\": null, breaking every\n  consumer iterating .result.backups[]; it now \n[…]\n26 sandbox\npg_verifybackup -n fix already on main) and doc version examples\nbumped. All fixes carry regression tests; the test that encoded the\nold absent-hold exit-0 contract now asserts the new one.",
          "is_bot": false,
          "headline": "fix: compare JSON nesting, list null array, hold-remove false success…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-15T18:51:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e50e029f064a761caf733bda87184cd3f5e06e7b",
          "body": "`recovery drill` (and `verify --full`) ran pg_verifybackup in the\nsandbox WITHOUT -n/--no-parse-wal. pg_hardstorage stores WAL in the\nrepository rather than inside the base backup, so the restored data\ndir legitimately has an empty pg_wal/ — the WAL needed to reach\nconsistency is fetched at recovery\n[…]\nes -n; the\nfirecracker rootfs contract is documented to match.\n\nVerified end-to-end: a WAL-streaming backup of a live PostgreSQL now\ndrills to verdict:pass (was verdict:fail with the reported stderr).",
          "is_bot": false,
          "headline": "fix(sandbox): pg_verifybackup -n in the verify sandbox (closes #26)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-15T18:28:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e44df3b25fe522cf5297439a7a38f02111fdf02",
          "body": "Hints and error classification:\n- dsa locate / jit help: drop the nonexistent `kms shred --tenant`\n  recommendation (real invocation: --repo --confirm-keyring\n  --require-approval --yes).\n- restore checkpoint-mismatch: suggest resuming with the checkpoint's\n  backup ID instead of a nonexistent --bac\n[…]\nstgreSQL server log.\n\nRelease prep: CHANGELOG 1.0.9 (rounds 1+2 of the annoyance fixes) and\ndoc version examples bumped to 1.0.9. All fixes carry regression\ntests; CLI reference/man pages regenerated.",
          "is_bot": false,
          "headline": "fix: 10 more operator annoyances + 1.0.9 release prep (#25)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-13T11:45:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86c0b8daf5da1e25f70987e6f6b7f91fd2deaa86",
          "body": "…h, broken hints, --version, Ctrl-C container leak\n\n- init: a closed stdin (CI pipe, Ctrl-D) busy-looped the required prompt\n  forever (~80 MB of output in seconds). askLine now aborts with a\n  structured init.stdin_closed usage error pointing at flags + --yes.\n- init --quick: the default repository\n[…]\nabulary\n  (skip≡off, require≡required); the plain-restore notice recommends the\n  real --to flag (was the nonexistent --to-time).\n\nAll covered by regression tests; CLI reference/man pages regenerated.",
          "is_bot": false,
          "headline": "fix(cli): five first-run annoyances — init EOF loop, --quick repo pat…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-13T11:12:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9d6901e86ec6992b36188320bd95d59755758a8a",
          "body": "…one honesty\n\nTwo user-facing annoyances:\n\n- The root --help banner greeted every v1.x user with \"Every command in\n  v0.2 is a real implementation\"; partial/logical/repo help carried\n  similar stale v0.x qualifiers, and `changelog` emitted a hardcoded\n  fake \"v0.2.0 (in development)\" body. The banne\n[…]\nes the host's actual zone and UTC offset\n  (\"daily at 02:00 (host local time CEST, UTC+02:00)\") instead of the\n  meaningless \"(Local)\".\n\nCLI reference/man pages regenerated for the changed help texts.",
          "is_bot": false,
          "headline": "fix(cli,schedule,docs): stale version strings in help; daily_at timez…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-13T10:54:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a67f25975dc71164a8947c4a6ba60f36dcbf2aa4",
          "body": "…racy pass\n\nCHANGELOG entry for 1.0.8 and version-example bumps (1.0.7 -> 1.0.8) in\nthe getting-started tutorial, SLSA/PCI compliance guides, and the\ncontrol-plane runbook. Historical \"shipped (v1.0.7)\" statements are left\nas-is.",
          "is_bot": false,
          "headline": "release: 1.0.8 — restore-verify -n fix, simple repo schemes, doc accu…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-06T16:24:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38c5b3fda2aedf0e8cad42d38f7b27845c19fca3",
          "body": "…-n gate + simple schemes (#23)\n\n* fix(restore,simple): pg_verifybackup -n gate; simple repo schemes match backends\n\nTwo correctness bugs surfaced while validating the docs against the code:\n\n- restore: the post-restore --verify gate ran `pg_verifybackup <target>`\n  without -n, so it tried to parse \n[…]\nmissing incident tool.\n- build-a-storage-plugin: plugin list (doctor has no plugin section),\n  Barrier in the 12-method interface, mem:// steps marked aspirational,\n  removed '(Agent F)' placeholders.",
          "is_bot": false,
          "headline": "docs: validate README + entire doc tree against the code; fix verify …",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-06T16:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7f3a52fdc0d4a7714d7febaa161958be4f98c03",
          "body": "…uild)\n\nsecureStagingDir's owner check used syscall.Stat_t, which is Unix-only —\nthe release cross-build for Windows failed to compile (undefined:\nsyscall.Stat_t), aborting goreleaser before any package was published.\nMoved the uid comparison behind stagingForeignOwner in unix/non-unix\nbuild-tagged \n[…]\nn-unix build relies on the private 0700 parent\n+ exclusive Mkdir instead, as Windows has no POSIX uid). Verified with a\nfull cross-compile of every release target (linux/darwin/windows ×\namd64/arm64).",
          "is_bot": false,
          "headline": "fix(restore): platform-split staging ownership check (Windows cross-b…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T11:57:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff1364b9f246424e5be32cb3d9eaab0475aff7d2",
          "body": "CHANGELOG entry for 1.0.7 and version-example bumps (1.0.6 -> 1.0.7)\nacross the getting-started tutorial, SLSA/PCI compliance guides, and\nthe control-plane runbook.",
          "is_bot": false,
          "headline": "release: 1.0.7 — code-review correctness pass (79 fixes)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T11:45:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26cfdeedbd8c3f5878dd68463f2fcdf64b0cdfc5",
          "body": "…publications\n\nThe cadence-flush fix sends a standby status update every interval,\nand the walsender echoes each one with a keepalive while the reported\nflush LSN lags its end — so a healthy idle stream now continuously\nproves its liveness. Erroring on a merely-quiet publication (the old\ntest's expe\n[…]\nnning past several windows, and a\ngenuinely stalled server — the container paused, so echoes stop while\nthe socket stays open — trips the classified inactivity-timeout error\nwithin roughly one window.",
          "is_bot": false,
          "headline": "test(logicalreceiver): inactivity watchdog detects stalls, not quiet …",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T10:07:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c4c21112b2aa3cbe618da5af52d96ed5666ebb9",
          "body": "…ogress cap\n\nTwo defects the integration gate caught in the earlier fixes:\n\n- logicalreceiver: the reworked receive loop recomputed its inactivity\n  deadline from time.Now() on every wake, so each status tick reset the\n  budget and a genuinely silent stream could never trip it — callers\n  hung until\n[…]\nms against real\n  PG). The trim is now conditional — plain append under the cap, tail\n  re-aggregate only once it is exceeded — and the cap regression test\n  gets a realistic sequential-UPDATE budget.",
          "is_bot": false,
          "headline": "fix(followup): anchor logical-receive inactivity deadline, cheapen pr…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T09:58:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1afb82769bf551bcae1dccb408bd55e7673f4b51",
          "body": "gameday Result (duration_ms + recovery_time_ms) and backup runner\nResult (duration_ms) serialized raw time.Duration values — nanoseconds\n— under _ms keys, inflating every consumer's reading a million-fold.\nBoth now marshal whole milliseconds under the unchanged frozen keys,\nwith symmetric unmarshalers. Completes the sweep with the restore and\nsandbox Result fixes in the sibling commits.",
          "is_bot": false,
          "headline": "fix(output): duration_ms JSON fields emit milliseconds, not nanoseconds",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:51:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "491594347fafdb4fb5c192d04458fece790cc950",
          "body": "…isc verb fixes\n\nLLM surface:\n- llm ask/explain load and enforce the configured llm.privacy mode\n  (strict/local-only was silently ignored — no endpoint gate, weaker\n  redaction than configured); the chat privacy gate now checks the\n  ACTUAL resolved endpoint (flag > env > yaml), so local-only can\n \n[…]\nrewrites); wal push gains --wal-segsize so non-default clusters\n  declare their segment size (pairs with the walsink truncation guard).\n\nRegenerated CLI reference/man pages for the changed help texts.",
          "is_bot": false,
          "headline": "fix(cli): LLM privacy enforcement, repair/status/audit correctness, m…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:51:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aa46499f5d3122def75edaa23d02e807faf2303a",
          "body": "The barman/wal-g/pgbackrest shims and config translators drifted from\nthe native surface; every drift made a documented invocation fail:\n\n- Translators emit deployments as a mapping keyed by name (the strict\n  loader rejects the previous sequence form), the pg_connection field\n  name (was \"connectio\n[…]\ng1-* handling).\n- pgbackrest start-fast/stop-auto/backup-standby parse as the boolean\n  flags they are (a bare --start-fast previously failed with \"flag\n  needs an argument\" instead of being ignored).",
          "is_bot": false,
          "headline": "fix(compat): emit argv and config the native CLI actually accepts",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:51:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d6c7eb0760f385e8ea2e5308b61cf96269a15e4",
          "body": "…, ms durations\n\n- sandbox docker backend: exec output is demultiplexed per Docker's\n  8-byte stream framing so stderr is actually captured — the\n  missing-backup-manifest case is classified as the documented Skipped\n  result instead of a verification failure.\n- postverify: the pg_ctl stop guard is \n[…]\nrectory itself and false-failed with\n  \"expected regular file\".\n- sandbox Result: duration_ms JSON emits whole milliseconds under the\n  unchanged frozen key (was nanoseconds, inflating readings 1e6x).",
          "is_bot": false,
          "headline": "fix(verify): docker stderr demux, postmaster stop guard, Encoded-Path…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:51:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47e97610c738ab4c08f44038239b86d158669f5d",
          "body": "…shred receipt\n\n- pkcs11: KEKRef() redacts the pin/pin_source query parameters, so the\n  reference stamped into every backup manifest (stored in repo storage\n  the threat model treats as untrusted-readable) no longer carries an\n  inline HSM PIN. Secrets are still resolved at Open time from the\n  ori\n[…]\ninstead of discarded — it is the\n  operator's compliance receipt for when key material is destroyed.\n  No in-tree caller invokes provider Shred yet; the accessor is ready\n  for the CLI verb that will.",
          "is_bot": false,
          "headline": "fix(kms): keep HSM PINs out of manifests, per-class PKCS#11 handles, …",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:51:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d184f6c801fd22f13345b3d5c1dcce493029330",
          "body": "… enqueue/progress hygiene\n\n- Agent claim: advertises every kind the wired executor supports\n  (backup, restore, verify) instead of a hardcoded [\"backup\"] — restore\n  and verify jobs enqueued via the control plane were never claimed and\n  sat queued forever behind a 202.\n- Agent loop: claimed jobs e\n[…]\nrew without limit, each append rewriting the whole document).\n- server Run: stops the job sweeper on every exit path, not only ctx\n  cancellation — it previously kept ticking against a closed backend.",
          "is_bot": false,
          "headline": "fix(agent,server): claim all executor kinds, non-blocking heartbeats,…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:50:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8700f3cd7b806f28fd1d76486378b1c094106138",
          "body": "…oop correctness\n\n- replication EnsureSlot: the SlotFound path now computes the WAL gap\n  against last_confirmed_lsn exactly like the recreate path (shared\n  populateGap). A slot freshly created by Patroni at promotion whose\n  restart_lsn is ahead of the agent's last archived byte no longer\n  masks \n[…]\nile of any other length is refused — a\n  segment truncated to a smaller power of two was previously archived\n  under a wrong size and segment number, corrupting hole-detection\n  math for the timeline.",
          "is_bot": false,
          "headline": "fix(pg): found-slot gap detection, follower identity guard, receive-l…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:50:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f495a48ba48f256b8d5234e8be196dd625185e01",
          "body": "…on, staging security\n\n- Tablespace placement: FileEntry/DirEntry now carry the owning\n  tablespace OID (zero = default tablespace, so pre-existing manifests\n  read unchanged); tarsink stamps it per streamed archive. Restore\n  routes non-default-tablespace files to their real (absolutely-located,\n  \n[…]\ntion under a _ms key inflated\n  every consumer's reading a million-fold.\n\nKnown follow-up (out of scope here): the chain staging path does not\nyet lay out multi-tablespace inputs for pg_combinebackup.",
          "is_bot": false,
          "headline": "fix(restore): tablespace placement, chain-restore recovery/verificati…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:50:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93f2fdabdfdad3b1b679b12ad00846079b4eb144",
          "body": "- SoftDeleteCascade: post-tombstone re-scan for live descendants (the\n  same guard SoftDelete/SoftDeleteBatch already had) — a child\n  incremental committing mid-cascade now rolls the cascade back instead\n  of ending orphaned on a tombstoned parent (un-restorable chain).\n- SoftDeleteBatch + SoftDele\n[…]\nme validateRef identifier\n  check as the sibling tombstone paths.\n- retention SimplePolicy: a backup exactly KeepFor old is kept, per the\n  documented inclusive-boundary contract (was strictly-after).",
          "is_bot": false,
          "headline": "fix(backup): delete-path race guards, hold hardening, retention boundary",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:50:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9c8a4a6e5ed9215532943b79a7f7a29ce82dafc2",
          "body": "…chunk hashes\n\n- gc FindMissing: only storage.ErrNotFound counts as a missing chunk;\n  any other Stat error aborts the scan instead of falsely reporting\n  referenced chunks (and therefore backups) as damaged during transient\n  network/permission failures.\n- VerifyReplicate: skips tombstoned backups \n[…]\nyload's SHA-256 against its\n  content-addressed key before writing, so a corrupt or tampered bundle\n  can no longer plant a wrong-content chunk that later backups dedup\n  against and restores fail on.",
          "is_bot": false,
          "headline": "fix(repo): GC/replica-verify error classification, bundle WAL keys + …",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:50:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "80606226070c547e4181cbbe27dba0d1c6e62454",
          "body": "…hygiene\n\nCode-review fixes across the fs/scp/sftp/azblob/throttle backends:\n\n- fs Barrier (non-Linux): a step-1 fsync error at index i requeued only\n  list[i:], permanently dropping already-fsynced-but-unpublished entries\n  — a retried Barrier then reported success while the committed manifest\n  re\n[…]\nottle: token-bucket sleeps are preemptible by ctx cancellation as\n  the package docs promise (Ctrl-C no longer hangs for the full wait).\n\nEach fix carries a regression test that fails on the old code.",
          "is_bot": false,
          "headline": "fix(storage): barrier retry safety, scp quoting/errors, staging-temp …",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-07-02T08:50:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "091a45d4b773f2189d2357ea7086bc9ec9402db2",
          "body": "…#19)\n\nReal 3-node Spilo/Patroni clusters: gap detection/prevention across graceful + repeated switchovers, multi-slot, bootstrap, permanent-slot survival, hard leader kill; recovery (rejoin-as-replica, replica-loss, frozen-leader); and data-integrity (byte-identical digests across failover/switchover, rejoined node converges to correct data). Runs in a dedicated test-patroni CI lane.",
          "is_bot": false,
          "headline": "test(patroni): end-to-end failover, recovery & data-integrity suite (…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-29T19:54:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30072d8a7985dae741dc250763b5af00c3e6842b",
          "body": "…e versions\n\nMove the #15/#17 fix entries into a [1.0.6] section (they post-date the\nalready-released v1.0.5) and bump the install/verify doc examples to 1.0.6.",
          "is_bot": false,
          "headline": "release: prep v1.0.6 — changelog [1.0.6] (#15, #17) + bump doc exampl…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-27T05:27:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a61f0dfd1e4ec6c99d002ce1a9432f686d40b78",
          "body": "…y run (#15) (#18)\n\n* fix: backups with non-default tablespaces (#17) + real `demo` command (#15)\n\n#17 — non-default tablespace backups\nPG streams the base/default tablespace archive (which carries backup_label\nand tablespace_map) LAST when user tablespaces exist. tarsink only\nintercepted those spec\n[…]\ner-unavailable, cleanup on\nmid-flow failure, port parsing); the real Docker run is exercised by CI.\n\nDocs/changelog updated.\n\n* docs: regenerate CLI reference + man page for the new demo command (#15)",
          "is_bot": false,
          "headline": "fix: backups with non-default tablespaces (#17) + make `demo` actuall…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-27T05:21:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a4c80252f275ee62b61b846ebf15596b70f31329",
          "body": null,
          "is_bot": false,
          "headline": "release: prep v1.0.5 — changelog + bump doc example versions",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-26T07:14:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b535039179aa6dc0cb04aeb564a6c90ca3c6d391",
          "body": "…essaging\n\ndocs: update product messaging and positioning",
          "is_bot": false,
          "headline": "Merge pull request #16 from cybertec-postgresql/docs/update-product-m…",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-26T07:01:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52f9b6c5beb4faf9c1d09ee71e4623ef786cfebb",
          "body": null,
          "is_bot": false,
          "headline": "docs: update product messaging and positioning",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-25T12:21:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bf20a61b465385f360bbbb702cc316c79d6ca3f",
          "body": "Promote the #12 deployment-config fix to a [1.0.4] CHANGELOG section and\nbump the VERSION= install/verify examples and sample 'version' output\nfrom 1.0.3 to 1.0.4. Packages are versioned from the tag by goreleaser;\nno code/version-constant changes needed.",
          "is_bot": false,
          "headline": "release: prep v1.0.4 — changelog + bump doc example versions",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-24T20:10:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa7031552e401ea6379795a51408884749c65f94",
          "body": "…rom config (closes #12) (#13)\n\n* fix(backup): resolve --pg-connection/--repo from the deployment config (#12)\n\n`pg_hardstorage backup <deployment>` demanded --pg-connection and --repo\neven when the named deployment was fully configured in\npg_hardstorage.yaml — it never consulted the deployment cata\n[…]\nhardstorage (this\n  ambient-config leak is what surfaced the breakage).\n\nFull internal/cli package, go build ./..., and go vet pass.\n\n* docs(changelog): note the deployment-config resolution fix (#12)",
          "is_bot": false,
          "headline": "fix(cli): deployment-scoped commands resolve --repo/--pg-connection f…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-24T20:08:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bdb2b9582278a688c68eb933ee34b3ed586a6612",
          "body": "Addresses #8 — make key custody impossible to miss:\n- Encryption tutorial + FAQ now state where the local KEK lives\n  (kek.bin in the keyring directory, <config>/keyring; doctor prints the\n  resolved path), warn prominently that losing it makes every backup\n  under it unrecoverable, tell operators t\n[…]\ne \"GCP/Azure/Vault KMS slated for v0.5+\" note in the\n  encryption tutorial (those providers ship today) and a missed\n  AES-256-GCM-SIV-as-default line in the FAQ (ships plain AES-256-GCM).\n\nCloses #8.",
          "is_bot": false,
          "headline": "docs: highlight encryption-key location, backup, and override (#8) (#11)",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-24T12:18:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "358d765304ae0011ba9ea7440369495ceb4c9b09",
          "body": "… container publishing (v1.0.3) (#10)\n\n* docs: correct false managed-DBaaS support claims\n\nThe docs repeatedly claimed pg_hardstorage \"works against managed PG\"\n(RDS, Aurora, Cloud SQL, Azure Database, Aiven, Supabase, Neon) — the\ncomparison page even sold it as the #1 reason to choose the tool. Tha\n[…]\nkms long-description edits changed the source; regenerate the\ngenerated artefacts so the docs-regen drift gate passes (man pages for\nkms/wal now reflect the source; wal.md canonical spacing restored).",
          "is_bot": false,
          "headline": "docs: correctness + cloud-accuracy sweep, version normalisation, GHCR…",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-24T11:46:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c2553f678621e7d77c61b4b1a148243d7b3cd0ac",
          "body": "scripts/homebrew-formula.json was a leftover hand-maintained tap\nmanifest from an earlier formula approach that nothing consumes — the\nHomebrew artefact is generated and pushed to the tap by goreleaser on\nrelease. Delete it and update scripts/README.md to point at the\nhomebrew_casks stanza in .goreleaser.yaml instead.\n\nCo-authored-by: Hans-Jürgen Schönig <hs@cybertec.at>",
          "is_bot": false,
          "headline": "packaging: remove obsolete homebrew-formula.json manifest (#7)",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-23T09:23:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c073d6c389cb76d75eb69a5c7755e34791a7e917",
          "body": "goreleaser deprecated the `brews:` (formula) pipe in v2.16 in favour of\n`homebrew_casks:` — `goreleaser check` fails the formula config as\n\"uses deprecated properties\". Migrate the Homebrew publish accordingly:\n\n- brews: -> homebrew_casks:\n- install block (bin.install) -> binaries: [pg_hardstorage]\n\n[…]\nform url/sha256, binary, postflight,\ncaveats). Since no tag release has populated the tap yet, no Formula\ncleanup / tap_migrations.json is needed.\n\nCo-authored-by: Hans-Jürgen Schönig <hs@cybertec.at>",
          "is_bot": false,
          "headline": "packaging: migrate Homebrew publishing from brews to homebrew_casks (#6)",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-23T09:22:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a4efe7dd310c7845d07a83f12cb571b4adf77cd8",
          "body": "* packaging: publish a Homebrew formula on release\n\nAdd a brews: stanza to .goreleaser.yaml so each release generates and pushes Formula/pg_hardstorage.rb to the org-wide tap (cybertec-postgresql/homebrew-tap), making 'brew install cybertec-postgresql/tap/pg_hardstorage' work on macOS (Apple Silicon\n[…]\nve is published. Verified\nwith a snapshot build: formula resolves darwin/arm64 + linux/amd64,arm64\nto the pg_hardstorage tarballs only.\n\n---------\n\nCo-authored-by: Hans-Jürgen Schönig <hs@cybertec.at>",
          "is_bot": false,
          "headline": "packaging: publish a Homebrew formula on release (#5)",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-22T14:43:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0b0a4a3c60b34c33f1c7564cf825da7314a6ff9",
          "body": "* installer: fix and harden the curl|sh installer, add serving Worker\n\nscripts/install.sh never worked against real releases:\n- it built an unversioned archive name (pg_hardstorage_<os>_<arch>.tar.gz)\n  but goreleaser emits pg_hardstorage_<version>_<os>_<arch>.tar.gz → 404;\n- it used `latest` as a l\n[…]\nhich isn't a file when piped). Verified end-to-end under dash:\nlatest→v1.0.0, versioned archive name, SHA-256 verify, extract, install.\n\n---------\n\nCo-authored-by: Hans-Jürgen Schönig <hs@cybertec.at>",
          "is_bot": false,
          "headline": "installer: fix and harden the curl|sh installer, add serving Worker (#4)",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-22T14:42:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d0ff2d4ca843c7684c0471193e211fdfcfe8fdc",
          "body": "Co-authored-by: Hans-Jürgen Schönig <hs@cybertec.at>",
          "is_bot": false,
          "headline": "docs: brand the documentation site to match pghardstorage.org (#3)",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-22T14:26:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ca8530024da1533ff4574ecb53e41648e98d0a3",
          "body": "Bumps [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) from 1.8.3 to 1.17.7.\n- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)\n- [Commits](https://github.com/mongodb/mongo-go-driver/compare/v1.8.3...v1.17.7)\n\n---\nupdated-dependencies:\n- dependency-name: \n[…]\ner\n  dependency-version: 1.17.7\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump go.mongodb.org/mongo-driver from 1.8.3 to 1.17.7 (#2)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T07:32:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe36f41421f7cadd5825e4b281c63ec103b977cb",
          "body": "The Windows-support roadmap note pointed at issue #11, which does not\nexist (404). Repoint it to the repository issues list so the link\nresolves.\n\nSigned-off-by: Hans-Jürgen Schönig <hs@cybertec.at>",
          "is_bot": false,
          "headline": "docs(windows): fix dead Windows-roadmap link",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-22T07:23:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9c50fbc1f45663df2bb7d4e61ac131a086ae1b7",
          "body": "* deploy the docs site to GitHub Pages on push to main\n\nAdds a push-on-main-gated deploy job (upload-pages-artifact +\ndeploy-pages) so the site serves at docs.pghardstorage.org. PRs still\nonly build + preview. Needs Pages source = GitHub Actions in settings.\n\n* docs: add unreleased changelog entry for the Pages deploy",
          "is_bot": false,
          "headline": "Docs pages deploy (#1)",
          "author_name": "Adrian Hoche",
          "author_login": "cybertec-adrian",
          "committed_at": "2026-06-22T06:58:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6b4ba0f0c1e233b750d22c4089ae86f8f32b783",
          "body": null,
          "is_bot": false,
          "headline": "pg_hardstorage v1.0.0 — initial public release",
          "author_name": "Hans-Jürgen Schönig",
          "author_login": "postgresql007",
          "committed_at": "2026-06-18T13:14:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 16,
      "commits_last_year": 57,
      "latest_release_at": "2026-07-23T22:15:39Z",
      "latest_release_tag": "v1.0.16",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 6,
      "days_since_latest_release": 3,
      "mean_days_between_releases": 2.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/cybertec-postgresql/pg_hardstorage",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/cybertec-postgresql/pg_hardstorage",
          "is_deprecated": false,
          "latest_version": "v1.0.16",
          "repository_url": "https://github.com/cybertec-postgresql/pg_hardstorage",
          "versions_count": 16,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-23T22:05:19Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 3
        }
      ]
    },
    "popularity": {
      "forks": 5,
      "stars": 120,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-28",
            "count": 1
          },
          {
            "date": "2026-06-29",
            "count": 4
          }
        ],
        "complete": true,
        "collected": 5,
        "total_forks": 5
      },
      "star_history": null,
      "open_issues_and_prs": 3
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "ext/pg_hardstorage_extension/Makefile",
        "packaging/freebsd/Makefile"
      ],
      "api_schema_files": [
        "api/openapi.yaml",
        "proto/pg_hardstorage/v1/common.proto",
        "proto/pg_hardstorage/v1/services.proto",
        "proto/plugin/v1/plugin.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 115297,
      "source_files_sampled": 1207,
      "oversized_source_files": 5,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.80.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 5
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.43.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5158"
            ],
            "fixed_version": "1.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 19
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 12
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 12
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 4,
          "critical": 1
        },
        "advisory_count": 5,
        "affected_count": 5,
        "assessed_count": 195,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "cloud.google.com/go/kms",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.30.0"
        },
        {
          "name": "cloud.google.com/go/storage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.62.1"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.13.1"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.4"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.41.7"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.16"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/kms",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.51.1"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.100.0"
        },
        {
          "name": "github.com/aws/smithy-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.25.1"
        },
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.10"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/firecracker-microvm/firecracker-go-sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/hashicorp/vault/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.0"
        },
        {
          "name": "github.com/jackc/pglogrepl",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260401131349-e37c41485510"
        },
        {
          "name": "github.com/jackc/pgx/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.9.2"
        },
        {
          "name": "github.com/klauspost/compress",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.18.5"
        },
        {
          "name": "github.com/miekg/pkcs11",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.2"
        },
        {
          "name": "github.com/moby/moby/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.54.1"
        },
        {
          "name": "github.com/pkg/sftp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.13.10"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/spf13/pflag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.5"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/postgres",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "google.golang.org/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.274.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "pgregory.net/rapid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "cloud.google.com/go/kms",
            "direct": true,
            "version": "v1.30.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/storage",
            "direct": true,
            "version": "v1.62.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.41.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/kms",
            "direct": true,
            "version": "v1.51.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": true,
            "version": "v1.100.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": true,
            "version": "v1.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azcore",
            "direct": true,
            "version": "v1.20.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azidentity",
            "direct": true,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
            "direct": true,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/storage/azblob",
            "direct": true,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": true,
            "version": "v1.3.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/firecracker-microvm/firecracker-go-sdk",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/vault/api",
            "direct": true,
            "version": "v1.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pglogrepl",
            "direct": true,
            "version": "v0.0.0-20260401131349-e37c41485510",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgx/v5",
            "direct": true,
            "version": "v5.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": true,
            "version": "v1.18.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/miekg/pkcs11",
            "direct": true,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/api",
            "direct": true,
            "version": "v1.54.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/sftp",
            "direct": true,
            "version": "v1.13.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": true,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/postgres",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": true,
            "version": "v0.274.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "pgregory.net/rapid",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.123.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/longrunning",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/monitoring",
            "direct": false,
            "version": "v1.24.3",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20210307081110-f21760c49a8d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.19.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.30.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.35.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/internal",
            "direct": false,
            "version": "v1.11.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.2.3-0.20250311203215-f60798e515dc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/cellbuf",
            "direct": false,
            "version": "v0.0.13-0.20250311204145-2c3ea96c31dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cncf/xds/go",
            "direct": false,
            "version": "v0.0.0-20251210132809-ee656c7534f5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/fifo",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containernetworking/cni",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containernetworking/plugins",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/dockercfg",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/go-md2man/v2",
            "direct": false,
            "version": "v2.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/go-control-plane/envoy",
            "direct": false,
            "version": "v1.36.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.2.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/analysis",
            "direct": false,
            "version": "v0.21.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/errors",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.19.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.19.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/loads",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/runtime",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/spec",
            "direct": false,
            "version": "v0.20.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/strfmt",
            "direct": false,
            "version": "v0.21.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/validate",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": false,
            "version": "v5.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp",
            "direct": false,
            "version": "v1.31.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.28.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-retryablehttp",
            "direct": false,
            "version": "v0.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-rootcerts",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-secure-stdlib/parseutil",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-secure-stdlib/strutil",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-sockaddr",
            "direct": false,
            "version": "v1.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl",
            "direct": false,
            "version": "v1.0.1-vault-7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgio",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgpassfile",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgservicefile",
            "direct": false,
            "version": "v0.0.0-20240606120523-5a60cdf6a761",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/puddle/v2",
            "direct": false,
            "version": "v2.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kr/fs",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20211012122336-39d0f177ccd0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/go-archive",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/client",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": false,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oklog/ulid",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opentracing/opentracing-go",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/browser",
            "direct": false,
            "version": "v0.0.0-20240102092130-5ac0b6a4141c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/purell",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/urlesc",
            "direct": false,
            "version": "v0.0.0-20170810143723-de5bf2ad4578",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryanuber/go-glob",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.26.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": false,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.3.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vishvananda/netlink",
            "direct": false,
            "version": "v1.1.1-0.20210330154013-f5de75959ad5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vishvananda/netns",
            "direct": false,
            "version": "v0.0.0-20210104183010-2eb08e3e575f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.mongodb.org/mongo-driver",
            "direct": false,
            "version": "v1.17.7",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/detectors/gcp",
            "direct": false,
            "version": "v1.39.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.61.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20260319201613-d00831a3d3e7",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260401024825-9d38bb4040a9",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260401024825-9d38bb4040a9",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.80.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 195,
        "direct_count": 37,
        "indirect_count": 158
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 3,
        "merged_prs": 22,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 10,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "postgresql007",
          "commits": 49,
          "avatar_url": "https://avatars.githubusercontent.com/u/20836489?v=4"
        },
        {
          "type": "User",
          "login": "cybertec-adrian",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/232323536?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.875
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "chaos-soak.yml",
        "ci.yml",
        "docs-doctest.yml",
        "docs.yml",
        "packaging-weekly.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/29 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 4,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "24845355fedfcefe8e731c5ec235a99394633c0a",
        "ran_at": "2026-07-27T06:46:34Z",
        "aggregate_score": 5.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T06:00:33Z",
      "oldest_open_prs": [
        {
          "number": 30,
          "created_at": "2026-07-18T18:07:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 33,
          "created_at": "2026-07-22T18:26:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 38,
          "created_at": "2026-07-26T06:54:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T22:03:06Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/cybertec-postgresql/pg_hardstorage",
    "host": "github.com",
    "name": "pg_hardstorage",
    "owner": "cybertec-postgresql"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 66,
      "inputs": {
        "security": 58,
        "vitality": 73,
        "community": 57,
        "governance": 65,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 57,
              "human_commit_share": 0.982,
              "days_since_last_push": 0,
              "active_weeks_last_year": 6
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "6/52 weeks with commits",
                "points": 4.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "57 commits in the last year",
                "points": 15.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 57
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 16,
              "latest_release_tag": "v1.0.16",
              "releases_from_tags": false,
              "days_since_latest_release": 3,
              "mean_days_between_releases": 2.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "16 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 57,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "forks": 5,
              "stars": 120,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "120 stars",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 120
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "5 forks",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.875
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 88% of commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 88
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "merged_prs": 22,
              "open_issues": 0,
              "closed_issues": 10,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "22/22 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 22,
                      "decided": 22
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/29 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "followers": 258,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "cybertec-postgresql",
              "public_repos": 105,
              "account_age_days": 4290
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "258 followers of cybertec-postgresql",
                "points": 17.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 258,
                      "login": "cybertec-postgresql"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "105 public repos, account ~11 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 105
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 11
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/cybertec-postgresql/pg_hardstorage"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 3
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 3 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "16 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 58,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 5.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/29 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 195 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 195
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 86,
            "inputs": {
              "source": "osv",
              "advisories": 5,
              "affected_packages": 5,
              "assessed_packages": 195,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, unknown 4",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: go.opentelemetry.io/otel v1.43.0 (unknown), golang.org/x/crypto v0.52.0 (unknown)",
                "points": 24.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "go.opentelemetry.io/otel v1.43.0 (unknown), golang.org/x/crypto v0.52.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 195,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 65,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.982,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "55 of 56 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 55,
                      "sampled": 56
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "ext/pg_hardstorage_extension/Makefile",
                "packaging/freebsd/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.018
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, ext/pg_hardstorage_extension/Makefile, packaging/freebsd/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, ext/pg_hardstorage_extension/Makefile, packaging/freebsd/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 57",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 57
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 57 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 57
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 115297,
              "source_files_sampled": 1207,
              "oversized_source_files": 5
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "5/1207 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 1207,
                      "oversized": 5
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "api/openapi.yaml",
                "proto/pg_hardstorage/v1/common.proto",
                "proto/pg_hardstorage/v1/services.proto",
                "proto/plugin/v1/plugin.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "api/openapi.yaml, proto/pg_hardstorage/v1/common.proto, proto/pg_hardstorage/v1/services.proto, proto/plugin/v1/plugin.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "api/openapi.yaml, proto/pg_hardstorage/v1/common.proto, proto/pg_hardstorage/v1/services.proto, proto/plugin/v1/plugin.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T06:46:46.514735Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cybertec-postgresql/pg_hardstorage.svg",
  "full_name": "cybertec-postgresql/pg_hardstorage",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}