giantswarm / cluster-api-cleaner-vsphere

Повний розв'язаний набір залежностей із графа залежностей GitHub: 10 прямих і 51 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 61 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 1 мають відомі сповіщення, з них 0 прямі.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [
        "vsphere"
      ],
      "is_fork": false,
      "size_kb": 333,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 16136,
        "Makefile": 8329,
        "Mustache": 1852,
        "Dockerfile": 310
      },
      "pushed_at": "2026-07-28T14:26:42Z",
      "created_at": "2023-04-24T11:18:31Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T14:30:34Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Makefile"
      ]
    },
    "owner": {
      "blog": "https://www.giantswarm.io/",
      "name": "Giant Swarm",
      "type": "Organization",
      "login": "giantswarm",
      "company": null,
      "location": "Germany",
      "followers": 143,
      "avatar_url": "https://avatars.githubusercontent.com/u/7556340?v=4",
      "created_at": "2014-05-12T10:05:54Z",
      "is_verified": null,
      "public_repos": 1163,
      "account_age_days": 4460
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-17T11:07:28Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2026-06-15T20:57:35Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2026-04-24T10:31:10Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-02-17T11:04:19Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2025-11-27T15:01:42Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2024-08-01T09:04:22Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2024-07-24T09:24:50Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2024-03-04T09:07:35Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2024-01-04T11:26:10Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2023-08-24T14:55:10Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2023-05-09T10:03:24Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "176e4d4ae80de94eda56e1b1c18fa5cdf72c3d08",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(nancy): remediate nancy findings (#203)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-07-28T14:26:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "872b558c7c42a83d1cc3471ab8efb974e26f342f",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#202)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-07-28T14:13:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24a18dfcf114d76dc3140aad7e112073cf840e8d",
          "body": "* fix(deps): update k8s modules to v0.36.3\n\n* update changelog\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>\nCo-authored-by: Simon Weald <glitchcrab-github@simonweald.com>",
          "is_bot": true,
          "headline": "fix(deps): update k8s modules to v0.36.3 (#200)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-27T15:18:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94ed0174e32b39d0033ff306c9c743f9c55c92bf",
          "body": "* fix(deps): update module github.com/go-logr/logr to v1.4.4\n\n* update changelog\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <glitchcrab-github@simonweald.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/go-logr/logr to v1.4.4 (#201)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-27T15:04:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a1f809a8feba0ce7977eb1e7fac08661343831e",
          "body": "Release-Workflow-Run: 29573298194",
          "is_bot": false,
          "headline": "chore(release): v0.6.0 (#199)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2026-07-17T11:07:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "817a6701ccee1fc1455437463252bb5e32e37e30",
          "body": "* fix(deps): update capi modules\n\n* fix: migrate to relocated CAPI/CAPV v1beta2 API packages\n\nThe capi module bump moved the API types:\n- sigs.k8s.io/cluster-api/api/v1beta1 -> api/core/v1beta2\n- cluster-api-provider-vsphere/apis/v1beta1 -> api/govmomi/v1beta2\n\nv1beta2 is required because identity.G\n[…]\n update changelog\n\n* further update changelog\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <glitchcrab-github@simonweald.com>",
          "is_bot": true,
          "headline": "fix(deps): update capi modules (#183)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T10:03:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "40c6d45938d8d950ff6e34291897bb0eae14a99c",
          "body": "* fix(deps): update k8s modules\n\n* update changelog\n\n* go mod tidy\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <glitchcrab-github@simonweald.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update k8s modules (#184)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-14T15:51:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a4efbe9e89953c6327288f8f0e0b9bab7404084",
          "body": "* fix(deps): update module github.com/vmware/govmomi to v0.55.1\n\n* update changelog\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <glitchcrab-github@simonweald.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/vmware/govmomi to v0.55.1 (#197)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-14T15:44:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc7ce4f1383da39654f4182946eefd85dd3563ba",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#198)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-07-13T10:15:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac0dd60b9cdb670c4c5a3d00e2d73309c3da5d71",
          "body": "* fix(deps): update module github.com/vmware/govmomi to v0.54.1\n\n* use pointer receiver for filter\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <glitchcrab-github@simonweald.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/vmware/govmomi to v0.54.1 (#185)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-06T11:34:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c208b2d3ca87621d605f285e2416a1bf4007e16",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#194)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-29T13:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c166fa4eae0823728680f41d5acdd696344702d6",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(nancy): remediate nancy findings (#196)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-06-29T12:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7d9e82c6efce78deb0272dbe81bb5236930872f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency architect to v9.5.5 (#195)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-29T11:41:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "395305a356d6e18f5c5fb82bf84a7cc65af54e18",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module go.uber.org/zap to v1.28.0 (#186)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-19T08:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9aba3619c70da8668ebe4055cc2acb07630a371e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/go-logr/logr to v1.4.3 (#181)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-19T08:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d3ab6976fdd09f3ac40e72960f589d6421f1900",
          "body": "…#180)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/microerror to v0.4.1 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-19T08:39:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3f1175b7be0b0a79efe2ab54deee86e2dcd3316",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency architect to v9.4.2 (#193)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-19T08:36:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "299782cba3f4f4d7007ca535524971e8496a300c",
          "body": null,
          "is_bot": false,
          "headline": "build: Remove build steps from Dockerfile (#192)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2026-06-16T15:50:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7988102d89ee9de055f6bdc835150c48e88be6f",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(nancy): remediate nancy findings (#189)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-06-16T11:03:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3e4cab6114687c817b1b9438b64424fd42a5e0c",
          "body": "Release-Workflow-Run: 27575035908",
          "is_bot": false,
          "headline": "chore(release): v0.5.2 (#191)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2026-06-15T20:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd9bc5f08db2c1268c5af04aab5fdab0be7dbbd8",
          "body": "Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: standardize vSphere app icon on light variant (#190)",
          "author_name": "Marian Steinbach",
          "author_login": "marians",
          "committed_at": "2026-06-15T20:40:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2d6d2952e52f3825ba260256c9559b2e0cf3ddb8",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#188)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-12T10:56:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca4cdc6c64a3b18604931fac8a995d0b5ae90d43",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency architect to v9 (#187)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-12T10:49:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "086ac35b62328f39487efeecd6e2926bcd9eb543",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(nancy): remediate nancy findings (#178)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-06-01T14:33:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97facc35e584588eb925af9ce0a32e22f6d92a52",
          "body": null,
          "is_bot": false,
          "headline": "Fix renovate syntax and bump golang image version (#179)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2026-06-01T14:27:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc8049b4b9e986ebafd5368814ead4abdc9e115d",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#177)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2026-05-21T08:43:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6dffe36a00892e1503c8b2ecf0b4f4de21465df",
          "body": "Release-Workflow-Run: 24841222688",
          "is_bot": false,
          "headline": "Release v0.5.1 (#176)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2026-04-24T10:30:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36925092b8784ea71b1ef5e5f55595772d003e3a",
          "body": null,
          "is_bot": false,
          "headline": "Mitigate CVE-2023-44487 (#175)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2026-04-23T14:32:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c52b9f68547815c1d38dbc213b3e9de279ecd66f",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#173)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2026-04-23T10:36:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8312e6d962419f920176b4549b0e668a8d5db03d",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#172)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2026-04-20T12:29:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afbfe6cd2a622cf11732f6ebea1ac36a67ef8cb0",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#171)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-04-10T10:15:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9abd9540e5c6656e7a59caf68e07cf26cbfe23a3",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#170)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-03-12T13:36:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e851dcfe671340a3e67b963828b6bd28061c65b",
          "body": null,
          "is_bot": false,
          "headline": "Clean up push-to-app-collection jobs from .circleci/config.yml (#169)",
          "author_name": "Laszlo Uveges",
          "author_login": "uvegla",
          "committed_at": "2026-03-05T10:14:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a344ac37cfc5e147b9b8e653c3aa1320b76eea1",
          "body": "Release-Workflow-Run: 22095848748",
          "is_bot": false,
          "headline": "Release v0.5.0 (#166)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2026-02-17T11:04:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec337a6a9218fffe1c46d7d505878d3d58f70c81",
          "body": null,
          "is_bot": false,
          "headline": "Correct icon URL in Chart.yaml (#165)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2026-02-17T10:58:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee86064b55ae9dbfc5f5234bebbb66563626fd76",
          "body": "* use Chart appVersion for image tag generation\n\n* switch labels to opencontainers format\n\n* add changelog\n\n* Update Architect orb to 6.12.0\n\n* update chart logo",
          "is_bot": false,
          "headline": "Fix chart version usage (#163)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2026-02-16T13:30:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c64a716ae27d87d0c70cb4456f999e27a120c888",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#162)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-02-09T09:28:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80aa292da4f8bd89a28440fa36a67e6e098196a1",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#161)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2026-02-09T09:24:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93cfc6cc003d8ec85b64733018544d2e4ea768b1",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#160)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-02-02T09:26:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8beed93972d91acf2cdd78af8cf54dee2ae6dafa",
          "body": "* Migrate to App Build Suite (ABS)\n\n* Update helm/cluster-api-cleaner-vsphere/Chart.yaml\n\n---------\n\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Migrate to App Build Suite (ABS) (#158)",
          "author_name": "Lucas Weatherhog",
          "author_login": "weatherhog",
          "committed_at": "2026-01-09T11:06:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4868b11c28ed8baaf21b1d931a57b33742769a7",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#159)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2026-01-06T06:29:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "165ac838a07c4bce6a95aaea8aa73832aacea4fc",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#157)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2026-01-05T07:45:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "141d41ccb09bf2e51326afe89e1ef5f33dc5ecde",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#156)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2025-12-04T09:25:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a20d7f67b8f81e15d95937a8bc7da705c291aca",
          "body": null,
          "is_bot": false,
          "headline": "Release v0.4.0 (#155)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2025-11-27T15:01:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ea9ed71180761fa5540f894f9d15a5f028cea86",
          "body": null,
          "is_bot": false,
          "headline": "handle credential secret deletion more gracefully (#154)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2025-11-27T14:44:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c8df0258ee1617591fdbf7ea0c5098c003167c4",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#153)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2025-11-04T07:18:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13efa86e661920d128e668812ff52a5c9524b467",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#152)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2025-11-03T06:11:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c594cbb657538d8397b6c8faabbde9a1a2ce942",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#150)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2025-08-28T05:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dfad3efa29fe95b785a941645ef9f72147181ed",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#151)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2025-08-28T05:54:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "086b44cb14b5fca759394b52ccf2d9df3e111a66",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#149)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2025-08-18T05:29:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef952fbe1a4b62c91181892ce460e0cef09462dc",
          "body": null,
          "is_bot": false,
          "headline": "Bump architect-orb to v6.3.2 (#148)",
          "author_name": "Laszlo Uveges",
          "author_login": "uvegla",
          "committed_at": "2025-08-12T10:02:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1df3b172c5d0a28502327ce13e28694892e8868",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#147)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2025-07-29T07:47:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f88879fca9719a9fbcbd23051bbc61cc5cc21df6",
          "body": "Co-authored-by: HeraldBot[bot] <149080493+heraldbot[bot]@users.noreply.github.com>\nCo-authored-by: Simon Weald <7832341+glitchcrab@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Remediate Nancy findings (#146)",
          "author_name": "heraldbot[bot]",
          "author_login": "heraldbot[bot]",
          "committed_at": "2025-06-27T09:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cab68ac5ce647a7e9a939481f4265ab9ef8e9883",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#145)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2025-06-27T09:11:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7675044b8d5455a82ccad183700bf874d8778805",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#144)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2025-06-26T12:40:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e559c1bdc73fc7c1fda2ebf81653117e61742a3",
          "body": null,
          "is_bot": false,
          "headline": "Bump architect-orb to v5.15.0",
          "author_name": "Laszlo Uveges",
          "author_login": "uvegla",
          "committed_at": "2025-05-15T11:09:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9cca7ba3739fa5a0d17005b2383580e73a7cad8",
          "body": null,
          "is_bot": false,
          "headline": "Update config.yml (#143)",
          "author_name": "Laszlo Uveges",
          "author_login": "uvegla",
          "committed_at": "2025-04-25T08:17:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f2b23226722bd8ba81c238f39918dd1271686fe",
          "body": null,
          "is_bot": false,
          "headline": "Ignore default branch (#141)",
          "author_name": "Marian Steinbach",
          "author_login": "marians",
          "committed_at": "2024-11-05T08:52:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "733e97bc0e652c8af765464662add18e1ee0790c",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#140)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2024-08-23T15:03:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "412f545e95585e5d865073ecaabb6fef2bb9819e",
          "body": null,
          "is_bot": false,
          "headline": "push to capa-capv addons (#139)",
          "author_name": "Antonia",
          "author_login": "anvddriesch",
          "committed_at": "2024-08-20T07:45:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd45c228bc6b00f01f26839f6412973e890650ab",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#138)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2024-08-09T12:35:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55849932496b0689e09b11b234d7070a710fe6d7",
          "body": null,
          "is_bot": false,
          "headline": "Release v0.3.1 (#137)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2024-08-01T09:04:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c679a310f7572e54a1e6cf8ef990e24d0942db42",
          "body": null,
          "is_bot": false,
          "headline": "Set keep alive false to avoid deadlock (#136)",
          "author_name": "Erkan Erol",
          "author_login": null,
          "committed_at": "2024-08-01T09:03:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12feea8ed569093a1e468d7529c765aa5fbb3168",
          "body": null,
          "is_bot": false,
          "headline": "Push to vsphere-addons-app-collection (#135)",
          "author_name": "Erkan Erol",
          "author_login": null,
          "committed_at": "2024-07-30T12:58:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2bb4a6c83d584e5a3b8b3a3512e510392daf5d0",
          "body": null,
          "is_bot": false,
          "headline": "Release v0.3.0 (#134)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2024-07-24T09:24:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a732c4de4e457181d252a83cec8a223cbbffde9c",
          "body": null,
          "is_bot": true,
          "headline": "Bump github.com/vmware/govmomi from 0.34.2 to 0.36.1 (#97)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-24T09:14:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a64c482748e0db3628372e633c45f03ed9a4242",
          "body": null,
          "is_bot": true,
          "headline": "Update library dependencies (#34)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-24T09:02:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0a194038f49d84f4d439dea0e5688df5cb856c4",
          "body": null,
          "is_bot": false,
          "headline": "update renovate to json5 config (#132)",
          "author_name": "Simon Weald",
          "author_login": "glitchcrab",
          "committed_at": "2024-07-16T09:11:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01fd2c375469f02ab16529076af4cec4516636ce",
          "body": "Bumps golang from 1.22.4 to 1.22.5.\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump golang from 1.22.4 to 1.22.5 (#126)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-15T09:13:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d74496015182a0d6fd6b73711317f37a80568d85",
          "body": "Bumps [giantswarm/install-binary-action](https://github.com/giantswarm/install-binary-action) from 2.0.0 to 3.0.0.\n- [Release notes](https://github.com/giantswarm/install-binary-action/releases)\n- [Changelog](https://github.com/giantswarm/install-binary-action/blob/main/CHANGELOG.md)\n- [Commits](htt\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump giantswarm/install-binary-action from 2.0.0 to 3.0.0 (#129)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-15T07:31:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dcb85612b236e58ed5732827d629e46a39330dec",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.11 to 3.25.12.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.11 to 3.25.12 (#130)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-15T07:31:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9c77eedbba61407dcb7db043eb717e3aa997487",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3fe\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#127)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-08T08:57:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "735aa61e8babcddcdb407722cd00474e4d3fd6e3",
          "body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.7 to 4.1.8.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/65a9edc5881444af0b9093a5e628f2fe47ea3b2e...fa0a91b85d4f404e44\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump actions/download-artifact from 4.1.7 to 4.1.8 (#128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-08T08:57:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2172f1aab875ca637e309f98ac8badd7422c33f",
          "body": "Bumps [actions/add-to-project](https://github.com/actions/add-to-project) from 1.0.1 to 1.0.2.\n- [Release notes](https://github.com/actions/add-to-project/releases)\n- [Commits](https://github.com/actions/add-to-project/compare/9bfe908f2eaa7ba10340b31e314148fcfe6a2458...244f685bbc3b7adfa8466e08b698b5\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump actions/add-to-project from 1.0.1 to 1.0.2 (#124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-01T13:13:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ed1f27fd7535a191a2d6c0b061c6b89724316e93",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.10 to 3.25.11.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.10 to 3.25.11 (#125)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-01T13:13:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb9c9a0443f53fc009889f0f996792009fa1c548",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.9 to 3.25.10.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.9 to 3.25.10 (#122)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-18T07:53:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "63b4e0bb34f03b74fdbb10783c8ef70fda3a6150",
          "body": "Bumps [actions-ecosystem/action-add-labels](https://github.com/actions-ecosystem/action-add-labels) from 1.1.0 to 1.1.3.\n- [Release notes](https://github.com/actions-ecosystem/action-add-labels/releases)\n- [Commits](https://github.com/actions-ecosystem/action-add-labels/compare/bd52874380e3909a1ac98\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump actions-ecosystem/action-add-labels from 1.1.0 to 1.1.3 (#123)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-18T07:51:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eccb0027d491c176eead722c72ebe92d02d337f7",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#121)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2024-06-14T20:00:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d8cec07753602a4ad7ebcf67d0b01c6b28cae7a",
          "body": "Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.4.1 to 1.4.2.\r\n- [Release notes](https://github.com/go-logr/logr/releases)\r\n- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2)\r\n\r\n---\r\nup\n[…]\n:production\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github.com/go-logr/logr from 1.4.1 to 1.4.2 (#115)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-13T09:10:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a241596ace1f7326d60cea2ce56c65d903f9267",
          "body": "Bumps golang from 1.22.1 to 1.22.4.\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump golang from 1.22.1 to 1.22.4 (#119)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-13T08:40:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1767794de692e79512e5af3057f9a4d658066a33",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.7 to 3.25.8.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/f\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.7 to 3.25.8 (#118)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-10T10:36:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e70f64f7385521362627d51a17d96069e853bd9",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.6 to 3.25.7.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/9\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.6 to 3.25.7 (#117)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-04T14:43:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e93b8689dcafa74f5446fa8cec3f46f701fc8ed4",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.5 to 3.25.6.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.5 to 3.25.6 (#116)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-30T11:06:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "87bd08107925cb54a8642e2b0b0acfc204b9822c",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.4 to 3.25.5.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.4 to 3.25.5 (#113)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-20T09:31:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee52b75ea4663b2489d947c60f597a6695144061",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.3 to 3.25.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/d\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.3 to 3.25.4 (#110)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-16T10:12:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba5711e6284859637b0aca31077060a9da1721d8",
          "body": "Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.\n- [Release notes](https://github.com/ossf/scorecard-action/releases)\n- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)\n- [Commits](https://github.com/ossf/scorecard-action/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#111)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-16T10:12:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee082e928ece24658d069c2154c67e65c7970de5",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.2 to 3.25.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.25.2 to 3.25.3 (#108)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-30T10:34:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb15452a026516579694220b7690be79aa4c99a9",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#107)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2024-04-25T13:15:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "876427b7d0efb99934cb3dc21bfb543e85e98022",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.10 to 3.25.1.\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compa\n[…]\n:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.24.10 to 3.25.1 (#106)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-22T09:08:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0037f4c888fd9f14e9d117a013f2da69e2a7bab9",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.9 to 3.24.10.\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compa\n[…]\n:production\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.24.9 to 3.24.10 (#103)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-08T08:07:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6308488c27d674f41b21209b87dace1af15659e2",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#101)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2024-04-02T19:29:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fa837d03c183ff1681e75ed45fd720a28ac1731",
          "body": "Bumps golang from 1.22.0 to 1.22.1.\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Erkan Erol <erkan@giantswarm.io>",
          "is_bot": true,
          "headline": "Bump golang from 1.22.0 to 1.22.1 (#91)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-25T08:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd14d67cd397d31c0459cf7d0fac159d08ec6cf3",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.7 to 3.24.9.\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compar\n[…]\npatch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Erkan Erol <erkan@giantswarm.io>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.24.7 to 3.24.9 (#98)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-25T08:17:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7523943cd45b153017affb608ea9b4d07a09923a",
          "body": null,
          "is_bot": false,
          "headline": "Solve CVE-2024-24786 (#99)",
          "author_name": "Erkan Erol",
          "author_login": null,
          "committed_at": "2024-03-25T08:04:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef799abba7015dadb8ea2f1707b514d224fd4663",
          "body": "Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.2 to 2.3.1.\r\n- [Release notes](https://github.com/ossf/scorecard-action/releases)\r\n- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)\r\n- [Commits](https://github.com/ossf/scorecard-action/compa\n[…]\n:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump ossf/scorecard-action from 2.1.2 to 2.3.1 (#95)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-18T11:32:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3bfc32ac4bfca8536e02b0a768fb154f929f377",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.3 to 3.24.7.\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compar\n[…]\n:production\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump github/codeql-action from 3.24.3 to 3.24.7 (#94)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-18T11:32:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c917fe04599dc89eb237b7a131366bf7fba12c5d",
          "body": "Co-authored-by: github-actions <action@github.com>",
          "is_bot": false,
          "headline": "Align files (#93)",
          "author_name": "ArchitectBot",
          "author_login": "architectbot",
          "committed_at": "2024-03-14T12:25:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdf1e18943c886283e83f6dddd0429aa00f421ae",
          "body": null,
          "is_bot": false,
          "headline": "Release v0.2.0 (#90)",
          "author_name": "Taylor Bot",
          "author_login": "taylorbot",
          "committed_at": "2024-03-04T09:07:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b677dbe24c27a9b1201b5921a9a1d79b259303d2",
          "body": null,
          "is_bot": false,
          "headline": "add pss flag (#89)",
          "author_name": "Xavier",
          "author_login": "vxav",
          "committed_at": "2024-03-04T09:02:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7e511cb45f40f0bb1ec98847bbdc8b3809eb170",
          "body": "Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.26.0 to 1.27.0.\r\n- [Release notes](https://github.com/uber-go/zap/releases)\r\n- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/uber-go/zap/compare/v1.26.0...v1.27.0)\r\n\r\n---\r\nupdated-de\n[…]\n:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump go.uber.org/zap from 1.26.0 to 1.27.0 (#88)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-02-26T07:38:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 11,
      "commits_last_year": 50,
      "latest_release_at": "2026-07-17T11:07:28Z",
      "latest_release_tag": "v0.6.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 27,
      "days_since_latest_release": 11,
      "mean_days_between_releases": 117.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/giantswarm/cluster-api-cleaner-vsphere",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/giantswarm/cluster-api-cleaner-vsphere",
          "is_deprecated": false,
          "latest_version": "v0.6.0",
          "repository_url": "https://github.com/giantswarm/cluster-api-cleaner-vsphere",
          "versions_count": 11,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T11:07:08Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 11
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 4,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 8869,
      "source_files_sampled": 5,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        ".cursor/rules/zz_generated.base-llm-rules.mdc",
        ".cursor/rules/zz_generated.go-llm-rules.mdc"
      ],
      "agent_instruction_max_bytes": 3012
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 13
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 61,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/giantswarm/microerror",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.1"
        },
        {
          "name": "github.com/go-logr/logr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.4"
        },
        {
          "name": "github.com/vmware/govmomi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.55.1"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "sigs.k8s.io/cluster-api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.13.4"
        },
        {
          "name": "sigs.k8s.io/cluster-api-provider-vsphere",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.1"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/giantswarm/microerror",
            "direct": true,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": true,
            "version": "v1.4.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vmware/govmomi",
            "direct": true,
            "version": "v0.55.1",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/cluster-api",
            "direct": true,
            "version": "v1.13.4",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/cluster-api-provider-vsphere",
            "direct": true,
            "version": "v1.16.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver",
            "direct": false,
            "version": "v3.5.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260317180543-43fb72c5454a",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.4.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 61,
        "direct_count": 10,
        "indirect_count": 51
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 146,
        "open_issues": 1,
        "closed_ratio": 0.75,
        "closed_issues": 3,
        "closed_unmerged_prs": 52
      },
      "bus_factor": 1,
      "bot_contributors": 5,
      "top_contributors": [
        {
          "type": "User",
          "login": "architectbot",
          "commits": 30,
          "avatar_url": "https://avatars.githubusercontent.com/u/61872893?v=4"
        },
        {
          "type": "User",
          "login": "taylorbot",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/25685558?v=4"
        },
        {
          "type": "User",
          "login": "glitchcrab",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/7832341?v=4"
        },
        {
          "type": "User",
          "login": "marians",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/273727?v=4"
        },
        {
          "type": "User",
          "login": "uvegla",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/1612809?v=4"
        },
        {
          "type": "User",
          "login": "anvddriesch",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/56017655?v=4"
        },
        {
          "type": "User",
          "login": "weatherhog",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/31103312?v=4"
        },
        {
          "type": "User",
          "login": "vxav",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/19745768?v=4"
        }
      ],
      "contributors_sampled": 8,
      "top_contributor_share": 0.5
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": false,
      "ci_workflows": [
        "zz_generated.add-team-labels.yaml",
        "zz_generated.add-to-project-board.yaml",
        "zz_generated.check_values_schema.yaml",
        "zz_generated.create_release.yaml",
        "zz_generated.create_release_pr.yaml",
        "zz_generated.fix_vulnerabilities.yaml",
        "zz_generated.gitleaks.yaml",
        "zz_generated.run_ossf_scorecard.yaml",
        "zz_generated.semantic_pull_request.yaml",
        "zz_generated.validate_changelog.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "26 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "176e4d4ae80de94eda56e1b1c18fa5cdf72c3d08",
        "ran_at": "2026-07-28T16:32:07Z",
        "aggregate_score": 7.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T14:27:00Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-28T14:26:41Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 53,
          "created_at": "2023-10-19T16:25:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/giantswarm/cluster-api-cleaner-vsphere",
    "host": "github.com",
    "name": "cluster-api-cleaner-vsphere",
    "owner": "giantswarm"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 64,
      "inputs": {
        "security": 77,
        "vitality": 85,
        "community": 28,
        "governance": 69,
        "engineering": 58
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 85,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "commits_last_year": 50,
              "human_commit_share": 0.43,
              "days_since_last_push": 0,
              "active_weeks_last_year": 27
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "27/52 weeks with commits",
                "points": 18.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 27
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "50 commits in the last year",
                "points": 15.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 50
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "26 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 11,
              "latest_release_tag": "v0.6.0",
              "releases_from_tags": false,
              "days_since_latest_release": 11,
              "mean_days_between_releases": 117.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "11 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 11 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~117.5 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 117.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 11,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 11 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 28,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 3,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 4,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "4 watchers",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 69,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 8,
              "top_contributor_share": 0.5
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 50% of commits",
                "points": 11.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 50
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "8 contributors",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "merged_prs": 146,
              "open_issues": 1,
              "closed_issues": 3,
              "issue_closed_ratio": 0.75,
              "closed_unmerged_prs": 52
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "75% of issues closed",
                "points": 35.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 75
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "146/198 decided PRs merged",
                "points": 28.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 146,
                      "decided": 198
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 143,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "giantswarm",
              "public_repos": 1163,
              "account_age_days": 4460
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "143 followers of giantswarm",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 143,
                      "login": "giantswarm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1163 public repos, account ~12 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1163
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/giantswarm/cluster-api-cleaner-vsphere"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 11
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 11 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "11 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 58,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_ci": true,
              "has_tests": false,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "10 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 16,
                "status": "met",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [
                "vsphere"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "1 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 77,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 71,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 7.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "26 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 61 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 61
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 61,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 61,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 9
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 77,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.977,
              "agent_instruction_files": [
                ".cursor/rules/zz_generated.base-llm-rules.mdc",
                ".cursor/rules/zz_generated.go-llm-rules.mdc"
              ],
              "agent_instruction_max_bytes": 3012
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/zz_generated.base-llm-rules.mdc, .cursor/rules/zz_generated.go-llm-rules.mdc",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/zz_generated.base-llm-rules.mdc, .cursor/rules/zz_generated.go-llm-rules.mdc"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "42 of 43 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 42,
                      "sampled": 43
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.39
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 11,
                "status": "met",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "39 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 39,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 8869,
              "source_files_sampled": 5,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/5 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 5,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-28T16:32:30.542253Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/giantswarm/cluster-api-cleaner-vsphere.svg",
  "full_name": "giantswarm/cluster-api-cleaner-vsphere",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}