Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.30.0 · метрики 2.3.1 · 2026-08-04 00:56 UTC

eth-cscs / manta

Another CLI for Alps

Rust · ShellBSD-3-Clause★ 23 зірки⑂ 4 форкиз бер. 2023 р.Переглянути на GitHub ↗
ТипБібліотекаІнструмент командного рядкаМережевий сервісТермінальний інтерфейсяк це визначено
#alps#cli#csm#productivity#cscs

eth-cscs/manta має індекс здоров’я 78 зі 100, що відповідає смузі «Добрий». Найвищий показник — Vitality (88/100), найнижчий — Community & Adoption (42/100). Останнє оновлення було 15 днів тому. Більшість нещодавньої роботи виконує один учасник.

78
загалом / 100
Добрий

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).

78
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Зважений загальний бал 67 калібровано до 78 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).

Власність

Swiss National Supercomputing Center (CSCS)Організація
181 підписник142 публічні репозиторіїз жовт. 2013 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікаціяТеги
crates.iomanta-cli1.71.141712722 дні томуcliproductivity
crates.iomanta-server2.0.0-beta.6211222 дні тому—
crates.iomanta-shared2.0.0-beta.624205722 дні тому—

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

88Відмінний · 21% загального індексу

Активність розробки

87Відмінний
Як обчислюється оцінка
28.8/36Свіжість push — останній push 15 дн. тому
29.8/36Ритм комітів — 43/52 тижнів із комітами
18/18Обсяг комітів — 964 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year964
human_commit_share0,89
days_since_last_push15
active_weeks_last_year43

Дисципліна релізів

90Відмінний
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 100 релізів
36/36Свіжість релізів — останній реліз 22 дн. тому
27/27Ритм релізів — реліз кожні ~2,3 дн.
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Використані вхідні дані
releases_count100
latest_release_tagv2.0.0-beta.62
releases_from_tagsні
days_since_latest_release22
mean_days_between_releases2,3

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

42Слабкий · 17% загального індексу

Популярність і впровадження

30У зоні ризику
Як обчислюється оцінка
21.8/60Зірки — 23 зірок
4/25Форки — 4 форків
4.7/15Спостерігачі — 8 спостерігачів
Використані вхідні дані
forks4
stars23
watchers8
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Здоров'я спільноти

50Помірний
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (BSD-3-Clause)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
readme_badges0
has_contributingні
has_issue_templateні
has_code_of_conductні
readme_badge_services—
has_pull_request_templateні

Впровадження в екосистемі (завантаження)

49Слабкий
Як обчислюється оцінка
39.1/80Щомісячні завантаження — 848 завантажень/місяць у crates
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packagesmanta-cli, manta-server, manta-shared
dependents—
ecosystemscrates
total_downloads5 424
monthly_downloads848
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

66Добрий · 23% загального індексу

Стійкість мейнтейнерів (бас-фактор)

31У зоні ризику
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
7.7/22.5Розподіл комітів — головний контриб’ютор — автор 66% комітів
8.1/13.5Широта контриб’юторів — 6 контриб’юторів
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Використані вхідні дані
bus_factor1
contributors_sampled6
top_contributor_share0,659

Реактивність на issue та PR

77Добрий
Як обчислюється оцінка
38.6/42Вирішення issue — закрито 92% issue
28.6/30Прийняття PR — злито 20/21 вирішених PR
0/13Newcomer PR acceptance — за 30 дн. не вирішено жодного PR від новачка
0/15OpenSSF Scorecard: Code-Review — Found 1/30 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs20
open_issues7
closed_issues81
prs_merged_7d0
prs_decided_7d0
prs_merged_30d1
prs_decided_30d1
issue_closed_ratio0,92
closed_unmerged_prs1
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
Виключено з оцінювання (немає даних або не застосовно): newcomer_pr_acceptance. Залишкові ваги перенормовано.

Власність та опіка

71Добрий
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
16.2/25Охоплення власника — 181 підписників у eth-cscs
25/25Послужний список — 142 публічних репозиторіїв, вік облікового запису ~12 р.
Використані вхідні дані
followers181
owner_typeOrganization
is_verified—
owner_logineth-cscs
public_repos142
account_age_days4 668

Супровід пакетів

100Винятковий
Як обчислюється оцінка
25/25Опубліковано й доступно — 3 пакет(ів) у crates
35/35Свіжість публікацій — остання публікація 22 дн. тому
20/20Історія версій — 127 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesmanta-cli, manta-server, manta-shared
ecosystemscrates
any_deprecatedні
min_days_since_publish22

Інженерна якість

Чи наявні базові інженерні практики та документація?

81Відмінний · 19% загального індексу

Інженерні практики

68Добрий
Як обчислюється оцінка
24/24Процеси CI — 5 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні

Документація

100Винятковий
Як обчислюється оцінка
30/30README
25/25Каталог документації
15/15Сайт документації / домашня сторінка — https://eth-cscs.github.io/manta/
10/10Опис репозиторію
10/10Теми — 5 тем
10/10Wiki
Використані вхідні дані
topicsalps, cli, csm, productivity, cscs
has_wikiтак
homepagehttps://eth-cscs.github.io/manta/
has_readmeтак
has_docs_dirтак
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

47Слабкий · 16% загального індексу

Стан безпеки

47Слабкий
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/30 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate4,7

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.

79Добрий · 4% загального індексу

Контекст і настанови для агентів

85Відмінний
Як обчислюється оцінка
45/45Інструкції для агентів — CLAUDE.md
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 88 з 89 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,989
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes2 147

Цикл верифікації (збірка / тести / перевірка типів)

66Добрий
Як обчислюється оцінка
12.6/18Розгортання однією командою — Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Rust (статично типізована)
10/10Відтворюване середовище — Dockerfile
10/10Підтверджена практика роботи з агентами — 6 з останніх 100 комітів створено агентом або з його зазначенням
0/8Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfiles—
has_dockerfileтак
typed_languageтак
bootstrap_files—
has_devcontainerні
has_linter_configні
typecheck_configs—
agent_commit_share0,06
toolchain_manifestsCargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml, crates/manta-shared/Cargo.toml
dependency_bot_commit_share0

Читабельність коду для моделей

100Винятковий
Як обчислюється оцінка
45/45Типізований код — Rust (статично типізована)
55/55Керовані розміри файлів — 0/228 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageRust
largest_source_bytes40 182
source_files_sampled228
oversized_source_files0

Машиночитні інтерфейси

80Відмінний
Як обчислюється оцінка
40/40Схема API (OpenAPI/GraphQL/proto) — crates/manta-cli/openapi.json
0/20Сервер MCP
40/40Придатні до запуску приклади — examples
Використані вхідні дані
example_dirsexamples
has_mcp_signalні
api_schema_filescrates/manta-cli/openapi.json

Ключові факти

23зірок GitHub
6контриб'юторів
964комітів за останні 12 місяців
15днів від останнього пушу
100релізів
1бас-фактор
7відкритих issue
crates.ioпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • No resolved dependencies carried a version and a supported ecosystem

Докладніше

Історія зірок і форків 0 ★ / 4 ⇿
0Зірки
4Форки

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

1223344412023-072024-022024-10

Кожна точка охоплює 2 днів.

OpenSSF Scorecard 4.7 / 10
4.7сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-08-04 00:56 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests3 out of 3 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/30 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 70
РеєстрПакетОбмеження версіїМаніфест
crates.iomanta-shared—crates/manta-cli/Cargo.toml
crates.ionodeset0.5.0crates/manta-cli/Cargo.toml
crates.iochrono0.4.41crates/manta-cli/Cargo.toml
crates.ioanyhow1.0.44crates/manta-cli/Cargo.toml
crates.ioreqwest0.13.4crates/manta-cli/Cargo.toml
crates.ioserde1.0.219crates/manta-cli/Cargo.toml
crates.ioserde_json1.0.140crates/manta-cli/Cargo.toml
crates.ioserde_yaml0.9.34crates/manta-cli/Cargo.toml
crates.iotracing0.1crates/manta-cli/Cargo.toml
crates.iotokio1.45crates/manta-cli/Cargo.toml
crates.iotokio-util0.7.4crates/manta-cli/Cargo.toml
crates.iominijinja—crates/manta-cli/Cargo.toml
crates.iouuid1.16.0crates/manta-cli/Cargo.toml
crates.iogit20.21crates/manta-cli/Cargo.toml
crates.iodialoguer0.12.0crates/manta-cli/Cargo.toml
crates.iofutures0.3.31crates/manta-cli/Cargo.toml
crates.iotoml_edit0.22.27crates/manta-cli/Cargo.toml
crates.ioclap4.5.60crates/manta-cli/Cargo.toml
crates.ioclap_complete4.5.66crates/manta-cli/Cargo.toml
crates.ioclap_mangen0.3.0crates/manta-cli/Cargo.toml
crates.iocomfy-table7.2.2crates/manta-cli/Cargo.toml
crates.iocrossterm0.29.0crates/manta-cli/Cargo.toml
crates.ioexecute0.2.13crates/manta-cli/Cargo.toml
crates.iois_executable1.0.1crates/manta-cli/Cargo.toml
crates.ioconfig0.15.19crates/manta-cli/Cargo.toml
crates.iotokio-tungstenite0.29crates/manta-cli/Cargo.toml
crates.ioself_update0.44crates/manta-cli/Cargo.toml
crates.ioxz20.1crates/manta-cli/Cargo.toml
crates.iotar0.4crates/manta-cli/Cargo.toml
crates.iosemver1.0crates/manta-cli/Cargo.toml
crates.ioprogenitor-client0.14crates/manta-cli/Cargo.toml
crates.iomanta-shared—crates/manta-server/Cargo.toml
crates.iomanta-backend-dispatcher—crates/manta-server/Cargo.toml
crates.iocsm-rs—crates/manta-server/Cargo.toml
crates.ioochami-rs—crates/manta-server/Cargo.toml
crates.ioaxum0.8crates/manta-server/Cargo.toml
crates.ioaxum-server0.8crates/manta-server/Cargo.toml
crates.iotower-http0.6crates/manta-server/Cargo.toml
crates.iotokio—crates/manta-server/Cargo.toml
crates.iotokio-util—crates/manta-server/Cargo.toml
crates.iofutures—crates/manta-server/Cargo.toml
crates.ioutoipa—crates/manta-server/Cargo.toml
crates.ioutoipa-swagger-ui9crates/manta-server/Cargo.toml
crates.iorustls0.23crates/manta-server/Cargo.toml
crates.iobase64—crates/manta-server/Cargo.toml
crates.iochrono—crates/manta-server/Cargo.toml
crates.iordkafka—crates/manta-server/Cargo.toml
crates.iocomfy-table7.2.2crates/manta-server/Cargo.toml
crates.ioglobset0.4crates/manta-server/Cargo.toml
crates.iohostlist-parser0.1.6crates/manta-server/Cargo.toml
crates.ioregex—crates/manta-server/Cargo.toml
crates.ioreqwest—crates/manta-server/Cargo.toml
crates.ioserde—crates/manta-server/Cargo.toml
crates.ioserde_json—crates/manta-server/Cargo.toml
crates.ioserde_yaml—crates/manta-server/Cargo.toml
crates.iotracing—crates/manta-server/Cargo.toml
crates.iomanta-backend-dispatcher—crates/manta-shared/Cargo.toml
crates.iobase64—crates/manta-shared/Cargo.toml
crates.ioserde—crates/manta-shared/Cargo.toml
crates.ioserde_json—crates/manta-shared/Cargo.toml
crates.ioserde_yaml—crates/manta-shared/Cargo.toml
crates.iochrono—crates/manta-shared/Cargo.toml
crates.ioutoipa—crates/manta-shared/Cargo.toml
crates.iotracing—crates/manta-shared/Cargo.toml
crates.iotracing-subscriber—crates/manta-shared/Cargo.toml
crates.ioconfig—crates/manta-shared/Cargo.toml
crates.iodirectories—crates/manta-shared/Cargo.toml
crates.iotoml_edit—crates/manta-shared/Cargo.toml
crates.ioreqwest—crates/manta-shared/Cargo.toml
crates.iothiserror—crates/manta-shared/Cargo.toml
Усі залежності 47

Повний розв'язаний набір залежностей із графа залежностей GitHub: 36 прямих і 11 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
crates.ioanyhow—пряма
crates.ioaxum—пряма
crates.ioaxum-server—пряма
crates.iobase64—пряма
crates.iochrono—пряма
crates.ioclap—пряма
crates.ioclap_complete—пряма
crates.ioclap_mangen—пряма
crates.iocomfy-table—пряма
crates.ioconfig—пряма
crates.iocrossterm—пряма
crates.iodialoguer—пряма
crates.ioexecute—пряма
crates.iofutures—пряма
crates.iogit2—пряма
crates.iohostlist-parser—пряма
crates.iois_executable—пряма
crates.ionodeset—пряма
crates.ioprogenitor-client—пряма
crates.ioreqwest—пряма
crates.iorustls—пряма
crates.ioself_update—пряма
crates.iosemver—пряма
crates.ioserde—пряма
crates.ioserde_json—пряма
crates.ioserde_yaml—пряма
crates.iotar—пряма
crates.iotokio—пряма
crates.iotokio-tungstenite—пряма
crates.iotokio-util—пряма
crates.iotoml_edit—пряма
crates.iotower-http—пряма
crates.iotracing—пряма
crates.ioutoipa-swagger-ui—пряма
crates.iouuid—пряма
crates.ioxz2—пряма
crates.ioassert_cmd—непряма
crates.iohttp-body-util—непряма
crates.ioopenapiv3—непряма
crates.iopredicates—непряма
crates.ioprettyplease—непряма
crates.ioprogenitor—непряма
crates.iosyn—непряма
crates.iotempfile—непряма
crates.iotoml—непряма
crates.iotower—непряма
crates.iowiremock—непряма
Сповіщення про залежності не оцінено

Звірка сповіщень не відбулася для цього звіту: No resolved dependencies carried a version and a supported ecosystem

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "alps",
        "cli",
        "csm",
        "productivity",
        "cscs"
      ],
      "is_fork": false,
      "size_kb": 8012,
      "has_wiki": true,
      "homepage": "https://eth-cscs.github.io/manta/",
      "languages": {
        "Roff": 51669,
        "Rust": 1477296,
        "Shell": 373137,
        "Elvish": 96682,
        "Dockerfile": 5726
      },
      "pushed_at": "2026-07-19T13:29:08Z",
      "created_at": "2023-03-27T13:31:03Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T12:03:56Z",
      "description": "Another CLI for Alps",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-3-Clause",
      "default_branch": "main",
      "license_spdx_raw": "BSD-3-Clause",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust",
        "Shell"
      ]
    },
    "owner": {
      "blog": "https://www.cscs.ch/",
      "name": "Swiss National Supercomputing Center (CSCS)",
      "type": "Organization",
      "login": "eth-cscs",
      "company": null,
      "location": "Lugano, Switzerland",
      "followers": 181,
      "avatar_url": "https://avatars.githubusercontent.com/u/5744410?v=4",
      "created_at": "2013-10-22T07:14:44Z",
      "is_verified": null,
      "public_repos": 142,
      "account_age_days": 4668
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-3-Clause",
      "raw_spdx": "BSD-3-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.0.0-beta.62",
          "kind": "prerelease",
          "published_at": "2026-07-12T19:59:26Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.62",
          "kind": "other",
          "published_at": "2026-07-12T19:38:36Z"
        },
        {
          "tag": "v2.0.0-beta.61",
          "kind": "prerelease",
          "published_at": "2026-06-28T09:14:39Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.61",
          "kind": "other",
          "published_at": "2026-06-28T08:47:42Z"
        },
        {
          "tag": "v2.0.0-beta.60",
          "kind": "prerelease",
          "published_at": "2026-06-25T12:37:23Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.60",
          "kind": "other",
          "published_at": "2026-06-25T12:10:21Z"
        },
        {
          "tag": "v2.0.0-beta.59",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:13:56Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.59",
          "kind": "other",
          "published_at": "2026-06-22T09:51:54Z"
        },
        {
          "tag": "v2.0.0-beta.57",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:00:32Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.57",
          "kind": "other",
          "published_at": "2026-06-22T09:37:52Z"
        },
        {
          "tag": "v2.0.0-beta.56",
          "kind": "prerelease",
          "published_at": "2026-06-16T01:23:38Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.56",
          "kind": "other",
          "published_at": "2026-06-16T01:05:20Z"
        },
        {
          "tag": "v1.71.1",
          "kind": "patch",
          "published_at": "2026-06-15T09:39:16Z"
        },
        {
          "tag": "v2.0.0-beta.55",
          "kind": "prerelease",
          "published_at": "2026-06-14T20:37:29Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.55",
          "kind": "other",
          "published_at": "2026-06-14T20:14:27Z"
        },
        {
          "tag": "v2.0.0-beta.54",
          "kind": "prerelease",
          "published_at": "2026-06-14T00:35:03Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.54",
          "kind": "other",
          "published_at": "2026-06-14T00:10:49Z"
        },
        {
          "tag": "v2.0.0-beta.53",
          "kind": "prerelease",
          "published_at": "2026-06-09T07:28:22Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.53",
          "kind": "other",
          "published_at": "2026-06-09T07:15:56Z"
        },
        {
          "tag": "v2.0.0-beta.50",
          "kind": "prerelease",
          "published_at": "2026-06-07T02:45:02Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.50",
          "kind": "other",
          "published_at": "2026-06-07T02:28:23Z"
        },
        {
          "tag": "v2.0.0-beta.48",
          "kind": "prerelease",
          "published_at": "2026-06-06T21:43:25Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.48",
          "kind": "other",
          "published_at": "2026-06-06T21:27:01Z"
        },
        {
          "tag": "v2.0.0-beta.46",
          "kind": "prerelease",
          "published_at": "2026-06-06T14:12:24Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.46",
          "kind": "other",
          "published_at": "2026-06-06T13:53:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.44",
          "kind": "other",
          "published_at": "2026-06-06T13:41:42Z"
        },
        {
          "tag": "v2.0.0-beta.43",
          "kind": "prerelease",
          "published_at": "2026-06-05T22:34:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.43",
          "kind": "other",
          "published_at": "2026-06-05T22:15:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.42",
          "kind": "other",
          "published_at": "2026-06-05T22:11:21Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.41",
          "kind": "other",
          "published_at": "2026-06-05T22:04:17Z"
        },
        {
          "tag": "v2.0.0-beta.39",
          "kind": "prerelease",
          "published_at": "2026-06-05T21:44:27Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.39",
          "kind": "other",
          "published_at": "2026-06-05T21:25:31Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:27:45Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:11:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:12:06Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:58:27Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:34:50Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:34:44Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:25:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:11:13Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:11:05Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:55:51Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:39:00Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:39:00Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:25:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:11:27Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:10:48Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:56:17Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:39:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:39:42Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T10:13:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T09:52:40Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T09:52:33Z"
        },
        {
          "tag": "v1.71.0",
          "kind": "minor",
          "published_at": "2026-06-03T00:15:57Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:27:50Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:04:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:04:46Z"
        },
        {
          "tag": "v1.70.0",
          "kind": "minor",
          "published_at": "2026-06-02T20:10:39Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:48:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:25:30Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:25:23Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T17:08:22Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T16:53:15Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T16:53:11Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:59:49Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:46:19Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:46:19Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T21:01:31Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T20:44:31Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T20:44:23Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:48:52Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:31:06Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:31:04Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:25:43Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:08:33Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:08:27Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T08:06:41Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T07:47:42Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T07:47:40Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.11",
          "kind": "other",
          "published_at": "2026-05-22T16:16:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.11",
          "kind": "other",
          "published_at": "2026-05-22T16:16:48Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:28:45Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:06:40Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:06:35Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T11:14:03Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T10:57:27Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T10:57:24Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:17:05Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:04:54Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:04:39Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:58:26Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:44:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:44:11Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:53:20Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:38:04Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:38:03Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:23:42Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:06:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:06:29Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.4",
          "kind": "other",
          "published_at": "2026-05-18T22:32:16Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "41af6045b118591e9f529b44d75efe0d75d04a7f",
          "body": "* fix(server): order images before applying --limit\n\n`service::image::get_images` truncated to `params.limit` before\nsorting, so the cap sliced the backend's arbitrary ordering rather\nthan the newest images: `manta get images --most-recent` returned an\narbitrary image. The sort was also ascending, c\n[…]\n-first, so\nreword to describe newest-N selection with oldest-first display.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "manta get images can filter by image creation date (#106)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-07-17T12:03:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "278ce9e68f2c2a20969ebfe99cdabed65d3cc874",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T18:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bb5254943f6f4c150d16e19bc498745bb9b4cd0",
          "body": "Reintroduce the CLI-local `read_only` flag in `cli.toml` and the two\n`config set/unset read-only` subcommands that toggle it. The CLI's\nread-only gate now consults `AppContext::read_only` (populated from\n`cli.toml`) instead of the `manta-read-only` JWT realm role.\n\n- `SessionContext.is_read_only` an\n[…]\n_read_only`\nfrom `manta config show -o json` — switch back to top-level\n`.read_only`. Operators who removed the `read_only` line from\n`cli.toml` per the interim §2.8 need not act (default is `false`).",
          "is_bot": false,
          "headline": "feat(cli)!: source read-only from cli.toml, not JWT",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ae2df4f06e65be9b63f8984e8d7371f7ebed8b6",
          "body": "Restructure the text output of `manta config show` so each field sits\nunder the source it came from — local config file, JWT token, or\nserver API — instead of a flat list with `(from token)` /\n`(from token+server)` annotations on individual lines.\n\nWhen `--site X` overrides a different cli.toml `sit\n[…]\nnstant regardless of auth state.\n\nBREAKING CHANGE for shell scripts that grep the text output. JSON\nis additive only — `configured_site` joins the existing keys; no\nexisting key is renamed or removed.",
          "is_bot": false,
          "headline": "feat(cli)!: group `manta config show` text output by value provenance",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "193c2bc94c82570552f77131bd0fa21baef57f75",
          "body": "…s / Reference)\n\nGUIDE.md grew organically to 14 top-level sections; this commit adds\nexplicit tier structure on top of the existing numbering so operators\ncan find the right section faster.\n\n- Part I (Getting started): §1 only — the read-only \"is everything\n  wired up\" smoke test.\n- Part II (Workfl\n[…]\nCLI.md, README.md,\nSECURITY.md, crates/manta-cache/README.md) keeps resolving. Each\nnew Part heading carries a 2-3 sentence intro describing what the\ntier covers and when an operator would land on it.",
          "is_bot": false,
          "headline": "docs(guide): organise sections into 3 tiers (Getting started / How-to…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d4018ddbfe4774ad82f34cd72be3181b443c0a2",
          "body": "GUIDE.md §12 (--dry-run) didn't mention that --dry-run bypasses the\nread-only gate; GUIDE.md §13.3 (Checking your read-only status)\ndidn't point at --dry-run as the preview escape hatch for operators\nwith the role. Two small reciprocal cross-links so the relationship\nis discoverable from either direction.",
          "is_bot": false,
          "headline": "docs(guide): cross-link --dry-run and read-only sections",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a20d65bf744e07a24870ddf8ee2c6986cc49e14e",
          "body": "Add a short Conventions paragraph immediately before \"What changed\nat a high level\" so first-time readers know:\n- (BREAKING)-tagged sections require operator action before upgrade\n- §-numbering is audience-then-topic, not chronological\n- Between-release deltas live in CHANGELOG.md",
          "is_bot": false,
          "headline": "docs(migrating): explain (BREAKING) tag convention and numbering scheme",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e86a858b78e00e6e7a08cf0b08159d9b6402db28",
          "body": "Doc audit surfaced that CLI.md only mentioned `--dry-run` in scattered\nper-subcommand entries; a top-level statement was missing. Add a\ncompact universal-flag note in the TL;DR preamble, cross-linking to\nGUIDE.md §12 for the full semantics (no prose duplication). Also\ncalls out the one short-alias quirk (`manta add group` uses `-D`\nfor `--description` because `-d` is reserved for `--dry-run`).",
          "is_bot": false,
          "headline": "docs(cli): add universal --dry-run note to CLI.md preamble",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a968ce12315c98344c0f2cee7ba3e0524d19f919",
          "body": "User-doc review surfaced 7 issues across files Task 5's sweep missed\n(README.md, ARCHITECTURE.md) plus precision/discoverability nits in\nthe files it touched. Fixes:\n\n- README.md + ARCHITECTURE.md: the \"independent of the cli.toml flag\"\n  claim about the JWT-role server gate is now factually wrong (\n[…]\no operators discover the inspection path.\n- MIGRATING.md §2.7: plain-text \"see §2.8\" → markdown hyperlink;\n  add a CLI-side troubleshooting step (currently only documents\n  server-side curl/log path).",
          "is_bot": false,
          "headline": "docs: tighten read-only doc gaps from JWT SessionContext review",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77795b5deea21a6c7d9bf496680648a6a4d59299",
          "body": "GUIDE.md §13 collapses the old \"CLI-side flag\" and \"JWT role\"\nsubsections into a single section that describes the single\ncanonical mechanism (the role). MIGRATING.md gains §2.8\ncovering the removed cli.toml flag and the deleted subcommands.\nSECURITY.md drops the row about the cli.toml toggle and updates\nthe cross-references. CLI.md drops the documentation for the\nremoved `config set/unset read-only` subcommands.",
          "is_bot": false,
          "headline": "docs: reframe CLI read-only as JWT-derived",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3106f6c92f84332e34655dc2acb2b1d1bde511dc",
          "body": "BREAKING: `manta config set read-only` and `manta config unset\nread-only` are no longer accepted. The CLI's read-only mode is\ncontrolled by the bearer token's `manta-read-only` realm role;\nthe local cli.toml flag was already removed in the previous\ncommit.",
          "is_bot": false,
          "headline": "feat(cli)!: remove `config set/unset read-only` subcommands",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55f9e4934dee62da20d1b558123281533f9666b5",
          "body": "BREAKING: `read_only` is no longer read from cli.toml. The CLI's\nread-only gate now consults the bearer token's `manta-read-only`\nrealm role, mirrored on a new SessionContext attached to\nAppContext.\n\n- AppContext.session: Option<SessionContext> populated once per\n  authenticated invocation in proces\n[…]\n\n  labelling (\"from token\", \"from token+server\"). The top-level\n  `read_only` and `groups_available` JSON keys are gone.\n- Operator's cli.toml `read_only = true` lines are silently\n  ignored by serde.",
          "is_bot": false,
          "headline": "feat(cli)!: replace cli.toml read_only with JWT-derived SessionContext",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c75e9054597755c42e0d4d095a7cda8fc7a23ab",
          "body": "Holds the JWT-derived per-invocation facts (username, name,\nis_admin, is_read_only, accessible_groups). Built via\n`SessionContext::build(client, token)` — one HTTP call plus a\nlocal JWT decode.\n\nModule is not yet wired into AppContext; the next commit does that.",
          "is_bot": false,
          "headline": "feat(cli): add SessionContext module",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "750309fea4b186c06ce5165318ac03f5d8887c2e",
          "body": "Move the JWT decode module (and its PA_ADMIN constant) into\nmanta-shared so manta-cli can decode tokens without pulling\nmanta-server as a dependency. The original server-side module\nbecomes a thin re-export; service::authorization::PA_ADMIN\nbecomes a re-export of the same.\n\nFoundation for the JWT-derived SessionContext work.",
          "is_bot": false,
          "headline": "refactor(shared): relocate jwt_ops from manta-server to manta-shared",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3402859c0f6b05e44744d7720ec7c1f8db5299",
          "body": "…skip ci]",
          "is_bot": true,
          "headline": "chore(cli): regenerate OpenAPI spec + man pages + shell completions […",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-01T20:37:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b34dc7410736e4944a5611ba63c4b600e5214d2",
          "body": "* ci: gate checked-in openapi.json against the live server spec\n\nThe CLI's openapi.json is generated from the server's #[utoipa::path]\nannotations but checked into git and only consumed (never re-derived)\nat build time, so handler / wire-type changes that skip the regen drift\nsilently — the spec rec\n[…]\nen.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01VoTrdfXtKUbgEqr9rqNNCP\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: gate checked-in openapi.json against the live server spec (#105)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-07-01T20:20:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "551456b4757cd21993e4f5bfe71cc4c23ddb67a8",
          "body": "* fix(server): return 404 for unknown site on /auth/*\n\nThe public /auth/{token,validate} handlers collapsed every failure —\nincluding \"site not configured\" — into a generic 401, so targeting a\nnon-existent site prompted for credentials (up to 3x) before failing.\nEvery authenticated endpoint already \n[…]\nen. Document this so the short-circuit isn't misread as always zero-prompt.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): return 404 for unknown site on /auth/*  (#102) (#104)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-30T10:27:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8167b200d1626b539d907dac4ee32c799748b87b",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-29T00:13:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24f3b220b879dff4d942c30f5db10caea634f901",
          "body": "…hardware\n\nRound 2 introduced group::resolve_target_and_available_groups to fold\n\"fetch available groups → validate label set\" into one backend round-\ntrip with in-memory validation. service/configuration.rs already used\nit, but service/session.rs and service/hardware.rs were still doing\nthe manual \n[…]\n's downstream backend.get_group()\ncall is untouched — only the label-fetch+validate prelude is folded.\n\nFlagged by /simplify R3 finding #10 (S1×2 — same-crate parallel\npattern detected on both files).",
          "is_bot": false,
          "headline": "refactor(server): use resolve_target_and_available_groups in session+…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91783f0ec7dcb40c2a8ff4a3bf771de0edd773cd",
          "body": "Two complexity fixes in node-detail aggregation and boot-parameter\nfiltering. No behaviour change.\n\n#8 (service/node_details.rs::build_node_details): the per-node\nxnames.iter().map() closure resolved boot params with a linear\nfind() over boot_params_vec for each xname — O(N²) for N nodes.\nThe same f\n[…]\nthe scan so each boot\nparam's hosts are membership-checked. O(B×G×H) → O(B×H). With\nG in the thousands at cluster scale this is the steepest win.\n\nFlagged by /simplify R3 findings #8 (S3) and #9 (S3).",
          "is_bot": false,
          "headline": "perf(server): hash-index two hot-path loops in service/",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba5da703ea0f0d10d825b87f7c537ec01e59b59c",
          "body": "Two findings in the migrate path that Round 3 surfaced.\n\n#5 (handler): server/handlers/migrate.rs iterated over\ntarget_hsm_names + parent_hsm_names and called\nservice::authorization::validate_user_group_access per name. Each\nhit the backend with a get_group_name_available round-trip. With N\ntarget +\n[…]\ne-fetch via futures::future::join_all\nbefore entering the mutation loop; the mutation loop uses the cached\nbool slice for its decision branching.\n\nFlagged by /simplify R3 findings #5 (S2) and #6 (S3).",
          "is_bot": false,
          "headline": "perf(server): fan out sequential backend calls in migrate path",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce6566ae0df7fa4ad9029ca902b497b23b3f230f",
          "body": "…CH loops\n\nRound 2 parallelised the BSS `update_bootparameters` PUT loops in\nservice/boot_parameters.rs and service/kernel_parameters.rs via\ntry_join_all, but missed the structurally identical image-patch loops\nthat follow them. Each calls infra.backend.update_image one image at\na time; clusters wit\n[…]\nall propagates the first error to the\ncaller, matching the pre-Round-2 behaviour of both loops.\n\nFlagged by /simplify R3 findings S1.F4 + S3.F2 + S3.F3 (three-way\ncross-flag — reuse + efficiency × 2).",
          "is_bot": false,
          "headline": "perf(server): extract apply_image_patches helper, parallelise IMS PAT…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "898777c67398f93025db5b490f80e0a927fc9c70",
          "body": "Two related findings folded into one commit.\n\n#2 (behaviour bug): GetGroupParams carries settings_group_name but\nhad no effective_group() method, so dispatch/get/groups.rs silently\ndropped the configured default. Add the method (matching the pattern\non the five other params structs) and use it in th\n[…]\nt/group_nodes.rs to do the fallback inline.\nBehaviour was already correct — this is a consistency cleanup so all\nsix params structs share the same one-liner.\n\nFlagged by /simplify R3 C1 (reuse, both).",
          "is_bot": false,
          "headline": "fix(cli): use effective_group() in `get groups` + `get group-nodes`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0ffc92fe44d7d0f186a4bcf7e478595f1a1ca25",
          "body": "Two Round-3 findings folded into one commit (they coordinate).\n\n#1 (altitude regression): four service-layer call sites were calling\njwt_ops::is_user_admin directly instead of the canonical short-circuit\nin service/authorization.rs. Two of those (sat_file.rs::138,171) were\nintroduced by Round 2's sa\n[…]\nls flagged by\nRound 3 S4 are gone; sat_file.rs becomes ~6 lines shorter; the\nauthorization module is the sole owner of admin-detection policy.\n\nFlagged by /simplify R3 findings #1 (S4) and #3 (S1+S2).",
          "is_bot": false,
          "headline": "refactor(server): promote admin_bypass to authorization::is_admin",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29c016f8a696f85c7116a4fd94b6e94f4d00f7c6",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T23:49:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39b3f59b48a3d44cc9e8b34e4b78ebc99b66fa21",
          "body": "CI's `cargo doc --workspace --no-deps` step runs with\n`RUSTDOCFLAGS=\"-D rustdoc::broken_intra_doc_links\"`. The Round 2 batches\nadded doc comments that referenced items without bringing them into\nscope, causing the build to fail at the rustdoc step (CI run\n28339441018). Three errors + one warning fix\n[…]\n\n\nLesson: every /simplify apply batch should run the strict rustdoc\nbuild, not just cargo check + test + clippy. The batch verifications\nmissed this gate because clippy doesn't catch broken doc links.",
          "is_bot": false,
          "headline": "fix(server): unbreak rustdoc intra-doc links from /simplify Round 2",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:33:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b43431af9717d903db2b04765b69d026ef0ae45c",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T23:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "147874c88915fa8cece777788134d1ccc651b6b4",
          "body": "Three CLI dispatch findings folded into one commit. One behaviour\nchange (cancel-on-confirm goes from non-zero exit to zero, fixing\nthe scripting friction).\n\n- common/clap_ext.rs: add resolve_node_target helper to capture\n  \"if hsm_group is set, drop the xnames expression\" rule. Used by\n  add/kernel\n[…]\nreturn Ok(())) instead of bail!. The\n  exit code on cancel changes from non-zero to zero. Cancel is\n  no longer treated as a process error.\n\nFlagged by /simplify findings #46, #47, #48 (all C1 reuse).",
          "is_bot": false,
          "headline": "refactor(cli/dispatch): node-target helper + confirm consistency fixes",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7061e12ea5eff104f55d1fb6801f6e8e4c7d123",
          "body": "Eight small findings folded into one commit; mostly mechanical\ncollapses, dedup, and one-shot client reuse. No behaviour change\nbeyond the shared-clock fix in #44.\n\n- sat_file/render::dot_notation_to_yaml: replace 50-line interior-\n  mutation loop (with two structurally-impossible error branches)\n  \n[…]\nore pre-formatted summary\n  lines as Vec<String> instead of re-packaging into Vec<Vec<String>>\n  of components accessed by index.\n\nFlagged by /simplify findings #35, #36, #38, #39, #40, #43, #44, #45.",
          "is_bot": false,
          "headline": "perf(cli): efficiency + simplification polish batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1dd8d7101a75026852ca200de398723a074534c",
          "body": "Two intertwined findings folded into one commit.\n\n- Move validate_token, get_token, and map_auth_error from\n  common/authentication.rs to MantaClient as methods\n  [validate_token, exchange_credentials, plus map_auth_error\n  scoped to the impl]. Eliminates progenitor types from the\n  common/ module. \n[…]\ness log message now reports the\ncorrect attempt number (off-by-one fix). No other observable\nbehaviour change.\n\nFlagged by /simplify findings #7 (C4 altitude) and #8 (C2+C4\nsimplification + altitude).",
          "is_bot": false,
          "headline": "refactor(cli/auth): consolidate transport + cascade in MantaClient",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "291a7ec052bacc92cea08f1785abdb9e64af63c9",
          "body": "Three efficiency findings folded into one commit. No behaviour change\n(error semantics preserved where applicable).\n\n- hw_cluster/apply.rs::apply_hw_configuration + delete_hw_component:\n  fetch target + parent group inventories concurrently via\n  tokio::try_join! (two sequential awaits → one). Halve\n[…]\nombined target+parent pool dedup) deferred: the\nsignature change ripples to pin_unpin.rs and tests.rs which are\noutside the four-file scope of this batch.\n\nFlagged by /simplify findings #26, #27, #31.",
          "is_bot": false,
          "headline": "perf(server): hw_cluster + BSS update parallelism from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59cba0d8a0a53bca62ddf9fe9c9ab0bf4e549dab",
          "body": "Six small findings folded into one commit; mostly dead-code deletions\nand one-shape extractions. No behaviour change.\n\n- server/handlers/mod.rs: extract require_url(url, field), called by\n  require_vault and require_k8s_url (the two existing one-line shims\n  delegate). Removes the duplicated NOT_IMP\n[…]\nt_file/image_pipeline.rs: drop unnecessary\n  session_value.clone() passed to serde_json::from_value (the value\n  is unused after the call).\n\nFlagged by /simplify findings #13, #19, #29, #33, #37, #42.",
          "is_bot": false,
          "headline": "refactor: small mechanical cleanups from /simplify deferred batch",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45f21e86ca9a43d4cdf73ee8be5e680ce0e52168",
          "body": "CLAUDE.md rule: handlers under server/handlers/ must only call\nfunctions in service/, never backend methods directly. Five handler\nfiles violated this in 13+ sites.\n\nAdded thin service-layer wrappers and routed every handler-side\nbackend call through them. Also promoted the existing private\n`admin_b\n[…]\nb async fn get_available_groups\n- service/migrate.rs: pub async fn backup, pub async fn restore\n\nFlagged by /simplify S4 (altitude × 4 — boundary + duplicate-fetch\n+ admin tier + InfraContext bypass).",
          "is_bot": false,
          "headline": "refactor(server): enforce handler→service→backend boundary",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ef288a8cab668504a74a1670b3c36022cb3c894",
          "body": "Two efficiency findings folded into one commit; both apply to\ndispatch/apply/sat_file/dispatch.rs.\n\n- Configurations have no inter-dependencies (topo-sort in plan.rs\n  covers only Images). Drain all leading SatElement::Configuration\n  entries and dispatch with futures::future::try_join_all instead\n \n[…]\nved: configurations execute (concurrently)\nbefore images; images stay strictly in topo-order; session_templates\nexecute (concurrently) after all images complete.\n\nFlagged by /simplify C3 (efficiency).",
          "is_bot": false,
          "headline": "perf(cli): parallelize independent SAT-file POSTs",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8262a5d51f67e19cf5fcc13f0705ba0925bb4315",
          "body": "Four reuse findings folded into one commit; all small mechanical\nextractions of repeated patterns. No behaviour change.\n\n- output: extract render_node_details, called by both\n  dispatch/get/nodes::exec and dispatch/get/group_nodes::exec\n  (same ~40-line output block in both, differing only in\n  xnam\n[…]\nng the convention in output/session, /template,\n  /boot_parameters, /redfish_endpoints). Removes the unnecessary\n  serde_json::to_value intermediate at the JSON path.\n\nFlagged by /simplify C1 (reuse).",
          "is_bot": false,
          "headline": "refactor(cli): reuse + DRY batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b7bc19434307a956e1f42190fd33d5a46c33617",
          "body": "Six findings folded into one commit because they are all small\nmechanical extractions of repeated patterns. No behaviour change.\n\n- service/session.rs: extract fetch_session_by_name from\n  validate_session_access and validate_console_session (same 10-line\n  prelude in both).\n- common/config/mod.rs: \n[…]\nd_cfs_configuration_name:\n  replace serial for-loop with HashSet dedup + join_all fan-out,\n  matching the pattern already in collect_boot_images.\n\nFlagged by /simplify S1 (reuse), S2 (simplification).",
          "is_bot": false,
          "headline": "refactor(server,shared): reuse + simplification batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d369f9f60db7df007e21e2ca5319e3497b8a82f",
          "body": "…n.rs\n\nThe five authorization functions each opened with an identical\n`if jwt_ops::is_user_admin(token) { return Ok(()); }` short-circuit.\nExtract a private helper so a future change — e.g. adding audit logging\nto admin bypasses, or requiring JWKS signature verification before the\nshort-circuit fire\n[…]\nplication +\nsecurity advisory). The JWKS verification follow-up tracked in\njwt_ops.rs's module-level TODO is NOT addressed here; that's a\nseparate concern requiring per-site JWKS fetching and a cache.",
          "is_bot": false,
          "headline": "refactor(server): extract admin_bypass helper in service/authorizatio…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1bd8bd1ad73860a984bd6f6a12b16abcbd0f646",
          "body": "`backup vcluster` issues `POST /api/v1/migrate/backup`, which creates\nfiles on the server-side filesystem. It was in READ_ONLY_VERBS, so the\nCLI's read_only gate never blocked it — operators who set\n`read_only = true` to prevent accidental cluster mutations could still\nrun `manta backup vcluster`. Move it to MUTATING_VERBS (where `restore`\nalready correctly lives).\n\nFlagged by /simplify C4 (altitude).",
          "is_bot": false,
          "headline": "fix(cli): reclassify `backup` as a mutating verb in read_only gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9aa206f5998eaadee5d6638eda95b5b9949bcc90",
          "body": "Three small correctness fixes surfaced by the whole-codebase /simplify\nreview:\n\n1. service/image.rs::validate_image_deletion + get_restricted_image_ids:\n   replace `.collect::<Option<Vec<String>>>().ok_or_else(MissingField)`\n   with `.filter_map(...).collect()`. The previous shape aborted the\n   ent\n[…]\n HSM group-membership round-trip\n   per GET /boot-parameters request.\n\nFlagged by /simplify agents S1 (reuse), S2 (simplification), S3\n(efficiency) — triple-flagged on #3, single-flagged on #1 and #2.",
          "is_bot": false,
          "headline": "fix(server): Tier-1 correctness from /simplify sweep",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dbd945d262665abef334d8436d42aa68ed99c30f",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T19:43:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ca0f5aea28544a2611fbcc5ff18eded124e5a6",
          "body": "Three corrections caught by the final whole-branch review against\nthe actual source code:\n\n1. Env var name: was MANTA_TOKEN, actual is MANTA_CSM_TOKEN\n   (crates/manta-cli/src/common/authentication.rs:64). Fixed in\n   the GUIDE.md §12 flowchart node and closing paragraph.\n\n2. Token-cache cascade mis\n[…]\net updates are\n   idempotent and operators retry — there is no executable rollback.\n   Removed the Rollback node from the flowchart and rewrote the\n   intro prose.\n\nNo other diagrams or prose touched.",
          "is_bot": false,
          "headline": "docs(mermaid): fix factual errors in batch-2 diagrams",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17454ba7c0017a34c742381a57bce554d70e2506",
          "body": "GUIDE.md §12 \"Non-interactive and scripted use\" gains a new\nsub-section \"Authentication for scripts\" with a flowchart TD\nshowing the env → 0600 cache → interactive prompt resolution\norder. Documents what was previously only described in\ncommon/authentication.rs's rustdoc — useful for operators writing\nCI / cron scripts who need to know which branch they will hit.\n\nSub-section sits between the existing dry-run preview content\nand the add-group -D note.\n\nStyle matches batch-1 conventions.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid flowchart for CLI token-cache resolution",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc623a4ac089f06eaa2f6e57e2a65d6031370b6a",
          "body": "GUIDE.md §8 \"Console access\" gains a sequenceDiagram near the top\nshowing the HTTP-to-WebSocket upgrade and the resulting\nbidirectional bridge with three parallel message kinds: binary\nframes for stdin/stdout, plus a text-frame resize event from the\nCLI.\n\nIncludes a short intro paragraph naming the protocol and a footnote\non the inactivity timeout knob ([server].console_inactivity_timeout_secs).\n\nStyle matches batch-1 conventions.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid sequence diagram for WS console upgrade",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f6c49129343466e94925657184ad058c4fc9800",
          "body": "ARCHITECTURE.md §\"Layer responsibilities\" gains a new sub-section\n\"Hardware-cluster pin/unpin algorithm\" with a flowchart TD showing\nthe parse → fetch → validate → score → move → rollback phase shape.\nAnnotates the non-transactional rollback behaviour and links to the\nimplementation file (service/hw_cluster/pin_unpin.rs).\n\nStyle matches batch-1 conventions: bare mermaid fence, italic caption,\n4-space indent, no theme/emoji.",
          "is_bot": false,
          "headline": "docs(architecture): add mermaid flowchart for hw-cluster pin/unpin",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b0aa33ee3ebd436faeb7548de0718f0d15a84a7",
          "body": "Folds in two minor findings from the final whole-branch review:\n\n- Add `Note over MS: chokepoint — every CSM/OCHAMI call proxies\n  through here` to restore the at-a-glance \"chokepoint\" labelling\n  that the deleted ASCII art carried directly under the manta-server\n  box. The bullet list still describ\n[…]\nalso gets a correction header (in-tree, gitignored, not committed)\nacknowledging the May 25 mermaid precedent that the original spec\nmis-stated.\n\nRender-check: `npx mermaid-cli -i SECURITY.md` exit 0.",
          "is_bot": false,
          "headline": "docs(security): polish mermaid auth-flow diagram",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50111be3e4600f244409ef4b38e22a49dce0ad59",
          "body": "ARCHITECTURE.md §\"Security model\" gains a new sub-section\n\"Middleware layer stack\" between the mitigations table and the\nDeferred paragraph. The flowchart shows the nest split between\n/api/v1/*, /api/v1/auth/*, and the /docs Swagger path, plus the\nlast-added-outermost layer ordering on each branch.\n\nCloses the cross-link forward-references from the GUIDE.md and\nSECURITY.md diagrams added earlier on this branch (anchor:\n#middleware-layer-stack).",
          "is_bot": false,
          "headline": "docs(architecture): add mermaid flowchart for the middleware stack",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "492f63bcdeca9c3497c9f98ad5104adf7479808e",
          "body": "SECURITY.md §\"Security model — at a glance\" loses the ASCII\n3-box-and-arrows diagram and gains a sequenceDiagram showing both\nthe auth bootstrap (POST /auth/token -> Keycloak -> token) and a\nsubsequent authenticated request (proxied to CSM/OCHAMI, signature\nverified upstream). Optional Kafka actor s\n[…]\nverbatim.\n\nCross-links added to GUIDE.md §13 (user-facing read-only) and\nARCHITECTURE.md#middleware-layer-stack (contributor view of the\nmiddleware pipeline; target anchor created in the next commit).",
          "is_bot": false,
          "headline": "docs(security): replace ASCII tier diagram with mermaid sequence",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ae23b23109aa57bed56e731f015d1f51065afeb",
          "body": "GUIDE.md §13.2 gains a sequenceDiagram showing the request flow\nthrough read_only_guard: method check short-circuit, bearer-prefix\nstrip, role lookup via jwt_ops::has_role, 403 emission, and the\nhappy path. Both branches in one diagram via nested alt blocks.\n\nStyle note: GUIDE.md §3 already carries \n[…]\nick whichever suits the diagram's content.\n\nForward-link to ARCHITECTURE.md#middleware-layer-stack added in\nthis commit; the target anchor is created by the next ARCHITECTURE.md\ncommit on this branch.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid sequence diagram for the read-only gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "498be2cda2a9eafc11cca0176c01141b1abc025b",
          "body": "New top-level SECURITY.md (created on explicit user instruction)\ncovering:\n\n- Private-disclosure channels: GitHub Security Advisories at\n  eth-cscs/manta/security/advisories/new (preferred), email fallback\n  to the workspace authors listed in Cargo.toml.\n- Supported-versions matrix: 2.0.0-beta.x act\n[…]\nged.\n- Out-of-scope list pointing upstream-crate / IdP vulnerabilities at\n  their respective repos.\n\nREADME.md gains a docs-index row pointing at SECURITY.md so it's\ndiscoverable from the entry point.",
          "is_bot": false,
          "headline": "docs(security): add SECURITY.md vulnerability-reporting + model summary",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5412f8b6a9d4819acdaee963905e572e9bad9c3",
          "body": "Adds an explicit Response 403 line to each of the 34 mutating endpoint\nsections in API.md (POST/PUT/PATCH/DELETE under /api/v1/*). Each line\npoints back to the global Error responses table for the explanation,\nkeeping per-endpoint duplication minimal.\n\n/api/v1/auth/* (login flow, separate sub-router\n[…]\ns an earlier judgment call that the global table alone was\nsufficient — per-endpoint coverage means readers scanning a single\nendpoint's section see the 403 without scrolling back to the global\ntable.",
          "is_bot": false,
          "headline": "docs(api): per-endpoint Response 403 for every /api/v1/* mutating route",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dcc881dce16afc7a4add077ee59c38a4b094fb2d",
          "body": "MIGRATING.md §2.7 gains a Troubleshooting block (4 numbered steps):\ndecode the token to check realm_access.roles, curl-against-mutating to\nconfirm 403, curl-against-read to confirm 200, journalctl grep for the\nwarn-level refusal log.\n\nARCHITECTURE.md §\"Security model\" gains a paragraph after the\nmit\n[…]\nrification boundary (jwt_ops decodes without\nverifying), it is defence in depth against permission scope creep on\ntokens that DO verify, and it inherits future local-JWKS verification\nwhen that lands.",
          "is_bot": false,
          "headline": "docs: expand JWT-role read-only coverage in MIGRATING + ARCHITECTURE",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4bb2ffc00bca768bd103a6c12c68494d750d9838",
          "body": "Both subcommands shipped several betas ago alongside the original CLI\nread-only feature but were never added to the CLI.md reference. Adding\nthem now alongside the JWT-role gate work, since the two policies are\ndiscussed together everywhere else in the user docs.\n\nCross-links to GUIDE.md §13's comparison table so readers see the\nCLI-vs-server distinction without context-switching.\n\nNo code change — `config set read-only` / `config unset read-only`\nhave been in the dispatcher since beta.56.",
          "is_bot": false,
          "headline": "docs(cli): document `config set read-only` and `config unset read-only`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfed2cd18dec838120abaa6bddcb09cc0680ab00",
          "body": "examples/cli.toml gains a commented-out `read_only` line covering the\nCLI-side toggle (previously undocumented in the example, even though\n`manta config set read-only` has shipped for several betas).\n\nexamples/server.toml gains a comment block noting that the new\n`manta-read-only` JWT-role gate is N\n[…]\ngo to MIGRATING.md §2.7 (kcadm.sh\nrecipe) and GUIDE.md §13 (operator description).\n\nCloses the example-file gap. Pre-existing operators copy-pasting\neither example file now see both policies surfaced.",
          "is_bot": false,
          "headline": "docs(examples): document read-only access in cli.toml + server.toml",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "230c20f574ab346e82a09cd5f4ba2107eb1678c7",
          "body": "Was buried as a sub-section under §12 (Non-interactive and scripted\nuse). Read-only access is a distinctive operator topic with two\nindependent policies — promoting it to a dedicated section with\nsub-sections and a comparison table makes it discoverable from the\nToC and reads better.\n\nRenumbers old §13 (Installation maintenance) -> §14 and its three\nsub-sections from §13.x to §14.x. ToC updated.\n\nAdds a discoverability bullet to API.md's TL;DR linking to the new\nGUIDE.md §13.",
          "is_bot": false,
          "headline": "docs(guide): promote Read-only access to top-level §13",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09831435cac64c8bacbbb35ca4924d94f70d2cea",
          "body": "Adds a Keycloak provisioning recipe (kcadm.sh examples) to the\n\"Site operators\" section. Renumbers the old §2.7 Verify → §2.8 to\nkeep the section sequence tight.\n\nCloses the operator-side rollout gap for the JWT-role gate added in\nthis branch.",
          "is_bot": false,
          "headline": "docs(migrating): add §2.7 operator-rollout for the manta-read-only role",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "405af9df661833a8342a21a64b0310ca44b0c445",
          "body": "User-facing docs for the server-side read-only enforcement added in\nthis branch:\n\n- README.md: bullet in the server-only-settings list under \"Beyond\n  the flags above\"; describes the role and its scoping vs CLI flag.\n- ARCHITECTURE.md: new row in the §\"Security model\" mitigations\n  table pointing at\n[…]\n the CLI-side\n  read_only = true flag.\n\nCHANGELOG.md is regenerated by git-cliff from commit messages on\nrelease; skipped. No migration steps; MIGRATING.md untouched. No\nCLI changes; CLI.md untouched.",
          "is_bot": false,
          "headline": "docs: document the manta-read-only JWT-role gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67958083e8e675a8e0f9ea549395f8daa24aea87",
          "body": "Adds an Axum middleware (read_only_guard) layered on /api/v1/* that\ninspects the caller's bearer token and refuses POST/PUT/PATCH/DELETE\nwith 403 Forbidden when the realm_access.roles claim contains\n\"manta-read-only\".\n\nThe gate is independent of (and orthogonal to) the existing CLI-side\n`read_only =\n[…]\n* (login) and /docs are unaffected.\n\nIntegration tests pin: POST/PUT/PATCH/DELETE refused with the role,\nGET passes through, plain tokens unaffected, missing-auth still 401,\nauth sub-router not gated.",
          "is_bot": false,
          "headline": "feat(server): reject mutating requests for JWT manta-read-only role",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a7d85dbe9fca9d4b41956881339f7fb8039efbb",
          "body": "Generalises the role-search logic used by is_user_admin into a reusable\nhas_role(token, role) helper. is_user_admin is now a one-line wrapper.\nIntroduces READ_ONLY_ROLE = \"manta-read-only\" for the upcoming\nread-only middleware gate.\n\nPure addition + refactor; no behaviour change to is_user_admin (covered\nby existing tests + new has_role tests).",
          "is_bot": false,
          "headline": "feat(server): add has_role helper + READ_ONLY_ROLE const",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d380e1740200511c74d4c892368fcfdea74a794",
          "body": "The public /auth/{token,validate} handlers collapsed every failure —\nincluding \"site not configured\" — into a generic 401, so targeting a\nnon-existent site prompted for credentials (up to 3x) before failing.\nEvery authenticated endpoint already 404s on an unknown X-Manta-Site\nvia RequestCtx; the aut\n[…]\nractive cascade so it stops instead of re-prompting for credentials\nthat can never authenticate against a site that doesn't exist.\n\nCloses #102\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): return 404 for unknown site on /auth/*",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-28T15:02:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "87a4230be42ebc3788a69caafa74f9cdad4141a5",
          "body": "…inuation\n\nThe previous wording had `+ [`SiteName`]` at the start of a `///` line,\nwhich clippy 1.92's doc parser reads as a list bullet — then complains\nthat the next 4 continuation lines aren't indented under it.\n\nRephrasing to a single comma-separated clause (`State<...>`, `BearerToken`,\nand `SiteName`) keeps the same meaning without introducing a phantom list.",
          "is_bot": false,
          "headline": "docs(server): rephrase RequestCtx intro to avoid clippy doc_lazy_cont…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T11:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61f751c2fc8a9003d8ad20981a669a0165832142",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T11:22:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0638d2736ac9110c5274a2da964fa441d70fc482",
          "body": "Adds substantive rustdoc to manta-shared, manta-server, and manta-cli\npublic surfaces: module headers, `# Errors` sections, `# Examples`,\ncross-links, and wire-shape JSON sketches.\n\nDoc highlights:\n- manta-shared/types: wire-shape JSON examples on every Request/Response,\n  cross-linked Request <-> R\n[…]\ne explicit Skip<Args> type annotation.\n\nVerified: cargo doc --workspace --no-deps --document-private-items\nclean, cargo test --workspace --doc 7/7 passing, cargo check\n--workspace --all-targets clean.",
          "is_bot": false,
          "headline": "docs: comprehensive doc sweep across workspace + small CLI cleanups",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T11:14:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "daec0defc735bd5f72be706781ca81f97e7a076c",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T09:03:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c87200e9f6d19253382987964b3f628e6dba593",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T08:45:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13cce1854b7650f2cff295e4ba852f60bb348c5d",
          "body": null,
          "is_bot": false,
          "headline": "feat(manta-server): publish manta-server to crates.io",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T08:44:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00c0089a002795f4349b7e98b8374e4e0244bf81",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T12:25:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8e8accf7c9fdda5c2dfd20f85f554bd395dbd7d",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T12:08:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c64dd4639d44f97f397867b2de5e5c4e1fd8114e",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T12:03:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29bb759b158db8f470faddaff1be76f29228f4ad",
          "body": "cargo-machete flagged both as unused. Verified neither the crate\nsource nor the progenitor-generated openapi_client.rs references\nthem; regex remains in use only by manta-server.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01W72jzmGAaSKfqGXtddV7LS",
          "is_bot": false,
          "headline": "build: remove unused bytes and regex deps from manta-cli",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T11:41:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6ebd673509bfd79e1a01390c32e9ec7a28e30c07",
          "body": null,
          "is_bot": false,
          "headline": "Fix cargo clippy",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T10:18:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b751d422b5570fdaf846d7ec04c308c9f23c2c2a",
          "body": "* fix(manta-cli): make cli.toml site field optional (#101)\n\nThe `site` field in `cli.toml` was mandatory, even when `--site` was\nsupplied per-invocation. Make `CliConfiguration::site` an\n`Option<String>` and resolve the active site as `--site` → config\n`site` → clean error. A missing site is now a u\n[…]\n `parent_hsm_group`\ncli.toml key; the CLI default-group key is `hsm_group`.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cli.toml: make site field optional and remove [sites] table (#103)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T08:28:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbd87d41e96a28c9722fceb98ae0612e85d39dcb",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "721ab68007ae2d3b4f4114c8c916f9fb7856d1cb",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb034d66838bd7ea1231b3217be13c4829a0c6ee",
          "body": "`cargo doc --workspace --no-deps` under\n`-D rustdoc::broken-intra-doc-links` (CI default) was failing on two\nunresolved references:\n\n- `service/configuration.rs` linked to bare\n  `[build_configuration_analysis]`, which isn't in scope. Qualified\n  to `crate::service::analysis::build_configuration_ana\n[…]\ns::sat_file`, but\n  that submodule is private — items are re-exported via\n  `pub use sat_file::*` in `handlers/mod.rs`. Dropped the private\n  module segment so the link resolves through the re-export.",
          "is_bot": false,
          "headline": "docs(server): fix broken intra-doc links failing `cargo doc`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e14c6ed77c4c494a5f862cea4603fcfe3f47a461",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T09:44:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62b045db1b5ab671ce0c0b588dc54c59fc9a3024",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63a864b7070549fd5f1cb585f58a0db1cf9d1422",
          "body": "GUIDE.md §12 explained the dry-run output channel by naming\n`action_result::print_with_data` — the helper that did the rendering\nbefore the recent CLI refactor extracted a thin `preview_request`\nwrapper around it. Calling the helper by name is an implementation\ndetail that adds no value for an opera\n[…]\n internals get renamed.\n\nRephrase the parenthetical to describe the user-visible behaviour\n(\"the shared output renderer; honors `-o table | json`\") so the\nreference stops mattering on the next rename.",
          "is_bot": false,
          "headline": "docs: drop Rust helper name from GUIDE §12 dry-run paragraph",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:35:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93bd9b5298dd40da02a4a60faf72b7a8ac413731",
          "body": "Three `ExecParams::dry_run` field docs still pointed at\n`action_result::print_with_data` — the call sites were rewired to\n`action_result::preview_request` in the previous refactor commit.\nUpdates the prose in `add/node.rs`, `add/redfish_endpoint.rs`, and\n`apply/redfish_endpoint.rs` to match.\n\nAlso a\n[…]\n a dirty repo\n(`tracing::warn!` vs confirm prompt), and every repo is still\nopened/inspected on both paths. Document that explicitly so future\nreaders don't read `dry_run` as a skip-validation switch.",
          "is_bot": false,
          "headline": "docs(cli): refresh doc comments after the dry-run helper extraction",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:27:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d564704e6dda1f42c10e574e1eabb7f2bb92667a",
          "body": "CLI.md `add group` table was missing the `-o/--output` row even\nthough `add_group()` wires `output_flag()` in `build/add.rs`. Add the\nrow, and flesh out the dry-run description so operators know it\npreviews both the `create_group` payload and (when `--nodes` is\ngiven) the follow-up `add_nodes_to_gro\n[…]\nG.md §2.1 quoted a `manta-server --help` snippet that\npredated `--allow-http` and `--emit-openapi`; refresh it from the\ncurrent help text so site operators upgrading from v1 see the real\nflag surface.",
          "is_bot": false,
          "headline": "docs: refresh `add group --dry-run` row + `manta-server --help` snippet",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:19:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "196ed0619e789e45485d8aeb9a33ad01b62dca1b",
          "body": "Two unrelated server-side changes landed without updating the test\nfiles; this commit aligns them:\n\n- `ServerState` gained a `shutdown_grace_period: Duration` field. Add\n  it (= 30s) to the three test fixtures in `integration.rs` and\n  `server_routes.rs` so the tests compile.\n\n- `service::configurat\n[…]\nis` path that consults CFS v3\n  components). Update the `get_configurations_happy_path` test to\n  assert against the new shape, register a v3 components mock, and\n  refresh the call-chain doc comment.",
          "is_bot": false,
          "headline": "test(server): catch up to current ServerState + get_configurations shape",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:13:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fdb92e5d065331f76ae26caa80d34301b74c0f20",
          "body": "manta-server only ever needed clap for six flags (--port, --cert,\n--key, --listen-address, --allow-http, --emit-openapi) plus --help\nand --version. The dependency was disproportionate.\n\nReplace with a single function that walks std::env::args and matches\non flag names. Same surface (incl. `--flag=va\n[…]\nnc.\n\n`CliArgs` is now a small typed struct consumed by `run` / `run_server`\ninstead of `clap::ArgMatches`, which lets the call sites drop the\n`get_one::<T>(...).cloned()` and `get_flag(...)` patterns.",
          "is_bot": false,
          "headline": "refactor(server): drop clap dep, hand-roll minimal arg parser",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd6b74c23d35805d2e953e1a57e41a5d67084945",
          "body": "Findings from a /simplify sweep over the dry-run + read-only foundation\nwork of the last 2 days. Net -178 lines across 20 files.\n\nHelpers extracted\n- build::dry_run_flag() — one source of truth for the `-d/--dry-run`\n  clap arg, replacing ~30 verbatim copies across add/apply/delete/\n  power/run/rest\n[…]\nvalid JSON; moved the confirm prompt to the\n  live path only.\n- delete boot-parameters: moved `MantaClient::from_app_ctx` below the\n  dry-run early return (matches the convention used by delete/node).",
          "is_bot": false,
          "headline": "refactor(cli): consolidate dry-run helpers + dispatcher cleanups",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T07:18:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "875836a1ceb9d7d0cffcb23d163805fa8b313af5",
          "body": "Move pin/unpin algorithm from manta-server to manta-cli, removing\ncomfy-table from the server. Adds PUT /api/v1/groups/{name}/members\nas the only new endpoint, drops the three /hardware-clusters routes.",
          "is_bot": false,
          "headline": "docs: design spec for hw_cluster server-to-CLI migration",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "740cbecf73ebdd4cb619b19efb559022a79ebe17",
          "body": "The read-only chokepoint used to filter the \"Re-run with --dry-run\"\nhint by an allowlist (`add`/`apply`/`delete`/`migrate`) because the\nother mutating verbs (`power`, `run`, `restore`) didn't accept the\nflag — pointing users at it would have surfaced a clap parse error.\n\nWith the 16-leaf sweep compl\n[…]\nto see.\n\nNet: -1 constant, +1 better test, error messages now consistent\nacross every mutating verb. No behavioural change on the gate's\nallow/deny decision — that was always driven by MUTATING_VERBS.",
          "is_bot": false,
          "headline": "chore(cli): remove VERBS_WITH_DRY_RUN partial-coverage allowlist",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e9536787e99665eda1fb17886a0b9fbe2f7b0da",
          "body": "Follow-up to the prior CLI.md/MIGRATING.md/GUIDE.md §12 doc pass.\nThree sections that describe mutating workflows in narrative form\nwere still showing real-run examples only; this commit adds short\n`--dry-run` snippets to the two GUIDE sections that benefit most\nfrom a preview pattern (run session a\n[…]\nsection):\n- New \"Previewing before mutating\" one-paragraph pointer with a\n  deep-link to GUIDE.md §12 for the full per-verb behaviour.\n\nNo code change. No CHANGELOG.md edit (git-cliff regenerates it).",
          "is_bot": false,
          "headline": "docs: add inline `--dry-run` examples to GUIDE §4/§7 + README pointer",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b07f5c49a6b3fca982ea1ffbf357df1530d959a2",
          "body": "… swap\n\nThe 16-leaf CLI dry-run sweep landed last night plus the follow-up\nshort-alias swap on `add group` (`-d` reassigned from `--description`\nto `--dry-run`, `--description` now takes `-D`). The user docs needed\nto catch up:\n\nCLI.md (per-command reference):\n- `add group`: `-D/--description` (was \n[…]\neractive and scripted use), with pipe-to-jq examples and a\n  pointer to MIGRATING.md §5.11 for the `add group` exception.\n\nNo CHANGELOG.md edit — git-cliff regenerates it from commits at\nrelease time.",
          "is_bot": false,
          "headline": "docs: document `--dry-run` across all mutating verbs + add-group `-D`…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11a4fcfaafd806365b02d9a5a0227cdb9bda38da",
          "body": "`add group` was the lone outlier in the 16-leaf dry-run sweep: it had\n`--dry-run` (long form only) and no `-d` short alias, because `-d`\nwas already taken by `--description`. The asymmetry made `add group`\nthe only mutating verb across the CLI where `-d` doesn't mean\n`--dry-run`.\n\nSwap the short ali\n[…]\ndid the same swap\nto free `-d` from `--disabled` for `--dry-run`.\n\nBREAKING CHANGE: `manta add group -d <text>` no longer sets the\ngroup description. Use `-D <text>` or `--description <text>` instead.",
          "is_bot": false,
          "headline": "feat(cli)!: add `-d` short alias to `manta add group --dry-run`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3934b90ccfc41609212af767461399b0ecd1fc61",
          "body": "Completes the 16-leaf CLI dry-run sweep. The server endpoint has no\n`dry_run` field on MigrateRestoreRequest, so the preview is purely\nclient-side. The CLI runs the existing required-arg checks, the\ndiagnostic print, and the check_hook_perms validations, then builds\nthe MigrateRestoreRequest, prints\n[…]\nange. No breaking change.\n\nSixteenth and final mutating leaf to gain `--dry-run`. The\nVERBS_WITH_DRY_RUN partial-coverage allowlist in common::read_only\ncan now be removed (separate follow-up commit).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta restore vcluster`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "794fae8b15b34d876b4c8ca650c1c866137ed7d4",
          "body": "The server endpoint has no `dry_run` field on CreateSessionRequest,\nso the preview is purely client-side. The CLI still runs git2 against\nthe user's local repos (so the preview shows resolved commit IDs),\nskips both confirmation prompts (uncommitted-changes + layer-review),\nprints the CreateSessionR\n[…]\nparse-acceptance tests cover the long flag and the `-d` short\nalias. No server-side change. No breaking change.\n\nFifteenth of 16 mutating leaves that lack `--dry-run`. Only\n`restore vcluster` remains.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta run session`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a968fb3603c433f59c8d9365aaae536d9baace2",
          "body": "Six leaves (`power {on,off,reset} {nodes,group}`) all converge on a\nsingle dispatch_and_wait() handler. The dry-run branch is added once\nthere: build the PowerRequest, print it via\naction_result::print_with_data, and return Ok(()) before constructing\nthe MantaClient and before the post_power call. N\n[…]\nng flag, short\nalias}. Shared `parse(argv)` helper deduplicates the `try_get_matches_from`\nboilerplate.\n\nBundles leaves 9-14 of the 16-leaf dry-run sweep. Remaining: `run\nsession`, `restore vcluster`.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to all `manta power` mutating leaves",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f50929c23a1c4c781732e43e17b55948cfdb9e85",
          "body": "The dry-run preview reads `output_opt` to route through\n`action_result::print_with_data`, but the subcommand never declared\n`-o/--output` — so `manta apply ephemeral-environment --image-id X\n--dry-run -o json` would have been rejected by clap at parse time\n(spec verification step #3 explicitly requi\n[…]\ndry-run path still prints raw hostname for\nshell-pipe consumption — output_flag only affects the dry-run preview,\nmatching the design intent.\n\nFold-in for the dry-run leaf one commit prior (37f8fad3).",
          "is_bot": false,
          "headline": "feat(cli): honor `-o` on `apply ephemeral-environment` dry-run",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e8e3426d10e874191979361106a958ee74eb531",
          "body": "The server endpoint has no `dry_run` support, and a successful POST\nmints a real IMS customize container — non-idempotent state until\ncleanup. The CLI now builds the CreateEphemeralEnvRequest as if real,\nprints it via action_result::print_with_data, and returns Ok(()) before\nthe OpenAPI call. Honors\n[…]\nhat touches every\ninline arm uniformly.\n\nTwo parse-acceptance tests in dispatch/apply/mod.rs's unit-test target\ncover the long flag and the `-d` short alias. No server-side change.\nNo breaking change.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta apply ephemeral-environment`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d945753cfc285bf8f169e7bafb2efab4a4d9744f",
          "body": "The server endpoint has no `dry_run` support (path-only DELETE\n/redfish-endpoints/{id}; no JSON body), so the preview is purely\nclient-side: the CLI prints the targeted xname via\naction_result::print_with_data and returns Ok(()) before constructing\nthe MantaClient. Honors `-o table | json` uniformly\n[…]\nrse-acceptance tests in dispatch/delete/redfish_endpoint.rs's\nunit-test target cover the long flag and the `-d` short alias. No\nserver-side change. No breaking change (no short-alias swap was\nneeded).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete redfish-endpoints`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9094328b1cd55a3cfa1bc6c1c13f462633abb5a8",
          "body": "The server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the DeleteBootParametersRequest\nas if real, prints it via action_result::print_with_data, and\nreturns Ok(()) before the OpenAPI call. Honors `-o table | json`\nuniformly.\n\nThree CLI touchpoints (same sh\n[…]\narse-acceptance tests in\ndispatch/delete/boot_parameters.rs's unit-test target cover the\nlong flag and the `-d` short alias. No server-side change. No\nbreaking change (no short-alias swap was needed).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete boot-parameters`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc30d0a447544ef336c230aa3463b231477452d1",
          "body": "The server endpoint has no `dry_run` support (path-only DELETE\n/nodes/{id}; no JSON body), so the preview is purely client-side:\nthe CLI prints the targeted xname via action_result::print_with_data\nand returns Ok(()) before the OpenAPI call. Honors `-o table | json`\nuniformly.\n\nThree CLI touchpoints\n[…]\nsed.\n\nTwo parse-acceptance tests in dispatch/delete/node.rs's unit-test\ntarget cover the long flag and the `-d` short alias. No server-side\nchange. No breaking change (no short-alias swap was needed).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete node`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "692015ddd3a8ec453e7cccf5144c9733a4a2a9c4",
          "body": "…main` short alias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the UpdateRedfishEndpointParams\nas if real, prints it via action_result::print_with_data with a\n\"Would PUT /redfish-endpoints:\" label (distinct from the sibling\n`\n[…]\nin dispatch/apply/redfish_endpoint.rs's\nunit-test target cover the long flag, the `-d` short alias, and\nthe new `-D` alias for `--domain` (which is the breaking-change\nsurface). No server-side change.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta apply redfish-endpoints`; `--do…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f7832ff82b5170c969e1d8d6c6894b77e36e1c1",
          "body": "…oints handler\n\nThe handler refactor in 8672b417 moved arg extraction up to the\ndispatcher and switched the handler's signature to take an ExecParams\nstruct. The ArgMatchesExt trait import in the handler file became\ndead at that point but was left behind; this drops it. No behaviour\nchange.",
          "is_bot": false,
          "headline": "refactor(cli): remove dead ArgMatchesExt import from add redfish-endp…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c09bba8937a6be86b05d35710d8afe582e80f546",
          "body": "…in` short alias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the UpdateRedfishEndpointParams\nas if real, prints it via action_result::print_with_data, and\nreturns Ok(()) before the OpenAPI call. Honors `-o table | json`\nunifo\n[…]\n\n\nRead-only mode interaction: with `read_only = true` in cli.toml,\nthe prior chokepoint's dry_run_set walker now finds this flag and\nbypasses the gate. Same command without --dry-run is still blocked.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta add redfish-endpoints`; `--doma…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cae5efaa7c82cdb47b1dea0627911cd11eda2255",
          "body": "The previous commit swapped `--disabled`'s short alias from `-d` to\n`-D` to free `-d` for the new `--dry-run` flag, but no test\nexercised the new `-D` form. The final whole-branch review flagged\nthis as a Minor coverage gap: the swap IS the breaking-change surface,\nand a regression that re-bound `-d` to `--disabled` (re-introducing\nthe collision with `--dry-run`) would slip through.\n\nOne additional parse test in dispatch/add/node.rs::tests locks it down.",
          "is_bot": false,
          "headline": "test(cli): assert `-D` short alias for `add node --disabled` parses",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dd29ea03482a4b7ef1f5ef1582a50e5dac0ee04",
          "body": "…lias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the AddNodeRequest as if real,\nprints it via action_result::print_with_data, and returns Ok(())\nbefore the OpenAPI call. Honors `-o table | json` uniformly.\n\nBREAKING CHANGE: \n[…]\n\n\nRead-only mode interaction: with `read_only = true` in cli.toml, the\nprior chokepoint's dry_run_set walker now finds this flag and bypasses\nthe gate. Same command without --dry-run is still blocked.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta add node`; `--disabled` short a…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 964,
      "latest_release_at": "2026-07-12T19:59:26Z",
      "latest_release_tag": "v2.0.0-beta.62",
      "releases_from_tags": false,
      "days_since_last_push": 15,
      "active_weeks_last_year": 43,
      "days_since_latest_release": 22,
      "mean_days_between_releases": 2.3
    },
    "artifacts": {
      "collected": true,
      "structure": [
        "tree.cargo_lib",
        "tree.cargo_main",
        "tree.dockerfile",
        "tree.migrations"
      ],
      "declarations": [
        {
          "name": null,
          "path": "Cargo.toml",
          "tokens": [
            "cargo.workspace"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-cli",
          "path": "crates/manta-cli/Cargo.toml",
          "tokens": [
            "cargo.bin"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-server",
          "path": "crates/manta-server/Cargo.toml",
          "tokens": [
            "cargo.bin",
            "cargo.lib"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-shared",
          "path": "crates/manta-shared/Cargo.toml",
          "tokens": [
            "cargo.lib"
          ],
          "ecosystem": "crates"
        }
      ]
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "readme_badges": {
        "hosts": [],
        "total": 0,
        "header": 0,
        "collected": true,
        "has_inspect_badge": false
      },
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "manta-cli",
          "exists": true,
          "license": "non-standard",
          "keywords": [
            "cli",
            "productivity"
          ],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-cli",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "1.71.1",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 127,
          "total_downloads": 4132,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 417,
          "first_published_at": "2025-09-23T19:54:27.961273Z",
          "latest_published_at": "2026-07-12T19:37:32.828828Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        },
        {
          "name": "manta-server",
          "exists": true,
          "license": "non-standard",
          "keywords": [],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-server",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "2.0.0-beta.62",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 2,
          "total_downloads": 33,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 11,
          "first_published_at": "2026-06-28T08:46:41.202808Z",
          "latest_published_at": "2026-07-12T19:37:34.479485Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        },
        {
          "name": "manta-shared",
          "exists": true,
          "license": "non-standard",
          "keywords": [],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-shared",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "2.0.0-beta.62",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 57,
          "total_downloads": 1259,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 420,
          "first_published_at": "2026-05-18T18:55:33.709559Z",
          "latest_published_at": "2026-07-12T19:37:29.324293Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        }
      ]
    },
    "popularity": {
      "forks": 4,
      "stars": 23,
      "watchers": 8,
      "fork_history": {
        "days": [
          {
            "date": "2023-07-06",
            "count": 1
          },
          {
            "date": "2023-07-19",
            "count": 1
          },
          {
            "date": "2023-09-27",
            "count": 1
          },
          {
            "date": "2024-10-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 4,
        "total_forks": 4
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [
        "crates/manta-cli/openapi.json"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "crates/manta-cli/Cargo.toml",
        "crates/manta-server/Cargo.toml",
        "crates/manta-shared/Cargo.toml"
      ],
      "largest_source_bytes": 40182,
      "source_files_sampled": 228,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2147
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 47,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "manta-shared",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "nodeset",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.5.0"
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4.41"
        },
        {
          "name": "anyhow",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.44"
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.4"
        },
        {
          "name": "serde",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.219"
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.140"
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9.34"
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "tokio",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.45"
        },
        {
          "name": "tokio-util",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.7.4"
        },
        {
          "name": "minijinja",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "uuid",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.16.0"
        },
        {
          "name": "git2",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.21"
        },
        {
          "name": "dialoguer",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.12.0"
        },
        {
          "name": "futures",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.31"
        },
        {
          "name": "toml_edit",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.22.27"
        },
        {
          "name": "clap",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "4.5.60"
        },
        {
          "name": "clap_complete",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "4.5.66"
        },
        {
          "name": "clap_mangen",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.0"
        },
        {
          "name": "comfy-table",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "7.2.2"
        },
        {
          "name": "crossterm",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.29.0"
        },
        {
          "name": "execute",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.2.13"
        },
        {
          "name": "is_executable",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.1"
        },
        {
          "name": "config",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.15.19"
        },
        {
          "name": "tokio-tungstenite",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.29"
        },
        {
          "name": "self_update",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.44"
        },
        {
          "name": "xz2",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "tar",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "semver",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0"
        },
        {
          "name": "progenitor-client",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "manta-shared",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "manta-backend-dispatcher",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "csm-rs",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "ochami-rs",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "axum",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "axum-server",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "tower-http",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6"
        },
        {
          "name": "tokio",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tokio-util",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "futures",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa-swagger-ui",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "9"
        },
        {
          "name": "rustls",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.23"
        },
        {
          "name": "base64",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "rdkafka",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "comfy-table",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "7.2.2"
        },
        {
          "name": "globset",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "hostlist-parser",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.6"
        },
        {
          "name": "regex",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "manta-backend-dispatcher",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "base64",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing-subscriber",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "config",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "directories",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "toml_edit",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "thiserror",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "anyhow",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "axum",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "axum-server",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "base64",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "chrono",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap_complete",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap_mangen",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "comfy-table",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "config",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "crossterm",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "dialoguer",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "execute",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "git2",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "hostlist-parser",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "is_executable",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "nodeset",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "progenitor-client",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "reqwest",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "rustls",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "self_update",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "semver",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde_yaml",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tar",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio-tungstenite",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio-util",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "toml_edit",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tower-http",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tracing",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "utoipa-swagger-ui",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "xz2",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "assert_cmd",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "http-body-util",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "openapiv3",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "predicates",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "prettyplease",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "progenitor",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "toml",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tower",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "wiremock",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 47,
        "direct_count": 36,
        "indirect_count": 11
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 20,
        "open_issues": 7,
        "closed_ratio": 0.92,
        "closed_issues": 81,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "Masber",
          "commits": 1391,
          "avatar_url": "https://avatars.githubusercontent.com/u/722064?v=4"
        },
        {
          "type": "User",
          "login": "ManuelSopenaBallesteros",
          "commits": 690,
          "avatar_url": "https://avatars.githubusercontent.com/u/196793114?v=4"
        },
        {
          "type": "User",
          "login": "miguelgila",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/7137318?v=4"
        },
        {
          "type": "User",
          "login": "rjanalik",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/2372198?v=4"
        },
        {
          "type": "User",
          "login": "aescoubas",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/69113198?v=4"
        },
        {
          "type": "User",
          "login": "matteo-chesi",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/17476259?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.659
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "cleanup-ghcr.yml",
        "docker-publish.yml",
        "docs.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "41af6045b118591e9f529b44d75efe0d75d04a7f",
        "ran_at": "2026-08-04T00:56:13Z",
        "aggregate_score": 4.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "recent_prs": {
        "merged_7d": 0,
        "decided_7d": 0,
        "merged_30d": 1,
        "authors_30d": 1,
        "decided_30d": 1,
        "sample_size": 21,
        "window_days": 30,
        "sample_exhausted": false,
        "authors_probed_30d": 1,
        "newcomer_merged_30d": 0,
        "bot_prs_excluded_30d": 0,
        "newcomer_authors_30d": 0,
        "newcomer_decided_30d": 0
      },
      "ci_last_run_at": "2026-08-02T05:09:32Z",
      "oldest_open_prs": [
        {
          "number": 110,
          "created_at": "2026-07-17T22:27:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 111,
          "created_at": "2026-07-18T23:50:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-17T12:03:06Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 21,
          "created_at": "2024-02-10T00:40:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 23,
          "created_at": "2024-02-10T16:03:16Z",
          "last_comment_at": "2024-02-12T08:02:03Z",
          "last_comment_author": "miguelgila"
        },
        {
          "number": 64,
          "created_at": "2024-04-10T21:48:19Z",
          "last_comment_at": "2026-07-17T20:17:14Z",
          "last_comment_author": "rjanalik"
        },
        {
          "number": 94,
          "created_at": "2025-04-01T22:36:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2026-07-17T22:22:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2026-07-17T22:22:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 109,
          "created_at": "2026-07-17T22:22:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/eth-cscs/manta",
    "host": "github.com",
    "name": "manta",
    "owner": "eth-cscs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 67,
            "calibrated": 78,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 78,
      "inputs": {
        "security": 47,
        "vitality": 88,
        "community": 42,
        "governance": 66,
        "calibration": "2026-08-02",
        "engineering": 81,
        "ai_readiness": 79,
        "weighted_overall_raw": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 88,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "commits_last_year": 964,
              "human_commit_share": 0.89,
              "days_since_last_push": 15,
              "active_weeks_last_year": 43
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 15 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 15
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "43/52 weeks with commits",
                "points": 29.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 43
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "964 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 964
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v2.0.0-beta.62",
              "releases_from_tags": false,
              "days_since_latest_release": 22,
              "mean_days_between_releases": 2.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 22 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 17,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 17 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 17
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "forks": 4,
              "stars": 23,
              "watchers": 8,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "23 stars",
                "points": 21.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 23
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "4 forks",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "8 watchers",
                "points": 4.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": 0,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-3-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-3-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "weak",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "packages": [
                "manta-cli",
                "manta-server",
                "manta-shared"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 5424,
              "monthly_downloads": 848
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "848 downloads/month across crates",
                "points": 39.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 848,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 66,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 31,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.659
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 66% of commits",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 66
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 77,
            "inputs": {
              "merged_prs": 20,
              "open_issues": 7,
              "closed_issues": 81,
              "prs_merged_7d": 0,
              "prs_decided_7d": 0,
              "prs_merged_30d": 1,
              "prs_decided_30d": 1,
              "issue_closed_ratio": 0.92,
              "closed_unmerged_prs": 1,
              "first_time_authors_30d": 0,
              "first_time_prs_merged_30d": 0,
              "first_time_prs_decided_30d": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "92% of issues closed",
                "points": 38.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 92
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "20/21 decided PRs merged",
                "points": 28.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 20,
                      "decided": 21
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "followers": 181,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "eth-cscs",
              "public_repos": 142,
              "account_age_days": 4668
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "181 followers of eth-cscs",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 181,
                      "login": "eth-cscs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "142 public repos, account ~12 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 142
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "manta-cli",
                "manta-server",
                "manta-shared"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 22
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "3 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 3,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 22 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "127 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 127
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 81,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "alps",
                "cli",
                "csm",
                "productivity",
                "cscs"
              ],
              "has_wiki": true,
              "homepage": "https://eth-cscs.github.io/manta/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://eth-cscs.github.io/manta/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "weak",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "weak",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 79,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.989,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2147
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 89 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 89
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "Cargo.toml",
                "crates/manta-cli/Cargo.toml",
                "crates/manta-server/Cargo.toml",
                "crates/manta-shared/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 40182,
              "source_files_sampled": 228,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/228 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 228,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "crates/manta-cli/openapi.json"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "crates/manta-cli/openapi.json",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "crates/manta-cli/openapi.json"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library",
        "cli",
        "network-service",
        "tui"
      ],
      "scores": {
        "cli": 14,
        "tui": 4,
        "library": 15,
        "network-service": 7
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "declared",
          "label": "library",
          "source": "cargo.lib",
          "weight": 6
        },
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:crates",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "cli",
          "source": "dep:clap",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "network-service",
          "source": "dep:axum",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "tui",
          "source": "dep:crossterm",
          "weight": 4
        },
        {
          "tier": "declared",
          "label": "cli",
          "source": "cargo.bin",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "cli",
          "source": "tree.cargo_main",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "library",
          "source": "tree.cargo_lib",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "network-service",
          "source": "api_schema",
          "weight": 3
        },
        {
          "tier": "description",
          "label": "cli",
          "source": "description:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        }
      ],
      "artifacts": [
        {
          "path": "Cargo.toml",
          "labels": [],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-cli/Cargo.toml",
          "labels": [
            "cli"
          ],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-server/Cargo.toml",
          "labels": [
            "library",
            "cli"
          ],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-shared/Cargo.toml",
          "labels": [
            "library"
          ],
          "ecosystem": "crates"
        }
      ],
      "confidence": "high",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-04T00:56:22.587349Z",
  "schema_version": "0.30.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/eth-cscs/manta.svg",
  "full_name": "eth-cscs/manta",
  "license_state": "standard",
  "license_spdx": "BSD-3-Clause"
}

Пов’язані записи

Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з eth-cscs/manta. Читати поруч →

98nrwl/nxThe Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.Винятковий98getsentry/sentry-cliA command line utility to work with Sentry.Винятковий98microsoft/agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.Винятковий96vercel/vercelDevelop. Preview. Ship.Винятковий96wasmerio/wasmer🚀 Fast, secure, lightweight containers based on WebAssemblyВинятковий95vectordotdev/vectorA high-performance observability data pipeline.Винятковий

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.3.1, схема v0.30.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — crates.io.