dbader/node-datadog-metrics має індекс здоров’я 78 зі 100, що відповідає смузі «Добрий». Найвищий показник — Sustainability & Governance (72/100), найнижчий — AI Readiness (50/100). Останнє оновлення було 2 дні тому. Більшість нещодавньої роботи виконують 2 учасники.
78
загалом / 100
Добрий
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
78
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 67 калібровано до 78 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25
Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
38
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей npm:datadog-metrics@0.12.1 — тим, що тягне за собою встановлення опублікованого пакета, — 38 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 60 ⇿
0Зірки
60Форки
12Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 3Патчі 7
Кожна точка охоплює 10 днів.
OpenSSF Scorecard 4.5 / 10
4.5сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-08-05 07:56 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 2 прямих і 9 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Реєстр
Пакет
Версія
Зв'язок
npm
cross-fetch
^4.0.0
пряма
npm
debug
^4.1.0
пряма
npm
@datadog/datadog-api-client
^1.31.0
непряма
npm
@types/node
^14.14.45
непряма
npm
chai
4.3.6
непряма
npm
chai-as-promised
^7.1.2
непряма
npm
chai-string
1.5.0
непряма
npm
eslint
^8.24.0
непряма
npm
mocha
10.8.2
непряма
npm
nock
^13.2.9
непряма
npm
typescript
^4.8.4
непряма
Сповіщення про залежності 0
Встановлення npm:datadog-metrics@0.12.1 тягне 38 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"icon": {
"bytes": 10642,
"width": 280,
"height": 280,
"rejected": [],
"collected": true,
"media_type": "image/png",
"source_url": "https://dbader.org/static/img/icon.png",
"source_type": "homepage",
"content_hash": "de9e6a1374315d36ec9e07ce7c3b47a0534c84f0689e834a88c34ea2cc4616f6",
"candidates_considered": 1
},
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 379,
"has_wiki": true,
"homepage": "https://dbader.org/blog/monitoring-your-nodejs-app-with-datadog",
"languages": {
"Shell": 1470,
"JavaScript": 85680,
"TypeScript": 1763
},
"pushed_at": "2026-08-02T20:56:46Z",
"created_at": "2014-12-08T00:33:30Z",
"owner_type": "User",
"updated_at": "2026-08-02T20:56:51Z",
"description": "Buffered metrics reporting via the DataDog HTTP API",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "https://dbader.org/",
"name": "Dan Bader",
"type": "User",
"login": "dbader",
"company": "Chief Python Nut at realpython.com",
"location": null,
"followers": 3489,
"avatar_url": "https://avatars.githubusercontent.com/u/306708?v=4",
"created_at": "2010-06-16T12:17:17Z",
"is_verified": null,
"public_repos": 53,
"account_age_days": 5893
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.13.0-pre.2",
"kind": "prerelease",
"published_at": "2026-07-24T20:48:45Z"
},
{
"tag": "v0.13.0-pre.1",
"kind": "prerelease",
"published_at": "2025-09-01T05:38:44Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2024-12-19T17:55:19Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2024-12-06T00:19:44Z"
},
{
"tag": "v0.11.4",
"kind": "patch",
"published_at": "2024-11-10T19:27:54Z"
},
{
"tag": "v0.11.4-a.1",
"kind": "prerelease",
"published_at": "2024-11-01T05:28:40Z"
},
{
"tag": "v0.11.3",
"kind": "patch",
"published_at": "2024-11-01T05:27:30Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2024-06-25T15:57:39Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2023-09-28T20:19:51Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2023-02-21T22:01:46Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2022-10-15T18:37:09Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2022-09-22T03:54:39Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2022-09-22T03:54:12Z"
}
],
"recent_commits": [
{
"oid": "230872b1f2d5da9ad2e56938427c5ca4954e1c5a",
"body": "The security issues around GitHub actions have become a little more high profile this year, so this change applies some very basic measures by pinning the versions of actions we use and adding a cooldown to our updates to those actions.",
"is_bot": false,
"headline": "Minor security tweaks for GH actions (#158)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-08-02T20:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41b30fe6ad6c39b8bdf6b2bb8dcd88c97e5a40f7",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 4 to 7 (#160)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-08-02T20:52:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48941f0d166d4dac5e5a1281e181af4e89e542ae",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 6 to 7 (#159)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-08-01T17:44:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5fa3cd69800824b643b448300ed012e9c02274ca",
"body": null,
"is_bot": false,
"headline": "Prepare for continued development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-24T20:46:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d378143c46e7d81d4f6c114c3de03b9b37481986",
"body": "Prepare to release v0.13.0-pre.2. This will also be published with the `next` tag. There’s still more to do for the final release, but this contains an important bugfix for anyone using v0.13.0-pre.1.",
"is_bot": false,
"headline": "Prepare v0.13.0-pre.2 (#157)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-24T20:35:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab97e7299cc154a396ef289603b8ef1dbd48cc1",
"body": "This package works on Deno and Bun, but we’ve never formally said so. This adds integration tests for them and adds a note about it to the README.\n\n(Inspired by my exploration of proxy support over in #132.)",
"is_bot": false,
"headline": "Formally declare Deno & Bun compatibility (#148)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-23T20:37:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b969d5ce74971ff01bc9a665e0ee0645a891371e",
"body": "The CI test matrix had gotten a little out of date! Also updates mocha to v10 (v11 requires too-new Node.js for us) in order to get proper Node.js 26 compatibility for our dev tools.",
"is_bot": false,
"headline": "Update CI test matrix to include current Node.js (#156)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-23T15:36:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffeca58bdae959733baa5abb04d657bfff3383a7",
"body": "Fix bug introduced in #144 where the `retryBackoff` option was not correctly applied, leading to exceptions.",
"is_bot": false,
"headline": "fix var name for backoff retry (#155)",
"author_name": "Jocelyn",
"author_login": "jjedd97",
"committed_at": "2026-07-23T06:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb1dff73f95cd41648c10b6cc83ac3ecf0fc26f2",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6 to 7 (#154)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T23:29:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c54505e4e4ef84a96fa5bc0aaf4f6494585a124",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 5 to 6 (#152)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-05T17:03:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "817cbf9e66233670d85ae0f1e57802bf6239b61c",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 5 to 6 (#153)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-05T17:00:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "04fd2aefd5119aedd4e4ce68ef0bd000214ab55d",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 4 to 5 (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-10-02T05:57:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78908f2c5f8476cf1f833545ae3e105389864963",
"body": null,
"is_bot": true,
"headline": "Bump actions/checkout from 4 to 5 (#147)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-02T13:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a2ebc9eabffe57119306fd112b58965b6251d06",
"body": "Includes an update to the repo URL in `package.json` based on NPM publishing changes.",
"is_bot": false,
"headline": "Prepare for continued development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2025-09-01T05:31:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b03156d40871bd69c0f5b6718d0edaf31170547",
"body": null,
"is_bot": false,
"headline": "Prepare v0.13.0-pre.1 release (#146)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2025-09-01T05:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bae7265f0c92d12b5697022fa92675c8181cea5f",
"body": "This drops our dependency on `@datadog/datadog-api-client` in favor of directly calling the API via HTTP. It requires a little more code on our side, but gets us a bit more flexibility and drops a 15 MB (!) dependency that we barely use.\n\nThis partly covers #132. There is definitely followup work to do here, but we want to get this out the door so people can use it and provide feedback.",
"is_bot": false,
"headline": "Drop the official Datadog client (#144)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2025-09-01T05:02:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbf67ee5cd09f8a99a5507d739e9f0c7732bb4ca",
"body": null,
"is_bot": false,
"headline": "Prepare for future development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-19T17:56:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "361413652681076ac4315396db2d83c47a07a0b7",
"body": "Release v0.12.1 with some maintenance updates and the new `process.beforeExit` functionality from #141.",
"is_bot": false,
"headline": "Prepare v0.12.1 (#143)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-19T17:49:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ababb877516985b386430f692b47b0005fbc1d",
"body": "This attaches to the process’s `beforeExit` event (supported in Node.js, Deno, and Bun) when auto-flushing is enabled in order to automatically flush when a program exits. Before, you needed to remember to call `metrics.flush()` manually at the end of your program, which is easy to forget (or not even know about in the first place!).\n\nIt also adds a `stop()` method that disables auto-flushing and flushes any remaining buffered metrics.\n\nFixes #136.",
"is_bot": false,
"headline": "Auto-flush on process exit (#141)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-18T23:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b0bb69f77954bf7b0e7d4cd702327beb36a34d",
"body": "In #125, we switched the default aync interface to promises/async/await, but missed updating the module-level tests. This updates them.",
"is_bot": false,
"headline": "Use new promise interface in module tests (#142)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-18T00:19:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "950765cd9fba14d1a86832e6c544e324853e0755",
"body": "Formatting the release history with headings makes it much more scannable (for me, at least), and also helps developers using assistive technology to scan the page. It also makes the notes for individual releases linkable.",
"is_bot": false,
"headline": "Reformat release history with headings (#140)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-13T21:02:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cca1bd7fcf2d3a11cc2de1912ff2ef6158ff6d8",
"body": null,
"is_bot": false,
"headline": "Prepare for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-06T00:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a0dbb6e2f595136743928385947f44730c1894e",
"body": null,
"is_bot": false,
"headline": "Prepare v0.12.0 (#139)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-06T00:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64a624963fa1435427f5ce796a233bef6b072b18",
"body": "This adds retry support for submitting metrics. It’s rare, but at scale most users have probably encountered some failures to send metrics (although they might not have noticed it in their logs). Fixes #108.\n\nThe basic approach here is to just retry failed requests rather than some more complicated \n[…]\n times to retry a railed request.\n retries: 3,\n\n // Subsequent retries multiply this by powers of two, so this produces retries after:\n // 1 second, 2 seconds, 4 seconds\n retryBackoff: 1\n});\n```",
"is_bot": false,
"headline": "Retry on Datadog API errors (#138)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-05T22:10:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2e789308ba41a743e9c49fd3a4b2cbf9edd802ea",
"body": "Allow environment variables to be prefixed with either `DATADOG_` (old behavior) or `DD_` (new) in order to use the same configuration names as the Datadog Agent. Fixes #135.",
"is_bot": false,
"headline": "Support `DD_` env var prefix (#137)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-04T07:41:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "488adc7e276700ca7ee5db00a67f4f22ae15eedf",
"body": "Application keys are not actually needed for submitting metrics or distributions (or events or logs, in case we ever wind up supporting that), so specifying them risks exposing a potentially more powerful credential for no real reason. When support for them was originally added, this library used a \n[…]\n API client for other things. That's no longer the case (the client is not accessible from outside this library), so there's no reason to continue to support this, which might encourage dangerous use.",
"is_bot": false,
"headline": "Drop support for application keys (#127)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-28T23:35:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8f88c9ff74243aeff801da1d92ccd664409a4a3e",
"body": "The `flush()` method and the `report(series)` method on reporters now use promises instead of callbacks, moving to a more standardized model for async operations. The old callbacks are still supported, but deprecated, and will be removed in the future. Fixes #84.\r\n\r\nOther items to note here:\r\n- The \n[…]\n handler (unlike normal async functions).\r\n- Moved HTTP-related tests to a new reporters suite; the logger tests now use a mock reporter.\r\n- Bumps version to v0.12.0-dev since this is a major feature.",
"is_bot": false,
"headline": "Use promises instead of callbacks (#125)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-28T22:54:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f4d1d48255c242549dc063a2350a06194327a2a",
"body": "…#129)\n\nThis adds a `CONTRIBUTING.md` guide that includes instructions for maintainers on how to publish releases (since we do it manually, and there are a bunch of steps you want to keep in mind and not forget -- or at least that I need help remembering!). Fixes #91.",
"is_bot": false,
"headline": "Add contributing guide with publishing instructions for maintainers (…",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-20T15:05:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "828358fb99db92ee4e57ad5a058995cb91b0e817",
"body": "This new `npm run check-integration` script sends some metrics and distributions to Datadog using this library, then queries the API for those same metric values to make sure they were successfully ingested and will be visible in Datadog's UI.\r\n\r\nThe goal here is to provide a minimal check of real, \n[…]\nlightweight (it only checks one metric type, for example).\r\n\r\nThis also moves some other test tools as scripts from the `test` to the `test-other` directory so they don’t get mixed up with unit tests.",
"is_bot": false,
"headline": "Add script to test live API integration (#128)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-20T14:57:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56875f5730ffa31da4a68028f0ed26a90e20faa4",
"body": "Back in #100, I renamed the `apiHost` option to `site` (in order to match up with Datadog's own docs and terminology), but forgot to rename the corresponding environment variable. This deprecates `DATADOG_API_HOST` in favor of `DATADOG_SITE` (as should have been done before). We'll remove support for the old env var when we remove `apiHost`.",
"is_bot": false,
"headline": "Rename `DATADOG_API_HOST` → `DATADOG_SITE` (#134)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-20T07:50:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "407e8d39d429dba330749b1542a98cc7840a4cd2",
"body": "In #120, I added a test of our built types. Since we do a clean build of the types before publishing, we should also do a final check of those build results just to avoid any accidental issues for things that weren't fully checked (usually CI protects us here, but since we publish manually, a final check is useful!).",
"is_bot": false,
"headline": "Check that types are valid before publishing (#130)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-17T23:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b772872afd649b1749a974987a952cd0c6158e",
"body": "The `Map` object is built for our exact use-case here, and is both faster and safer than using a plain JS object (what we currently do) or an object created with `Object.create(null)`. This is a pretty minor improvement, but still worthwhile.",
"is_bot": false,
"headline": "Use `Map` for aggregator buffer (#126)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-17T23:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecf4b0d47a08d3f877c99b3835d6ac249f2caef9",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-10T19:31:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f8767619cacf70ec287911e2475c0c06b49669b",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.4 for release (#124)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-10T19:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d49b785f356236a8eb0fedfed661b03b95f865c",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.4-a.1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T05:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "804190a016b7b0099cbadeb2fc290d90a38e5dbc",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.3",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T05:03:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6dca69979e14ca47bcf198b0238251819411e55",
"body": null,
"is_bot": false,
"headline": "Mark v0.11.3a1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T04:32:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a834a057491518f9324316d69d561afff89da620",
"body": "Even though we started generating TypeScript types from the JSDoc a while back, it turns out `BufferedMetricsLogger` was getting exported as a *value* and not a type. That technically works in TS, but requires some weird syntax and is definitely not what you want. This changes up our imports and exports a bit to get the TypeScript compiler to do the right thing, and adds a basic test of the types to make sure we don't regress.\r\n\r\nSee #119.",
"is_bot": false,
"headline": "Export a type for BufferedMetricsLogger (#120)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T04:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0e993652c497d0462dffd4c13f3cb66d7031186",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.\r\n- [Release notes](https://github.com/actions/setup-node/releases)\r\n- [Commits](https://github.com/actions/setup-node/compare/v3...v4)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: actions/setup-node\r\n dependency-typ\n[…]\n:production\r\n update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 3 to 4 (#123)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-10-31T18:03:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72ff76d7a5fbd98c24db2f95bb60ae308b3dd4f1",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.\r\n- [Release notes](https://github.com/actions/checkout/releases)\r\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/actions/checkout/compare/v3...v4)\r\n\r\n---\r\nupdated-dep\n[…]\n:production\r\n update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 3 to 4 (#122)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-10-31T18:01:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "99b46246af976d6ed339f29c0d22dd0f193bfe77",
"body": "Node.js has moved forward by several major versions since our CI configuration was last updated, and this updates our CI test matrix to cover them. I've also added Dependabot for updating CI workflows, but not JS dependencies (we only want security updates for those).",
"is_bot": false,
"headline": "Expand CI test matrix, add dependabot for actions (#121)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-10-31T17:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d104385b0ab9e69bddbaa781ab1f9198daeae75",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-06-25T15:55:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89c4425c02ffc112f19bba08feacb2b926dfef1f",
"body": "Update release notes and version number.",
"is_bot": false,
"headline": "Prepare to release v0.11.2",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-06-25T15:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e7cd27c7f29e2ed09a472df3923a1b3dd34487",
"body": "Issue #115 demonstrated how easy it is to get confused about API vs. application keys, so I’ve added some more documentation here about the difference as well as links to the official documentation about it (https://docs.datadoghq.com/account_management/api-app-keys/).\r\n\r\nI’ve also added a custom `AuthorizationError` class with a more explanatory message (also with links to the docs), so people should see something more helpful in their console or logs, too.",
"is_bot": false,
"headline": "Add more documentation about API vs. App keys (#118)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-06-25T15:39:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6390e07a9278b57a6543fa43f8f68aa45ab20d36",
"body": "The docs and types listed an option for histograms called `aggregations`, but the correct name was actually `aggregates`. This updates the types and adds a test (unfortunately we can’t easy typecheck our tests right now, but this is at least something).\r\n\r\nCo-authored-by: Rob Brackett <rob@robbrackett.com>",
"is_bot": false,
"headline": "fix: Wrong terminology in types and doc (#117)",
"author_name": "Charley DAVID",
"author_login": "Calyhre",
"committed_at": "2024-06-21T19:44:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8beb15eb1d31bd30898522101b5627c41b35ef4",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-09-28T20:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64ef67f1eddbebfe3c4cc06f25c3c04a658b8f8f",
"body": null,
"is_bot": false,
"headline": "Prepare to release v0.11.1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-09-28T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bbc47c3e2e371bd0af8742af87853b06a48e29a",
"body": "Recent versions of `@datadog/datadog-api-client` have deprecated one of the configuration methods we use, so this updates the minimum required version of that package and switches to the new configuration method. (There are no other breaking changes or differences in Node.js requirements, so this is safe.)",
"is_bot": false,
"headline": "chore: update api usage (#112)",
"author_name": "Andrea Catalucci",
"author_login": "acatalucci-synth",
"committed_at": "2023-09-28T19:57:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f174ca1fdbce55b20ba6622014c152704bcee63d",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T22:04:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fac9ff7b572f157bb15222cf8f890a4758f9effa",
"body": "This is a follow-on to #104. I missed that this file would get published, even though it should not be.",
"is_bot": false,
"headline": "Do not publish `tsconfig.tsbuildinfo`",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:50:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ce4d51d343a895c3981de6439f4b9b861198832",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.0 for release",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:42:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74fcb28c1aa19974a14be09e431c524be20b6204",
"body": null,
"is_bot": false,
"headline": "Fix typo!",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "825e6b06a5c8a5fcdb62dd7366027592f0154df5",
"body": "The proposed feature in #107 was withdrawn because the problem it was solving could have already been handled with a custom reporter. This adds some documentation about how to set up a custom reporter to prevent similar misunderstandings in the future.",
"is_bot": false,
"headline": "Document using a custom reporter",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "735b632d8157311a1a2d0447ddf4baa54d24847b",
"body": "…#100)\n\nThe `apiHost` property here is the same as what Datadog’s docs refer to `site`, so we’ve renamed it to match. We’ve also lower-cased the second \"d\" in `DatadogReporter`, since the previous spelling was wrong (see #59 and #98 for more about that).\r\n\r\nBoth of the old names still work, but using them prints deprecation warnings to let users know they should update their code.",
"is_bot": false,
"headline": "Rename `apiHost` → `site` and `DataDogReporter` → `DatadogReporter` (…",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:16:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c4222c49218904190a87a570447e7aa81e725f9",
"body": "Version 0.10.2 was just released with critical bugfixes, and this adds those updates to the `main` development branch (which has breaking changes and is focused on v0.11.0).",
"is_bot": false,
"headline": "Port updates from v0.10.x fork to main",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-15T01:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5306dcfa9787c85132a8b942e540b72d7a17a4b",
"body": "I missed adding release notes in #104, so I'm adding them separately here. This also cleans up some extra blank lines from that change.",
"is_bot": false,
"headline": "Add release notes for #104 (#105)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T23:36:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b709bf47834daf612508a1e9f27acbefa28b60",
"body": "This probably shouldn't have gotten in originally, but it's pretty noisy when all tests run twice when pushing new commits to a PR (once for the push event and once for the update to the PR).",
"is_bot": false,
"headline": "Stop running tests twice on every PR push",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dc3e5a356615d8bc377bdac3e149d11319f510",
"body": null,
"is_bot": false,
"headline": "Fix intentional error",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f1bb86009d543d39299bb21f2ff4b72259c0c13",
"body": "The prepare script runs when installing, which causes errors when running tests, and means we see type errors multiple times over in CI. This moves it to prepack so it only runs when packing and/or publishing.",
"is_bot": false,
"headline": "Move build to prepack",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c325d4c918890db68fa8733c2830e128f4f3d36",
"body": null,
"is_bot": false,
"headline": "Add intentional error to make sure CI catches it",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac6ec4cfcb98920249a218cd651e8e97f3d129b1",
"body": "This extends the previous change to use class syntax and JSDoc comments everywhere in the codebase. It also turns on type checking (which now works because we are using class syntax everywhere).",
"is_bot": false,
"headline": "Use class syntax in rest of private code",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "902c77f80f7488d26c9819e93775ccf528eec5e8",
"body": "This updates the syntax for all the public classes (reporters, BufferedMertricsLogger) to use native `class` syntax. This allows TypeScript to build better type definitions (compare the output before and after this commit). It also makes for slightly more compact and easy-to-manage syntax.\n\nPartially fixes #83.",
"is_bot": false,
"headline": "Convert public classes to ES6 class syntax",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f12ea03efecb648518a08f5b9af2e2e400f6bb9",
"body": "This should help verify that most changes are valid.",
"is_bot": false,
"headline": "Build types in CI",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e72b1614d4529032a3dae0d50495df259fc441e",
"body": "This converts a number of comments in the code to JSDoc-style comments (and adds some more detailed descriptions/types along the way) and uses TypeScript to build type definition files from the comments. This allows you to publish types directly from this package instead of making TypeScript user in\n[…]\new comments for objects that are not publicly exposed (although that would be a good idea for consistency). It also adds NPM lifecycle scripts to automatically build types when publishing.\n\nFixes #86.",
"is_bot": false,
"headline": "Build TypeScript types from doc comments",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e116612baaa8058807a4f9758b195480a5a1bfb8",
"body": "This switches linting tools from JSHint and JSCS to ESLint. The primary goal here was to solve several security vulnerabilities, but this also uncovered some places previous rules were not being applied (!). This attempts to follow the same settings the project previously had for JSCS and JSHint.\r\n\r\nFixes #85 and also fixes all security warnings when running `npm install`.",
"is_bot": false,
"headline": "Switch to ESLint for all code linting (#102)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T19:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf99e13a4e60a6bf48c3098d5379885ebdc7d210",
"body": "This adds a `histogram` option to `init()` and `BufferedMetricsLogger` that provides a default options object for all calls to the `histogram()` method. Fixes #88.",
"is_bot": false,
"headline": "Add a `histogram` option",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-27T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aac204352c3497a1f071c74a09d0b83f0086e35b",
"body": null,
"is_bot": false,
"headline": "Add failing test for histogram options",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-27T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "450416056cc6c80b17248e793337fd96248351f3",
"body": null,
"is_bot": false,
"headline": "Add docs and release notes",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-26T21:52:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20822e04dd10f8036831e183d394345505a7edb2",
"body": "If metrics failed while sending to Datadog and no explicit error handler was set, log the error regardless of the user's DEBUG setting. This is usually critical info and should not ever be silenced. Fixes #52.\n\nThis also creates a central place to configure `debug` so we don't ever have typos or other configuration inconsistencies across the package.",
"is_bot": false,
"headline": "Never silence sending errors",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-26T21:52:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25bd5ae3e5cd1aeb5ad04620716d80f3f40d8607",
"body": "The new `onError` option for `init()` and `BufferedMetricsLogger` allows people to specify a function for handling asynchronous errors sending metrics, which otherwise wouldn't be possible to know about. This is useful for integrating with other error tracking services if you aren't using Datadog for that (e.g. Sentry.io), taking other special fallback actions, or just getting more detail about the failure.",
"is_bot": false,
"headline": "Add `onError` option",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-26T21:52:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "412852f245a73440101ee349e9dc623640d93e1d",
"body": null,
"is_bot": false,
"headline": "Fix .editorconfig for YAML files",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-25T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c907472ab009ae4a9fb022efa11ab09f98af200",
"body": null,
"is_bot": false,
"headline": "Fix bad instances of \"DataDog\"",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-25T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edcd8f8f1310287dde4dd648fade6bef4f004f44",
"body": "In #59, @dbenamy fixed a number of places where the text \"DataDog\" (incorrect) was used instead of \"Datadog\" (correct). People have since added more incorrect usages (many from me!), so this adds a quick script to log an error during linting to prevent re-introducing the problem.",
"is_bot": false,
"headline": "Check for uppercase second D in \"Datadog\"",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-25T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3e0cf9a1fada0e4ac86a1252c39a7ceee55e955",
"body": null,
"is_bot": false,
"headline": "Add missing changelog from #82 (oops)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-24T17:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97272ee380b79252158f2c573fc7100eb45dc14c",
"body": "This uses a `WeakMap` to keep the clients private without leaking memory. If/when we update to `class` syntax, we should probably use private fields for this instead.\n\nFixes #82.",
"is_bot": false,
"headline": "Use separate Datadog clients for each reporter",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd7c65097bf25d19daa528464cd3fba706da5451",
"body": "This test should fail, demonstrating the issue with #82.\n\nThis also adds tests for the success and error handlers on `flush`, and adds the `nock` package to mock HTTP responses.",
"is_bot": false,
"headline": "Add test for loggers with different credentials",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "326f4b5deb182cac7b9212bab7f92097c3524806",
"body": "This adds information about the supported versions of Node.js in the README and in the `engines` field of `package.json` (so NPM can show warnings).",
"is_bot": false,
"headline": "Declare supported version of Node.js",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bec15ea0f368e77fbd826aa43411e1d9d1842e03",
"body": "We no longer use Travis for CI, and whatever version of Node.js a developer has set locally should not be shared (this is a library that works with many versions of Node.js, not an application that should be locked to a single \"correct\" version).",
"is_bot": false,
"headline": "Drop vestigial Travis and NVM config files (#97)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b33e66663c79dbf01c0cba286955124df6781223",
"body": "This updates Mocha and Chai (and plugins) to their latest compatible versions and fixes #87.\n\nMocha v10 (the latest) drops support for Node.js v12, so we can't update to it. Instead, we can update to the latest v9.x release, which at least fixes a number of security vulnerabilities. Our usage of Moc\n[…]\n always means that the provided *keys* might be keys or might be paths. In v3.x, `deep` was used for both in different circumstances, which led to some fuzziness about what a given assertion is doing.",
"is_bot": false,
"headline": "Update test tools (#94)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:55:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c4ee0ce2db5473ca78105c9b5c136aebb03821a0",
"body": null,
"is_bot": false,
"headline": "Clean up files to follow linter rules",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b96941f8d2f2fcb234daf51f59a38e9b58dbe58a",
"body": null,
"is_bot": false,
"headline": "Add .editorconfig file",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbc4eea1e0c30d3b3a93d2487757dfbe1e974f0b",
"body": "This updates JSCS and JSHint to their latest versions and updates their configuration to match the current code style here. It does not solve the vulnerabilities in JSCS (since it is no longer maintained), but gets us a little closer to something that at least *works*.",
"is_bot": false,
"headline": "Update linters to latest versions",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e97b2781bb536666e2ff95fbf04a5545ce42919d",
"body": "This adds some additional release notes that weren’t covered in #90 because the changes were still in progress when it was merged.",
"is_bot": false,
"headline": "Release note updates for \"in development\" section (#93)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T16:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "664131147a1aca0a7a68a8817c9ad0cae7314bb4",
"body": null,
"is_bot": false,
"headline": "Add notes for in-development changes",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T00:06:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0422d390cddc9d4e096a3e52cefac17432d37f69",
"body": "These release notes were missing from the README. Fixes #79.",
"is_bot": false,
"headline": "Add release notes for 0.8.2 through 0.10.1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T00:06:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6357926202c90f56f2f368f00ab7a95a80e5b6d7",
"body": "It looks like the `apiHost` option was added in #50, had some fixes committed directly to the main branch later (?), and then was broken in #62 when the underlying Datadog client implementation was changed. This fixes it, and resolves #42.\n\nThe `agent` option was also broken in #62, but the PR discu\n[…]\nlook intentional (while there are no notes about breaking `apiHost`). However, only part of the implementation awas removed and it was still documented in some spots. I also cleaned all that out here.",
"is_bot": false,
"headline": "Fix the broken `apiHost` option",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T00:05:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c6c4410b925bf01280afa78bcc8900a6613a511",
"body": null,
"is_bot": false,
"headline": "Metrics should flush a *copy* of tags so alteration is safe",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfc00d1e19f79df78ee311627b4c3746a2a256f3",
"body": null,
"is_bot": false,
"headline": "Use newer style for functions in object literals",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5883d5ad22553fe4ce622b8f677d60af719386ad",
"body": null,
"is_bot": false,
"headline": "Use arrow function where they simplify things",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8cb8a067dfe8864a408c018907f69ddbf33e472",
"body": null,
"is_bot": false,
"headline": "Use native promise tools instead of callbackify",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a8f279a937385a5b58ddbff171646222a71ebb4",
"body": null,
"is_bot": false,
"headline": "Don't use concat(), it's slow and memory-intensive",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72b64ece86b90871b6ca3982b06c8ae525d7d290",
"body": null,
"is_bot": false,
"headline": "Use Array.prototype.includes()",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "262f1eecff966792925c97438444248fe677d90c",
"body": null,
"is_bot": false,
"headline": "Use for...of loops where appropriate",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8df9d1daf650fdfd42133bcafee04437cd602fd",
"body": "Both dependencies of this package used to exact dependencies, which can result in a lot of redundancy if a consumer of this package has other dependencies that also use `debug` or `@datadog/datadog-api-client`. Instead, we now use \"compatible with\" ranges to let consumers use any version of our dependencies that should work with our code.\n\nThis also updates `debug` to the current major release. (This declares anything compatible with 4.1, not 4.0, since 4.1 has an important fix.)",
"is_bot": false,
"headline": "Use ranges for dependency versions",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-20T20:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70f462a095384d52b927981ca8ff2f9fa6405203",
"body": "We recently switched to GitHub actions in stead of Travis for continuous integration, but forgot to update the status image in the README. This fixes it to be based on our actual build status for the `main` branch.\r\n\r\nSee also #75.",
"is_bot": false,
"headline": "Update README build status for GitHub actions",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-20T17:49:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b8e1eb51b95180bc8135c7a8f98552a0bea9be",
"body": "Add median aggregation for histograms",
"is_bot": false,
"headline": "Merge pull request #69 from Mr0grog/68-histogram-median",
"author_name": "Erik Boesen",
"author_login": "ErikBoesen",
"committed_at": "2022-09-19T22:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a8c7bdc10fe3d22bce2be6488ca9d80c68df025",
"body": null,
"is_bot": false,
"headline": "Document histogram options",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:28:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1056473b0fdf3c2c5a7ff19e32db69d93521b839",
"body": null,
"is_bot": false,
"headline": "Document `median` in README",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "648b13c6a8a74500ebbf84a65a99ff2afae7bd29",
"body": null,
"is_bot": false,
"headline": "Add test for median",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cef5e62f5945f62a18d7c532195fa73e339e573b",
"body": null,
"is_bot": false,
"headline": "Fix metric order/count-dependent tests",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:27:22Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 16,
"latest_release_at": "2026-07-24T20:48:45Z",
"latest_release_tag": "v0.13.0-pre.2",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 6,
"days_since_latest_release": 11,
"mean_days_between_releases": 138.8
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "datadog-metrics",
"path": "package.json",
"tokens": [
"npm.entry"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [],
"total": 0,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "datadog-metrics",
"exists": true,
"license": "MIT",
"keywords": [
"datadog",
"metrics",
"stats"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/datadog-metrics",
"declared_type": null,
"is_deprecated": false,
"latest_version": "0.12.1",
"repository_url": "https://github.com/dbader/node-datadog-metrics",
"versions_count": 33,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 4,
"monthly_downloads": 10535159,
"first_published_at": "2014-12-08T01:12:05.441000Z",
"latest_published_at": "2024-12-19T17:54:05.820000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 593
}
]
},
"popularity": {
"forks": 60,
"stars": 147,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2015-03-27",
"count": 1
},
{
"date": "2015-10-15",
"count": 1
},
{
"date": "2015-11-05",
"count": 1
},
{
"date": "2015-12-04",
"count": 1
},
{
"date": "2016-03-17",
"count": 1
},
{
"date": "2016-10-14",
"count": 1
},
{
"date": "2017-01-06",
"count": 1
},
{
"date": "2017-03-14",
"count": 1
},
{
"date": "2017-04-21",
"count": 1
},
{
"date": "2017-04-26",
"count": 1
},
{
"date": "2017-10-23",
"count": 1
},
{
"date": "2017-11-17",
"count": 2
},
{
"date": "2018-01-02",
"count": 1
},
{
"date": "2018-01-10",
"count": 1
},
{
"date": "2018-02-13",
"count": 1
},
{
"date": "2018-04-06",
"count": 1
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-07-01",
"count": 1
},
{
"date": "2018-10-24",
"count": 1
},
{
"date": "2018-11-07",
"count": 1
},
{
"date": "2018-11-20",
"count": 1
},
{
"date": "2018-12-02",
"count": 1
},
{
"date": "2019-01-21",
"count": 1
},
{
"date": "2019-05-08",
"count": 1
},
{
"date": "2019-07-12",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2020-01-17",
"count": 1
},
{
"date": "2020-03-06",
"count": 1
},
{
"date": "2020-03-27",
"count": 1
},
{
"date": "2020-05-04",
"count": 1
},
{
"date": "2020-07-18",
"count": 1
},
{
"date": "2020-09-13",
"count": 1
},
{
"date": "2020-09-25",
"count": 1
},
{
"date": "2020-12-09",
"count": 1
},
{
"date": "2021-01-25",
"count": 1
},
{
"date": "2021-04-23",
"count": 1
},
{
"date": "2021-10-16",
"count": 1
},
{
"date": "2022-03-07",
"count": 1
},
{
"date": "2022-04-06",
"count": 1
},
{
"date": "2022-08-29",
"count": 1
},
{
"date": "2022-09-05",
"count": 1
},
{
"date": "2022-09-15",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-11-26",
"count": 1
},
{
"date": "2022-12-09",
"count": 1
},
{
"date": "2023-09-27",
"count": 2
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2025-02-11",
"count": 1
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-05-24",
"count": 1
},
{
"date": "2025-11-03",
"count": 1
}
],
"complete": true,
"collected": 56,
"total_forks": 60
},
"star_history": null,
"open_issues_and_prs": 7
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 15766,
"source_files_sampled": 17,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 38,
"malicious_count": 0,
"assessed_package": "npm:datadog-metrics@0.12.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "cross-fetch",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "debug",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "cross-fetch",
"direct": true,
"version": "^4.0.0",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": true,
"version": "^4.1.0",
"ecosystem": "npm"
},
{
"name": "@datadog/datadog-api-client",
"direct": false,
"version": "^1.31.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^14.14.45",
"ecosystem": "npm"
},
{
"name": "chai",
"direct": false,
"version": "4.3.6",
"ecosystem": "npm"
},
{
"name": "chai-as-promised",
"direct": false,
"version": "^7.1.2",
"ecosystem": "npm"
},
{
"name": "chai-string",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "^8.24.0",
"ecosystem": "npm"
},
{
"name": "mocha",
"direct": false,
"version": "10.8.2",
"ecosystem": "npm"
},
{
"name": "nock",
"direct": false,
"version": "^13.2.9",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^4.8.4",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 11,
"direct_count": 2,
"indirect_count": 9
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 92,
"open_issues": 6,
"closed_ratio": 0.895,
"closed_issues": 51,
"closed_unmerged_prs": 10
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "Mr0grog",
"commits": 94,
"avatar_url": "https://avatars.githubusercontent.com/u/74178?v=4"
},
{
"type": "User",
"login": "dbader",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/306708?v=4"
},
{
"type": "User",
"login": "csabapalfi",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/181959?v=4"
},
{
"type": "User",
"login": "ErikBoesen",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/5923662?v=4"
},
{
"type": "User",
"login": "rpelliard",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5392527?v=4"
},
{
"type": "User",
"login": "dustingibbs",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/5171223?v=4"
},
{
"type": "User",
"login": "dkMorlok",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/2921037?v=4"
},
{
"type": "User",
"login": "gquinteros93",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/53574912?v=4"
},
{
"type": "User",
"login": "acatalucci-synth",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/133665309?v=4"
},
{
"type": "User",
"login": "Calyhre",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3692274?v=4"
}
],
"contributors_sampled": 18,
"top_contributor_share": 0.487
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [
".eslintrc.json"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 2,
"reason": "6 out of 26 merged PRs checked by a CI test -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/23 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 25 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 7,
"reason": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 4,
"reason": "dependency not pinned by hash detected -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "230872b1f2d5da9ad2e56938427c5ca4954e1c5a",
"ran_at": "2026-08-05T07:56:18Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 1,
"decided_7d": 1,
"merged_30d": 5,
"authors_30d": 2,
"decided_30d": 5,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 2,
"newcomer_merged_30d": 1,
"bot_prs_excluded_30d": 2,
"newcomer_authors_30d": 1,
"newcomer_decided_30d": 1
},
"ci_last_run_at": "2026-08-02T20:57:23Z",
"oldest_open_prs": [
{
"number": 151,
"created_at": "2025-11-03T17:07:40Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-08-02T20:56:35Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 12,
"created_at": "2015-12-04T12:01:53Z",
"last_comment_at": "2017-10-26T05:18:56Z",
"last_comment_author": "karsai5"
},
{
"number": 19,
"created_at": "2016-08-04T14:14:53Z",
"last_comment_at": "2017-01-30T10:08:49Z",
"last_comment_author": "dbader"
},
{
"number": 33,
"created_at": "2017-11-09T13:41:46Z",
"last_comment_at": "2022-09-27T20:20:52Z",
"last_comment_author": "Mr0grog"
},
{
"number": 53,
"created_at": "2020-06-29T14:27:18Z",
"last_comment_at": "2024-11-12T21:38:27Z",
"last_comment_author": "Mr0grog"
},
{
"number": 55,
"created_at": "2020-09-12T00:16:25Z",
"last_comment_at": "2022-09-20T01:36:17Z",
"last_comment_author": "Mr0grog"
},
{
"number": 132,
"created_at": "2024-11-12T22:38:27Z",
"last_comment_at": "2025-09-11T00:58:22Z",
"last_comment_author": "Mr0grog"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/dbader/node-datadog-metrics",
"host": "github.com",
"name": "node-datadog-metrics",
"owner": "dbader"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 67,
"calibrated": 78,
"calibration": "2026-08-02"
}
}
],
"value": 78,
"inputs": {
"security": 56,
"vitality": 65,
"community": 71,
"governance": 72,
"calibration": "2026-08-02",
"engineering": 70,
"ai_readiness": 50,
"weighted_overall_raw": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 65,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"commits_last_year": 16,
"human_commit_share": 0.91,
"days_since_last_push": 2,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "16 commits in the last year",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 16
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 13,
"latest_release_tag": "v0.13.0-pre.2",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 138.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~138.8 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 138.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 71,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"forks": 60,
"stars": 147,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "147 stars",
"points": 35.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 147
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "60 forks",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 60
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 0,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "exceptional",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"datadog-metrics"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 10535159
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "10,535,159 downloads/month across npm",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 10535159,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 72,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 18,
"top_contributor_share": 0.487
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 49% of commits",
"points": 11.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 49
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "18 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 18
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 25 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"merged_prs": 92,
"open_issues": 6,
"closed_issues": 51,
"prs_merged_7d": 1,
"prs_decided_7d": 1,
"prs_merged_30d": 5,
"prs_decided_30d": 5,
"issue_closed_ratio": 0.895,
"closed_unmerged_prs": 10,
"first_time_authors_30d": 1,
"first_time_prs_merged_30d": 1,
"first_time_prs_decided_30d": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "92/102 decided PRs merged",
"points": 27.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 92,
"decided": 102
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "1/1 first-time contributors' PRs merged in 30d",
"points": 13,
"status": "met",
"details": [
{
"code": "newcomer_prs_merged",
"params": {
"days": 30,
"merged": 1,
"decided": 1
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 74,
"inputs": {
"followers": 3489,
"owner_type": "User",
"is_verified": null,
"owner_login": "dbader",
"public_repos": 53,
"account_age_days": 5893
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3,489 followers of dbader",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3489,
"login": "dbader"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "53 public repos, account ~16 yr old",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 53
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"packages": [
"datadog-metrics"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 593
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 593 days ago",
"points": 14,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 593
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 26 merged PRs checked by a CI test -- score normalized to 2",
"points": 4,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://dbader.org/blog/monitoring-your-nodejs-app-with-datadog",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://dbader.org/blog/monitoring-your-nodejs-app-with-datadog",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 56,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 26 merged PRs checked by a CI test -- score normalized to 2",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 25 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:datadog-metrics@0.12.1 runtime dependency closure — what installing the published package pulls in — 38 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:datadog-metrics@0.12.1",
"assessed": 38
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 38,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 38,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 50,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.604,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "55 of 91 human commits state their intent (structured subject or explanatory body)",
"points": 32.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 55,
"sampled": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 4,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 15766,
"source_files_sampled": 17,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/17 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 14
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "npm.entry",
"weight": 8
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"library"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-08-05T07:56:39.428470Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/dbader/node-datadog-metrics.svg",
"full_name": "dbader/node-datadog-metrics",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з dbader/node-datadog-metrics. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.5.0, схема v0.31.0 — повна методологія · вікі метрик.
