Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-27 08:55 UTC

goreleaser / godownloader

[DEPRECATED] Download Go binaries as fast and easily as possible.

GoMIT★ 449 зірок⑂ 54 форкиз трав. 2017 р.архівнийПереглянути на GitHub ↗

goreleaser/godownloader має індекс здоров’я 18 зі 100, що відповідає смузі «Критичний». Найвищий показник — Community & Adoption (61/100), найнижчий — Vitality (17/100). Репозиторій заархівовано, тож подальшої підтримки не очікується.

18
загалом / 100
Критичний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

18
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Abandonment Policy applies a 40% multiplier to weighted overall health and gives it a ceiling of 29.

Власність

GoReleaserОрганізація
304 підписники66 публічних репозиторіївз груд. 2016 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Gogithub.com/goreleaser/godownloaderv0.1.0-12486 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

17Критичний · 22% загального індексу
Як обчислюється оцінка
0/36Свіжість push — останній push 1 836 дн. тому
0/36Ритм комітів — 0/52 тижнів із комітами
0/18Обсяг комітів — 0 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — project is archived
Використані вхідні дані
commits_last_year0
human_commit_share0,94
days_since_last_push1 836
active_weeks_last_year0

Дисципліна релізів

40У зоні ризику
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 1 релізів
0/36Свіжість релізів — останній реліз 2 486 дн. тому
12.6/27Ритм релізів — ритм невідомий (єдиний реліз)
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Використані вхідні дані
releases_count1
latest_release_tagv0.1.0
releases_from_tagsні
days_since_latest_release2 486
mean_days_between_releases

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

61Помірний · 18% загального індексу
Як обчислюється оцінка
43/60Зірки — 449 зірок
14.4/25Форки — 54 форків
0/15Спостерігачі — 1 спостерігачів
Використані вхідні дані
forks54
stars449
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
0/18Настанови CONTRIBUTING
13.5/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductтак
has_pull_request_templateні

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

59Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
7.1/22.5Розподіл комітів — головний контриб’ютор — автор 68% комітів
13.5/13.5Широта контриб’юторів — 29 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 8 contributing companies or organizations
Використані вхідні дані
bus_factor1
contributors_sampled29
top_contributor_share0,685
Як обчислюється оцінка
46.2/46.8Вирішення issue — закрито 99% issue
23.2/38.3Прийняття PR — злито 68/112 вирішених PR
4.5/15OpenSSF Scorecard: Code-Review — Found 8/24 approved changesets -- score normalized to 3
Використані вхідні дані
merged_prs68
open_issues1
closed_issues94
issue_closed_ratio0,989
closed_unmerged_prs44
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
17.9/25Охоплення власника — 304 підписників у goreleaser
25/25Послужний список — 66 публічних репозиторіїв, вік облікового запису ~9 р.
Використані вхідні дані
followers304
owner_typeOrganization
is_verified
owner_logingoreleaser
public_repos66
account_age_days3 504
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у go
4/35Свіжість публікацій — остання публікація 2 486 дн. тому
4/20Історія версій — 1 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesgithub.com/goreleaser/godownloader
ecosystemsgo
any_deprecatedні
min_days_since_publish2 486

Інженерна якість

Чи наявні базові інженерні практики та документація?

48У зоні ризику · 20% загального індексу

Інженерні практики

46У зоні ризику
Як обчислюється оцінка
24/24Процеси CI — 2 процес(ів) CI
0/24Наявні тести
16/16Конфігурація лінтера — .golangci.yml
0/9.6Pre-commit-хуки
6.4/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — 0 out of 19 merged PRs checked by a CI test -- score normalized to 0
Використані вхідні дані
has_ciтак
has_testsні
has_editorconfigтак
has_linter_configтак
has_precommit_configні

Документація

50Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
0/10Теми
10/10Wiki
Використані вхідні дані
topics
has_wikiтак
homepage
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

34У зоні ризику · 16% загального індексу

Стан безпеки

25Критичний
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 0 out of 19 merged PRs checked by a CI test -- score normalized to 0
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
2.2/7.5Code-Review — Found 8/24 approved changesets -- score normalized to 3
2.5/2.5Contributors — project has 8 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — project is archived
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 72 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate2,5
Виключено з оцінювання (немає даних або не застосовно): packaging. Залишкові ваги перенормовано.
Як обчислюється оцінка
16.8/35Прямі залежності без відомих сповіщень — уражено 1: gopkg.in/yaml.v2 2.2.7 (moderate 6.5)
0/25Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі
34.4/40Немає задавнених сповіщень — 1 пакет(ів) зі сповіщеннями без реакції понад 90 дн.; найдавніше опубліковано 1 929 дн. тому
Використані вхідні дані
sourceosv
advisories2
affected_packages1
assessed_packages6
unassessed_packages0
affected_by_severitymoderate 1
direct_affected_packages1
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень. Залишкові ваги перенормовано. Звірено 6 резолвлених залежностей із OSV. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

59Помірний · 0% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 79 з 94 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,84
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
18/18Розгортання однією командою — Makefile
0/22Автоматизовані тести
11/11Конфігурація лінтера / форматера — .golangci.yml
11/11Статична перевірка типів — Go (статично типізована)
10/10Відтворюване середовище — lockfile
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 6 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsні
lockfilesgo.sum
has_dockerfileні
typed_languageтак
bootstrap_filesMakefile
has_devcontainerні
has_linter_configтак
typecheck_configs
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0,06
Як обчислюється оцінка
45/45Типізований код — Go (статично типізована)
55/55Керовані розміри файлів — 0/7 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageGo
largest_source_bytes9 006
source_files_sampled7
oversized_source_files0

Ключові факти

449зірок GitHub
29контриб'юторів
0комітів за останні 12 місяців
1 836днів від останнього пушу
1релізів
1бас-фактор
1відкритих issue
Goпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

Історія зірок і форків 0 ★ / 54 ⇿
0Зірки
54Форки
1Релізи

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

01020304050605332017-072021-122026-05
Мажорні 0Мінорні 1Патчі 0

Кожна точка охоплює 9 днів.

OpenSSF Scorecard 2.5 / 10
2.5сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-27 08:55 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
0CI-Tests0 out of 19 merged PRs checked by a CI test -- score normalized to 0
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
3Code-ReviewFound 8/24 approved changesets -- score normalized to 3
10Contributorsproject has 8 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject is archived
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities72 existing vulnerabilities detected
Прямі залежності 6
РеєстрПакетОбмеження версіїМаніфест
Gogithub.com/apex/logv1.1.1go.mod
Gogithub.com/client9/codegenv0.0.0-20180316044450-92480ce66a06go.mod
Gogithub.com/goreleaser/goreleaserv0.123.1go.mod
Gogithub.com/pkg/errorsv0.8.1go.mod
Gogopkg.in/alecthomas/kingpin.v2v2.2.6go.mod
Gogopkg.in/yaml.v2v2.2.7go.mod
Усі залежності 6

Повний розв'язаний набір залежностей із графа залежностей GitHub: 6 прямих і 0 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Gogithub.com/apex/log1.1.1пряма
Gogithub.com/client9/codegen0.0.0-20180316044450-92480ce66a06пряма
Gogithub.com/goreleaser/goreleaser0.123.1пряма
Gogithub.com/pkg/errors0.8.1пряма
Gogopkg.in/alecthomas/kingpin.v22.2.6пряма
Gogopkg.in/yaml.v22.2.7пряма
Сповіщення про залежності 1

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 6 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 1 мають відомі сповіщення, з них 1 прямі.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
gopkg.in/yaml.v22.2.7прямапомірна22.2.8

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 431,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 23148,
        "HTML": 619,
        "Shell": 2083,
        "Makefile": 2232
      },
      "pushed_at": "2021-07-17T00:51:02Z",
      "created_at": "2017-05-10T00:05:40Z",
      "owner_type": "Organization",
      "updated_at": "2026-05-13T14:03:10Z",
      "description": "[DEPRECATED] Download Go binaries as fast and easily as possible.",
      "is_archived": true,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://goreleaser.com",
      "name": "GoReleaser",
      "type": "Organization",
      "login": "goreleaser",
      "company": null,
      "location": "Brazil",
      "followers": 304,
      "avatar_url": "https://avatars.githubusercontent.com/u/24697112?v=4",
      "created_at": "2016-12-21T11:52:53Z",
      "is_verified": null,
      "public_repos": 66,
      "account_age_days": 3504
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2019-10-05T18:01:20Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "632441f5a29bac9ac3088f139477b364ff525041",
          "body": "* feat: add github.com/pantheon-systems/autotag.yaml\r\n\r\n* fix: remove tree/github.com/tj/node-prune.yaml. project removed its goreleaser.yaml\r\n\r\n* fix: updates to pass golangci-lint v1.27.0 checks",
          "is_bot": false,
          "headline": "feat: add github.com/pantheon-systems/autotag.yaml (#176)",
          "author_name": "joe miller",
          "author_login": "joemiller",
          "committed_at": "2021-07-17T00:50:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd8ad8f7dd7893535c4406280973bff8aab28385",
          "body": null,
          "is_bot": false,
          "headline": "Delete stale.yml",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2020-04-26T15:22:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09b1c9cc978ce6b30d028fe1c8da8289435c799a",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "docs: readme",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-12-25T12:45:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb15719af9f0cc0d58616872a7670e6e02a1209c",
          "body": "closes #164\n\nSigned-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "fix: replace template function",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-12-25T12:44:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "152ab9c1641feba9f2867422267cbf42dc3e9043",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "feat: caarlos0/name-generator",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-12-12T19:31:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63473390074be48e2abcb5bf75d77892d679d289",
          "body": "Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 0.122.0 to 0.123.1.\r\n- [Release notes](https://github.com/goreleaser/goreleaser/releases)\r\n- [Changelog](https://github.com/goreleaser/goreleaser/blob/master/.goreleaser.yml)\r\n- [Commits](https://github.com/goreleaser/goreleaser/compare/v0.122.0...v0.123.1)\r\n\r\nSigned-off-by: dependabot-preview[bot] <support@dependabot.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/goreleaser/goreleaser (#162)",
          "author_name": "dependabot-preview[bot]",
          "author_login": "dependabot-preview[bot]",
          "committed_at": "2019-11-21T11:54:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac6efa90c62d27013789bf7f2e023ce381c4ef7c",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "fix: --rm-dist",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-11-20T01:23:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05f2a11bb71abe06150334e5c67fc030975dd7cb",
          "body": null,
          "is_bot": false,
          "headline": "Add gopinath-langote/1build.yaml (#148)",
          "author_name": "Gopinath Langote",
          "author_login": "gopinath-langote",
          "committed_at": "2019-11-20T01:19:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05c57fb4d34586378504db69b1653aa3e5aea8bc",
          "body": null,
          "is_bot": false,
          "headline": "add ryantking/rudder to godownloader (#126)",
          "author_name": "Ryan King",
          "author_login": "ryantking",
          "committed_at": "2019-11-20T01:19:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "caf312911898e90958d5746b84d875b10710496a",
          "body": null,
          "is_bot": false,
          "headline": "Add travis-wait-enhanced (#152)",
          "author_name": "CrazyMax",
          "author_login": "crazy-max",
          "committed_at": "2019-11-20T01:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c58bd4e3c401c9079aea7a40b9e550aa1c8b5790",
          "body": null,
          "is_bot": false,
          "headline": "add docwhat/chronic (#151)",
          "author_name": "Christian Höltje",
          "author_login": "docwhat",
          "committed_at": "2019-11-20T01:18:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be5493487eccce5434e1436b77f5df8d3ab928a8",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "fix: update (#160)",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-11-20T01:17:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d60df599a93e7b8294f8bb5b2c473526ee2cb6a6",
          "body": "Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 0.119.0 to 0.120.5.\r\n- [Release notes](https://github.com/goreleaser/goreleaser/releases)\r\n- [Changelog](https://github.com/goreleaser/goreleaser/blob/master/.goreleaser.yml)\r\n- [Commits](https://github.com/goreleaser/goreleaser/compare/v0.119.0...v0.120.5)\r\n\r\nSigned-off-by: dependabot-preview[bot] <support@dependabot.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/goreleaser/goreleaser (#153)",
          "author_name": "dependabot-preview[bot]",
          "author_login": "dependabot-preview[bot]",
          "committed_at": "2019-11-04T13:32:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad57a06271c442f319dc27f9f148cb125fcfb7b3",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "fix: tidy deps",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-10T00:59:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0dd5364a54af91724834e55c6d866451588ba90",
          "body": "Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 0.118.2 to 0.119.0.\r\n- [Release notes](https://github.com/goreleaser/goreleaser/releases)\r\n- [Changelog](https://github.com/goreleaser/goreleaser/blob/master/.goreleaser.yml)\r\n- [Commits](https://github.com/goreleaser/goreleaser/compare/v0.118.2...v0.119.0)\r\n\r\nSigned-off-by: dependabot-preview[bot] <support@dependabot.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/goreleaser/goreleaser (#147)",
          "author_name": "dependabot-preview[bot]",
          "author_login": "dependabot-preview[bot]",
          "committed_at": "2019-10-10T00:53:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24b35e8bd922e1e81cf8ad9bcb57cad21652d7f7",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "ci: lint config",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-10T00:52:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9666570a75fa31bef7cf678e8da711768308d2a0",
          "body": null,
          "is_bot": false,
          "headline": "clean: renovate.json",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-10T00:42:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ea6f46b5e377dc658ad5adc44d3472212721d47",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "ci: remove label workflow (#145)",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-05T16:06:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c3b514b8ad79a3be113a6c8f9f27723533ba601",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "ci: release godownloader (#144)",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-05T15:31:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2f2852f8bc73c39db0c43ac868e1b822aa8e054",
          "body": null,
          "is_bot": false,
          "headline": "fix: update stale config",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-05T12:33:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77f812abdb1b3193116dc1b75deb6dba58e35abc",
          "body": null,
          "is_bot": false,
          "headline": "ci: actions (#142)",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-04T20:14:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e812d7cbeadd9607d3116a57a6999c33a1cd7003",
          "body": "Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>",
          "is_bot": false,
          "headline": "fix: build (#143)",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-04T20:13:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23838340f2b9b832041ba334a0a5fa36aa5dc61e",
          "body": null,
          "is_bot": false,
          "headline": "ci: stale",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-04T18:32:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2082868a2712ef75252815e20736e63cc50f5ef0",
          "body": null,
          "is_bot": false,
          "headline": "ci: labeler",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-10-04T18:31:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63d561cede8f0de4d7cb036d368d6ab185434a80",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module yaml to v2.2.4 (#140)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2019-10-03T14:04:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d36f80bd890ca7c7b6d1414f945e8d96edf86612",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module goreleaser/goreleaser to v0.118.2 (#139)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2019-10-03T12:37:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f8823c646f91564f16d8759e99bfd0310baef61",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): add renovate.json (#137)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2019-10-03T12:27:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e64d0375716bf060e73ee7248cfd48c49a0b1173",
          "body": null,
          "is_bot": false,
          "headline": "Add `--no-same-owner` to prevent issues (#136)",
          "author_name": "Lawrence Gripper",
          "author_login": "lawrencegripper",
          "committed_at": "2019-10-02T11:28:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39b7a387eb0112b9a643650f6d23c2d992b58b32",
          "body": "* Use official GOPROXY (proxy.golang.org).\r\n\r\nDetects issues in which third party module proxies\r\nmay differ in checksum behavior for broken/invalid\r\npackages.\r\n\r\ne.g.\r\n\r\n$ go clean -modcache\r\n$ GOPROXY=gocenter.io go get code.gitea.io/gitea@v1.10.0-dev.0.20190711052757-a0820e09fbf7\r\n\r\nvs.\r\n\r\n$ go clean -modcache\r\n$ GOPROXY=proxy.golang.org go get code.gitea.io/gitea@v1.10.0-dev.0.20190711052757-a0820e09fbf7\r\n\r\n* Pin go-macaron/cors to fix invalid pseudo-version.\r\n\r\n* Build using Go 1.13.",
          "is_bot": false,
          "headline": "fix: GOPROXY and dependency issues (#135)",
          "author_name": "Trevor Pounds",
          "author_login": "tpounds",
          "committed_at": "2019-09-24T17:48:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96e3b3dd514b54ca8718841990dd453dcca23197",
          "body": "Fixes #133",
          "is_bot": false,
          "headline": "fix: tidy go.mod deps. (#134)",
          "author_name": "Trevor Pounds",
          "author_login": "tpounds",
          "committed_at": "2019-09-24T01:26:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93b2b793cd90e11b8f8b23d96719eeb63b8ecfee",
          "body": "* fix: invalid pseudo version.\r\n\r\n* revert 7d30e44.",
          "is_bot": false,
          "headline": "fix: invalid pseudo version. (#132)",
          "author_name": "Ludovic Fernandez",
          "author_login": "ldez",
          "committed_at": "2019-09-07T18:58:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d30e444238660022a7f709d65b121172ec0ac2f",
          "body": null,
          "is_bot": false,
          "headline": "issue #129: replace git.apache.org/thrift.git by its github (#131)",
          "author_name": "Kamil Samigullin",
          "author_login": "kamilsk",
          "committed_at": "2019-09-06T20:58:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28788d62d9261151c3f9d0a102e565d4f561b2e1",
          "body": "… to serve module versions and honor immutability and availablility requirement of a central repo (#130)",
          "is_bot": false,
          "headline": "Setting GOPROXY to gocenter.io to fix build issue. GoCenter continues…",
          "author_name": "ankush chadha",
          "author_login": null,
          "committed_at": "2019-09-06T18:13:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ef626c90bb6876d1f5daf205f7e3db8231de083",
          "body": null,
          "is_bot": false,
          "headline": "feat: improve Windows OS detection (#127)",
          "author_name": "Tom Payne",
          "author_login": "twpayne",
          "committed_at": "2019-08-03T19:33:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9d722b21993c19d2c0f4e0cadd8b40642801a81",
          "body": null,
          "is_bot": false,
          "headline": "add k8spin cli (#122)",
          "author_name": "paurosello",
          "author_login": "paurosello",
          "committed_at": "2019-06-23T22:26:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b789d45247bacafd8274a0c65010e0e1ba7a7c5f",
          "body": null,
          "is_bot": false,
          "headline": "fix: re-enable golangci-lint",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-06-13T11:56:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65ef6f98e03ce1e5e374bce1ccc8290ee3590cfb",
          "body": null,
          "is_bot": false,
          "headline": "fix: ignore golanci lint for now",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-06-13T11:41:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03ac45bd2c9eaed2a78a96280e80b02591ebb298",
          "body": "* fix: restore BINARY variable\r\n\r\n* fix: work around broken golangci-lint.sh",
          "is_bot": false,
          "headline": "fix: restore BINARY variable (#119)",
          "author_name": "Tom Payne",
          "author_login": "twpayne",
          "committed_at": "2019-06-13T11:40:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "368dc8c9bc77c8d6ec0860f4af567e928d0dbb28",
          "body": null,
          "is_bot": false,
          "headline": "bump: goreleaser",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-06-13T01:45:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66279a7c56c0a93c546f917dcdc2228708bc090b",
          "body": "* fix: ignores with multiple builds\r\n\r\n* fix: remove unused variable\r\n\r\n* fix: avoid repeated binary installation",
          "is_bot": false,
          "headline": "Fix issues with multiple builds (#114)",
          "author_name": "Tom Payne",
          "author_login": "twpayne",
          "committed_at": "2019-06-12T13:58:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9a1d47be7eb36e36af366400a1443c6bd31d939",
          "body": null,
          "is_bot": false,
          "headline": "bump: goreleaser",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-05-25T21:20:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40d2946c5da8fc6be364c84b43ea7ba594089146",
          "body": null,
          "is_bot": false,
          "headline": "add syntaqx/swarm-api (#116)",
          "author_name": "Chase Pierce",
          "author_login": "syntaqx",
          "committed_at": "2019-05-25T21:18:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ba89027256672834a63fffd3f44d7c96899683e",
          "body": null,
          "is_bot": false,
          "headline": "add github.com/wio/wio (#115)",
          "author_name": "Deep Dhillon",
          "author_login": null,
          "committed_at": "2019-05-25T21:18:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30f0d76aebda7cd035bde792911259a282f80d43",
          "body": "This reverts commit c5edc589fff7b0cacf818a46d6cdd2ac8b4dbaaf.",
          "is_bot": false,
          "headline": "Revert \"fix: ignore twpayne/chezmoi for now\" (#113)",
          "author_name": "Tom Payne",
          "author_login": "twpayne",
          "committed_at": "2019-05-02T19:03:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ce8d450d9965663772dbba9527da601ccdce056",
          "body": null,
          "is_bot": false,
          "headline": "bump: go from 1.11 to 1.12",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-04-30T19:10:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5edc589fff7b0cacf818a46d6cdd2ac8b4dbaaf",
          "body": "refs #111",
          "is_bot": false,
          "headline": "fix: ignore twpayne/chezmoi for now",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-04-30T19:07:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62b853948cd6ab0449915acd461338492468b682",
          "body": null,
          "is_bot": false,
          "headline": "feat: allow to ignore a repo",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-04-30T19:06:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "706ab2b5afe5865dec32bcbf5e4606af6581b454",
          "body": "https://github.com/reviewdog/reviewdog",
          "is_bot": false,
          "headline": "Add reviewdog (#107)",
          "author_name": "haya14busa",
          "author_login": "haya14busa",
          "committed_at": "2019-04-30T18:54:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf17a755bea4cc177b2890393abd1577093b0006",
          "body": null,
          "is_bot": false,
          "headline": "feat: add github.com/twpayne/chezmoi (#111)",
          "author_name": "Tom Payne",
          "author_login": "twpayne",
          "committed_at": "2019-04-30T18:54:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df84f0a1b6c9c393a8aa6672469f2862f5906b82",
          "body": null,
          "is_bot": false,
          "headline": "fix: format overrides and multiple archives",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-04-30T18:53:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73a576326055766247d720d33354cc930e2e0d9a",
          "body": null,
          "is_bot": false,
          "headline": "bump: goreleaser (#109)",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-04-30T18:50:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36ebe14b42123e0078a6a2f70fd897007ea897a7",
          "body": "…110)",
          "is_bot": false,
          "headline": "fix adjust_format shell function by checking with correct variable (#…",
          "author_name": "kamichidu",
          "author_login": "kamichidu",
          "committed_at": "2019-04-18T17:22:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ea719e1a2c55a133b92d1fa07f8e569f8e63434",
          "body": null,
          "is_bot": false,
          "headline": "Add https://github.com/fat0troll/yapusher (#106)",
          "author_name": "Vladimir Hodakov",
          "author_login": "fat0troll",
          "committed_at": "2019-03-31T17:11:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97fc446a436f061a6ed0d30599980a1feddcfcef",
          "body": "As of b515fe10e17beeffe25eaf76752bb541a6a30f78 (merged in\r\n351bbf3895e9ca0ef9f3126fc1f3b0425f76ca20, 2019-03-26)), the generated\r\ninstall script now remembers to clean up its temporary subdirectory\r\nwhen it exits.\r\n\r\nHowever, the `tmpdir` in `rm -rf \"${tmpdir}` is set by a function from\r\nshlib calle\n[…]\ntall script is run, then the install script will remove\r\n(or attempt to remove) the entire *shared* temporary directory.\r\n\r\nThe most obvious solution is to just use `mktemp -d` directly.  So do\r\nthat.",
          "is_bot": false,
          "headline": "fix: Ditch `mktmpdir` for `mktemp -d` (#105)",
          "author_name": "Luke Shumaker",
          "author_login": "LukeShu",
          "committed_at": "2019-03-28T17:29:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee0454d216af9228acc1fd5768fe72bacf8d8788",
          "body": null,
          "is_bot": false,
          "headline": "fix: lint",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-03-27T00:32:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1e4131809f8e95036fb7c0d1f5174b7fa8c15c2",
          "body": null,
          "is_bot": false,
          "headline": "bump: goreleaser",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-03-27T00:21:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "351bbf3895e9ca0ef9f3126fc1f3b0425f76ca20",
          "body": "Clean up tmpdir post-installation",
          "is_bot": false,
          "headline": "Merge pull request #85 from shulima/master",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-03-26T18:20:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "098c832586b4ac32dab0731294856307b61e5f25",
          "body": "Add haya14busa/xtag",
          "is_bot": false,
          "headline": "Merge pull request #103 from haya14busa/add-xtag",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-03-26T14:07:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92c5747ef6bcdcf9cd7b592773f74d91cef03a98",
          "body": null,
          "is_bot": false,
          "headline": "Add https://github.com/haya14busa/xtag",
          "author_name": "haya14busa",
          "author_login": "haya14busa",
          "committed_at": "2019-03-26T13:56:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7a89b20e9e54c92a9a96e2211699783f46581a0",
          "body": "Fix quote",
          "is_bot": false,
          "headline": "Merge pull request #102 from haya14busa/patch2",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-03-26T13:15:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e401dd84157522c27461b9b23dab786b046c389b",
          "body": null,
          "is_bot": false,
          "headline": "Fix quote",
          "author_name": "haya14busa",
          "author_login": "haya14busa",
          "committed_at": "2019-03-26T12:56:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c971a80c1830f6573617118065aa070c37de57b",
          "body": "Check directry exisistence to avoid unnecessary install -d",
          "is_bot": false,
          "headline": "Merge pull request #101 from haya14busa/patch1",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-03-26T12:51:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4052d621b6e1b9adfb196dde1d8b137d7a37f27a",
          "body": "Fixed #92",
          "is_bot": false,
          "headline": "Check directry exisistence to avoid unnecessary install -d",
          "author_name": "haya14busa",
          "author_login": "haya14busa",
          "committed_at": "2019-03-26T12:45:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41b1ce20a95001c0c820c37c4201ba4fb60b64df",
          "body": "Add ianwalter/gotime",
          "is_bot": false,
          "headline": "Merge pull request #100 from ianwalter/master",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-02-22T17:14:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f71493ec680d1036876055602c92a9adfe0a1bf9",
          "body": null,
          "is_bot": false,
          "headline": "fix: removed gotop",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-02-22T17:13:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b80dd9b057096a2e05958acb1ab762ad2e0a44d",
          "body": null,
          "is_bot": false,
          "headline": "fix: bump deps",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-02-22T17:13:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdf1636955b50a8421e8686cebc1da6698f64dfc",
          "body": null,
          "is_bot": false,
          "headline": "Create gotime.yaml",
          "author_name": "Ian Walter",
          "author_login": null,
          "committed_at": "2019-02-22T02:00:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de35133624ef66202c080151761711f93b850e96",
          "body": "Add markbates/refresh",
          "is_bot": false,
          "headline": "Merge pull request #99 from syntaqx/markbates/refresh",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-02-03T22:05:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8430c5fc24e0f1b5c6496c5c2430b5cb5bcf03b",
          "body": null,
          "is_bot": false,
          "headline": "add markbates/refresh",
          "author_name": "Chase Hutchins",
          "author_login": "syntaqx",
          "committed_at": "2019-02-03T21:25:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9286de539a6262cede0276a210eb30ff85fafe3f",
          "body": "Add -x option to all shell scripts, which enables set -x",
          "is_bot": false,
          "headline": "Merge pull request #89 from eklitzke/trace",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-01-15T10:59:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db2e2f20166ac98a77b47c2254fb16fbee2a187f",
          "body": null,
          "is_bot": false,
          "headline": "fix: goimports",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-01-15T10:53:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37bdd01f5eda86db7596071fb9e1d15317917f3b",
          "body": "Add syntaqx/serve",
          "is_bot": false,
          "headline": "Merge pull request #97 from syntaqx/master",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2019-01-15T10:52:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2030e26f1f5d145eba643f3b9e15ca4713c73336",
          "body": null,
          "is_bot": false,
          "headline": "add syntaqx/serve",
          "author_name": "Chase Hutchins",
          "author_login": "syntaqx",
          "committed_at": "2019-01-15T03:38:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebca9c9275c0ca8217ef88dbe9d5497b85f88c5d",
          "body": "added sharecmd to tree",
          "is_bot": false,
          "headline": "Merge pull request #94 from mschneider82/master",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-12-21T11:50:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5ef548b83156d0d9575eb92564f0fdea7210bcc",
          "body": null,
          "is_bot": false,
          "headline": "added sharecmd to tree",
          "author_name": "Matthias Schneider",
          "author_login": "mschneider82",
          "committed_at": "2018-12-21T10:28:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8583b686f80dc4d4d0bb4116eb7e62240a305f96",
          "body": null,
          "is_bot": false,
          "headline": "feat: added antibody",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-12-17T11:11:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d713bb8d4c385f002883ab695ece0de4da0f3a69",
          "body": "fix README example",
          "is_bot": false,
          "headline": "Merge pull request #93 from ryanking/patch-1",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-12-17T11:10:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c73970df8990c63fd17369f95a46fac8cd97ce6c",
          "body": "using go mod",
          "is_bot": false,
          "headline": "Merge pull request #91 from goreleaser/mod",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-12-17T11:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd602ee50cc1aa0af85c290eba368607b102d341",
          "body": "According to help it is `--repo=`  not `-repo `.",
          "is_bot": false,
          "headline": "fix README example",
          "author_name": "Ryan King",
          "author_login": null,
          "committed_at": "2018-11-21T16:43:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e652991eb5bfb644b22ccd1a54485a03e2d004eb",
          "body": null,
          "is_bot": false,
          "headline": "fix: travis.yml",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-11-11T11:09:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07f395113e677672d27ec63c48c4ee068818f66a",
          "body": null,
          "is_bot": false,
          "headline": "fix: lint",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-11-11T11:03:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "099df6559aa48a5b100f8c57c804740159469f55",
          "body": null,
          "is_bot": false,
          "headline": "fix: makefile",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-11-11T10:55:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5be76f3e7500ecdcfc9faca69a626be913d45dac",
          "body": null,
          "is_bot": false,
          "headline": "feat: using go mod",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-11-11T10:54:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb4200b5c9b12fd2a84ceeca4fccab6cc6e8d470",
          "body": null,
          "is_bot": false,
          "headline": "Add -x option to all shell scripts, which enables set -x",
          "author_name": "Evan Klitzke",
          "author_login": "eklitzke",
          "committed_at": "2018-11-01T18:43:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8956a012ea66300554b82a32167737b6b6eb145f",
          "body": "add go-importd",
          "is_bot": false,
          "headline": "Merge pull request #84 from docwhat/patch-1",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T14:53:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08d3797dd8b5d9945982f0f584b761f1e2b342f1",
          "body": "Create node-prune.yaml",
          "is_bot": false,
          "headline": "Merge pull request #87 from mverteuil/patch-1",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T14:53:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b90d248ba30307915288f08ab3f2fc2d9f6710c",
          "body": "Fixed build",
          "is_bot": false,
          "headline": "Merge pull request #88 from goreleaser/fix",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T14:53:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a633cbf90b9c5937095ededea4beee0f4d69a861",
          "body": null,
          "is_bot": false,
          "headline": "fix: goreleaser config",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T14:39:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10677ba3bfc637e1ba9d1c5ccb1b327b9fc9542c",
          "body": null,
          "is_bot": false,
          "headline": "fix: lint issues",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T14:35:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9309cfe33881da5b523f72d7aff7173c7d5fe6ed",
          "body": null,
          "is_bot": false,
          "headline": "fix: colored output on travis",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T14:31:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35175af431aa94999d11533d28c63567c79996e9",
          "body": null,
          "is_bot": false,
          "headline": "bump: deps",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-10-26T13:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48b3216d07d7db98917c1e1c13b0b238dddaf21c",
          "body": null,
          "is_bot": false,
          "headline": "Create node-prune.yaml",
          "author_name": "M. de Verteuil",
          "author_login": "mverteuil",
          "committed_at": "2018-10-26T13:38:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b515fe10e17beeffe25eaf76752bb541a6a30f78",
          "body": null,
          "is_bot": false,
          "headline": "Clean up tmpdir post-installation",
          "author_name": "Margaret Lewicka",
          "author_login": "shulima",
          "committed_at": "2018-10-22T20:16:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e1775a7113eeae1d785cb4c41215a0ba6657fbb",
          "body": null,
          "is_bot": false,
          "headline": "add go-importd",
          "author_name": "Christian Höltje",
          "author_login": "docwhat",
          "committed_at": "2018-10-02T05:07:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b416967f94a45c761239c189d39fedf09724574",
          "body": "Create lk2.yaml",
          "is_bot": false,
          "headline": "Merge pull request #77 from kaihendry/patch-1",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-06-05T12:03:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17791b98f90098dd1dcbfdffe5f4d71f9ffbb8a1",
          "body": "Following instructions from https://install.goreleaser.com/add-your-project/",
          "is_bot": false,
          "headline": "Create lk2.yaml",
          "author_name": "Kai Hendry",
          "author_login": "kaihendry",
          "committed_at": "2018-06-05T02:16:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "835cb872931be612cf1ccb490ed514f7e602062d",
          "body": "chore: using golangci-lint as linter",
          "is_bot": false,
          "headline": "Merge pull request #76 from goreleaser/golangci",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-06-03T19:39:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c53f03c6f28f9b40d731f91274cc3f59e20c11e3",
          "body": null,
          "is_bot": false,
          "headline": "chore: fix install cmds",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-06-03T15:54:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08d3ba17f788ff25b7ba94fc27af69dc78959297",
          "body": null,
          "is_bot": false,
          "headline": "chore: using golangci-lint as linter",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-06-03T15:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54bcf87363170a4f0be57cc70c7a7bf52bfc8141",
          "body": "add golangci-lint",
          "is_bot": false,
          "headline": "Merge pull request #74 from golangci/master",
          "author_name": "Carlos Alexandro Becker",
          "author_login": "caarlos0",
          "committed_at": "2018-05-29T11:56:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 0,
      "latest_release_at": "2019-10-05T18:01:20Z",
      "latest_release_tag": "v0.1.0",
      "releases_from_tags": false,
      "days_since_last_push": 1836,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 2486,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/goreleaser/godownloader",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/goreleaser/godownloader",
          "is_deprecated": false,
          "latest_version": "v0.1.0",
          "repository_url": "https://github.com/goreleaser/godownloader",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2019-10-05T16:06:19Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2486
        }
      ]
    },
    "popularity": {
      "forks": 54,
      "stars": 449,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2017-07-06",
            "count": 1
          },
          {
            "date": "2017-08-13",
            "count": 1
          },
          {
            "date": "2017-12-12",
            "count": 1
          },
          {
            "date": "2018-04-17",
            "count": 1
          },
          {
            "date": "2018-05-12",
            "count": 1
          },
          {
            "date": "2018-05-29",
            "count": 1
          },
          {
            "date": "2018-06-05",
            "count": 1
          },
          {
            "date": "2018-06-07",
            "count": 1
          },
          {
            "date": "2018-06-08",
            "count": 1
          },
          {
            "date": "2018-09-10",
            "count": 1
          },
          {
            "date": "2018-10-13",
            "count": 1
          },
          {
            "date": "2018-11-01",
            "count": 1
          },
          {
            "date": "2018-11-04",
            "count": 2
          },
          {
            "date": "2018-12-21",
            "count": 1
          },
          {
            "date": "2019-03-26",
            "count": 1
          },
          {
            "date": "2019-04-18",
            "count": 1
          },
          {
            "date": "2019-05-24",
            "count": 1
          },
          {
            "date": "2019-06-13",
            "count": 1
          },
          {
            "date": "2019-08-03",
            "count": 1
          },
          {
            "date": "2019-08-23",
            "count": 1
          },
          {
            "date": "2019-09-06",
            "count": 2
          },
          {
            "date": "2019-09-16",
            "count": 1
          },
          {
            "date": "2019-09-24",
            "count": 1
          },
          {
            "date": "2019-10-02",
            "count": 1
          },
          {
            "date": "2019-10-10",
            "count": 1
          },
          {
            "date": "2020-01-10",
            "count": 1
          },
          {
            "date": "2020-01-14",
            "count": 1
          },
          {
            "date": "2020-02-12",
            "count": 1
          },
          {
            "date": "2020-05-17",
            "count": 1
          },
          {
            "date": "2020-05-18",
            "count": 1
          },
          {
            "date": "2020-05-20",
            "count": 1
          },
          {
            "date": "2020-06-18",
            "count": 1
          },
          {
            "date": "2020-06-30",
            "count": 1
          },
          {
            "date": "2020-07-18",
            "count": 1
          },
          {
            "date": "2021-01-07",
            "count": 1
          },
          {
            "date": "2021-01-27",
            "count": 1
          },
          {
            "date": "2021-03-01",
            "count": 1
          },
          {
            "date": "2021-03-20",
            "count": 1
          },
          {
            "date": "2021-10-09",
            "count": 1
          },
          {
            "date": "2021-10-15",
            "count": 1
          },
          {
            "date": "2022-01-06",
            "count": 1
          },
          {
            "date": "2022-01-29",
            "count": 1
          },
          {
            "date": "2022-03-23",
            "count": 1
          },
          {
            "date": "2022-12-12",
            "count": 1
          },
          {
            "date": "2022-12-30",
            "count": 1
          },
          {
            "date": "2023-09-03",
            "count": 1
          },
          {
            "date": "2023-10-11",
            "count": 1
          },
          {
            "date": "2024-02-19",
            "count": 1
          },
          {
            "date": "2024-06-05",
            "count": 1
          },
          {
            "date": "2025-07-28",
            "count": 1
          },
          {
            "date": "2026-05-22",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 53,
        "total_forks": 54
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 9006,
      "source_files_sampled": 7,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "gopkg.in/yaml.v2",
            "direct": true,
            "version": "2.2.7",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-wxc4-f4m6-wwqv",
              "GO-2020-0036"
            ],
            "fixed_version": "2.2.8",
            "advisory_count": 2,
            "oldest_advisory_days": 1929
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 2,
        "affected_count": 1,
        "assessed_count": 6,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/apex/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/client9/codegen",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20180316044450-92480ce66a06"
        },
        {
          "name": "github.com/goreleaser/goreleaser",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.123.1"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.8.1"
        },
        {
          "name": "gopkg.in/alecthomas/kingpin.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.2.6"
        },
        {
          "name": "gopkg.in/yaml.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.2.7"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/apex/log",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/client9/codegen",
            "direct": true,
            "version": "0.0.0-20180316044450-92480ce66a06",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goreleaser/goreleaser",
            "direct": true,
            "version": "0.123.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": true,
            "version": "0.8.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/alecthomas/kingpin.v2",
            "direct": true,
            "version": "2.2.6",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": true,
            "version": "2.2.7",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 6,
        "direct_count": 6,
        "indirect_count": 0
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 68,
        "open_issues": 1,
        "closed_ratio": 0.989,
        "closed_issues": 94,
        "closed_unmerged_prs": 44
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "caarlos0",
          "commits": 122,
          "avatar_url": "https://avatars.githubusercontent.com/u/245435?v=4"
        },
        {
          "type": "User",
          "login": "client9",
          "commits": 18,
          "avatar_url": "https://avatars.githubusercontent.com/u/217179?v=4"
        },
        {
          "type": "User",
          "login": "twpayne",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/6942?v=4"
        },
        {
          "type": "User",
          "login": "haya14busa",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/3797062?v=4"
        },
        {
          "type": "User",
          "login": "syntaqx",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/6037730?v=4"
        },
        {
          "type": "User",
          "login": "docwhat",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/40799?v=4"
        },
        {
          "type": "User",
          "login": "tpounds",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/195041?v=4"
        },
        {
          "type": "User",
          "login": "vorandrew",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/290555?v=4"
        },
        {
          "type": "User",
          "login": "akupila",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/540683?v=4"
        },
        {
          "type": "User",
          "login": "crazy-max",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1951866?v=4"
        }
      ],
      "contributors_sampled": 29,
      "top_contributor_share": 0.685
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": false,
      "ci_workflows": [
        "go.yml",
        "goreleaser.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 19 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 8/24 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project is archived",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "72 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "632441f5a29bac9ac3088f139477b364ff525041",
        "ran_at": "2026-07-27T08:55:11Z",
        "aggregate_score": 2.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": "2021-07-17T00:50:29Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": [
        {
          "number": 207,
          "created_at": "2021-10-14T00:18:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/goreleaser/godownloader",
    "host": "github.com",
    "name": "godownloader",
    "owner": "goreleaser"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 40% multiplier to weighted overall health and gives it a ceiling of 29.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 29,
            "pct": 40
          }
        }
      ],
      "value": 18,
      "inputs": {
        "security": 34,
        "vitality": 17,
        "community": 61,
        "governance": 59,
        "engineering": 48,
        "abandonment_cap": 29,
        "abandonment_state": "declared",
        "abandonment_multiplier": 40,
        "weighted_overall_before_abandonment": 44,
        "overall_after_abandonment_multiplier": 18
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 17,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 0.94,
              "days_since_last_push": 1836,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1836 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1836
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project is archived",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.1.0",
              "releases_from_tags": false,
              "days_since_latest_release": 2486,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2486 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2486
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "at_risk",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "cap": 29,
              "state": "declared",
              "guards": [],
              "signals": [],
              "red_flag": true,
              "multiplier_pct": 40,
              "declared_reason": "archived",
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "the repository is archived on GitHub",
                "points": 40,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_archived",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 61,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "forks": 54,
              "stars": 449,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "449 stars",
                "points": 43,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 449
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "54 forks",
                "points": 14.4,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 54
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 59,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 29,
              "top_contributor_share": 0.685
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 68% of commits",
                "points": 7.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 68
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "29 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 29
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "merged_prs": 68,
              "open_issues": 1,
              "closed_issues": 94,
              "issue_closed_ratio": 0.989,
              "closed_unmerged_prs": 44
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "99% of issues closed",
                "points": 46.2,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "68/112 decided PRs merged",
                "points": 23.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 68,
                      "decided": 112
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 8/24 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "followers": 304,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "goreleaser",
              "public_repos": 66,
              "account_age_days": 3504
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "304 followers of goreleaser",
                "points": 17.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 304,
                      "login": "goreleaser"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "66 public repos, account ~9 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 66
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 9
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "moderate",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "packages": [
                "github.com/goreleaser/godownloader"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 2486
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 2486 days ago",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 2486
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "1 published versions",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 48,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 46,
            "inputs": {
              "has_ci": true,
              "has_tests": false,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 19 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 34,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 25,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 2.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 19 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 8/24 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project is archived",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "72 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 6 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 6
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 1,
              "assessed_packages": 6,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: gopkg.in/yaml.v2 2.2.7 (moderate 6.5)",
                "points": 16.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "gopkg.in/yaml.v2 2.2.7 (moderate 6.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 1929 days ago",
                "points": 34.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 1929
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 6,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 19
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 59,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.84,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "79 of 94 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 79,
                      "sampled": 94
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.06
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "6 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 9006,
              "source_files_sampled": 7,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/7 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 7,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T08:55:39.619988Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/goreleaser/godownloader.svg",
  "full_name": "goreleaser/godownloader",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаGo.