telekom / whereabouts

Повний розв'язаний набір залежностей із графа залежностей GitHub: 26 прямих і 62 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 88 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 1 мають відомі сповіщення, з них 0 прямі.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 48938,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1229686,
        "Shell": 28922,
        "Makefile": 8812,
        "Dockerfile": 1646,
        "Go Template": 2711
      },
      "pushed_at": "2026-07-27T07:16:20Z",
      "created_at": "2026-03-01T13:56:24Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-13T12:16:59Z",
      "description": "A CNI IPAM plugin that assigns IP addresses cluster-wide",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.telekom.com",
      "name": "Telekom Open Source Software",
      "type": "Organization",
      "login": "telekom",
      "company": null,
      "location": "Germany",
      "followers": 372,
      "avatar_url": "https://avatars.githubusercontent.com/u/27354058?v=4",
      "created_at": "2017-04-12T13:03:45Z",
      "is_verified": null,
      "public_repos": 247,
      "account_age_days": 3393
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.8",
          "kind": "patch",
          "published_at": "2026-07-17T16:22:44Z"
        },
        {
          "tag": "v0.0.8-rc.3",
          "kind": "prerelease",
          "published_at": "2026-07-07T13:49:54Z"
        },
        {
          "tag": "v0.0.8-rc.2",
          "kind": "prerelease",
          "published_at": "2026-07-06T19:52:52Z"
        },
        {
          "tag": "v0.0.8-rc.1",
          "kind": "prerelease",
          "published_at": "2026-06-26T20:52:37Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-06-23T22:38:24Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-06-23T17:33:11Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-03-09T21:25:35Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-03-09T20:55:06Z"
        },
        {
          "tag": "v0.0.2",
          "kind": "patch",
          "published_at": "2026-03-09T20:19:24Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2026-03-09T20:16:49Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "c53034607c7ddd2b6008324e389631217256a198",
          "body": "coveralls.io has been intermittently returning 504s, failing the Test\nworkflow on main even though all Go tests pass. The coverage report\nupload is not essential to correctness, so make it non-blocking.",
          "is_bot": false,
          "headline": "ci: don't fail the test job on coveralls upload errors (#325)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-13T12:16:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2053e493ded072eff7bbc431d18032ccbd0b50f4",
          "body": "* build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0\n\nBumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-acti\n[…]\n--\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Maximilian Rink <maximilian.rink@telekom.de>",
          "is_bot": true,
          "headline": "build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#320)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:18:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "760d19b973653d06073edf506b29d05709094e64",
          "body": "Bumps the other-go-modules group with 1 update: [github.com/gaissmai/extnetip](https://github.com/gaissmai/extnetip).\n\n\nUpdates `github.com/gaissmai/extnetip` from 1.3.1 to 1.3.2\n- [Release notes](https://github.com/gaissmai/extnetip/releases)\n- [Commits](https://github.com/gaissmai/extnetip/compare\n[…]\non-update:semver-patch\n  dependency-group: other-go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump github.com/gaissmai/extnetip (#322)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:05:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "452820d1d6b67aa0968fb759c2c5956332d2254c",
          "body": "…up (#321)\n\nBumps the k8s group with 1 update: [sigs.k8s.io/structured-merge-diff/v6](https://github.com/kubernetes-sigs/structured-merge-diff).\n\n\nUpdates `sigs.k8s.io/structured-merge-diff/v6` from 6.4.0 to 6.4.2\n- [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases)\n-\n[…]\ne-type: version-update:semver-patch\n  dependency-group: k8s\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump sigs.k8s.io/structured-merge-diff/v6 in the k8s gro…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:04:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a517d4952fee50cf910315baaff5b9d380bf0ca",
          "body": "Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.3 to 4.37.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-act\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump github/codeql-action/upload-sarif (#319)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:04:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "260703405bafd18f8c0b456f711a4683dd5bf969",
          "body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#318)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:04:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "90cd3b06032ff396a75a69bd8da3968f6cd0db90",
          "body": "Bumps [actions/stale](https://github.com/actions/stale) from 10.3.0 to 10.4.0.\n- [Release notes](https://github.com/actions/stale/releases)\n- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/stale from 10.3.0 to 10.4.0 (#317)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:04:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a2d7e40ea3c0602c1f291f0e6426b1d4b049dad5",
          "body": "Bumps golang from 1.26.4 to 1.26.5.\n\n---\nupdated-dependencies:\n- dependency-name: golang\n  dependency-version: 1.26.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump golang from 1.26.4 to 1.26.5 (#316)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:04:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9668a351de905c9d1d9080f64c9d73076851960",
          "body": "Bumps distroless/static from `963fa6c` to `d29e660`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n  dependency-version: nonroot\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump distroless/static from `963fa6c` to `d29e660` (#315)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:04:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74805ee43094c9bb47cad79c9faf927d9c6e2c2c",
          "body": "…#324)\n\ngovulncheck panics on Go 1.26 due to an upstream bug in\ngolang.org/x/tools@v0.46.0 (ForEachElement on *types.TypeParam),\nunrelated to any PR's changes. The image Trivy scan currently fails\non CVE-2026-39822 in the pinned golang:1.26.4 base image, fixed by #316.\nMark both non-blocking until upstream/base-image fixes land.",
          "is_bot": false,
          "headline": "ci: allow known-broken security checks to fail without blocking PRs (…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-13T09:58:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80d40afbc548b02e0cc3b7299710aac4a6a5b20a",
          "body": "Reviewed Dependabot update and test pin fix; checks green after rerun and approved.",
          "is_bot": true,
          "headline": "build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#297)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T13:03:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df0af38ad1183c36b3300486020d16d3d5c8d837",
          "body": "…36.3 (#300)\n\nReviewed Dependabot update; checks green and approved.",
          "is_bot": true,
          "headline": "build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T12:00:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a154eab5b89bb8c45a5dfdddc220103a0ec55642",
          "body": "Reviewed Dependabot update; checks green and approved.",
          "is_bot": true,
          "headline": "build(deps): bump the other-go-modules group with 2 updates (#299)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T12:00:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3da0acdc90afbc6924cbfecc71c66b20347a4065",
          "body": "…#298)\n\nReviewed Dependabot update; checks green and approved.",
          "is_bot": true,
          "headline": "build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T12:00:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb57fe12c0b3fe3c91f0ceaa605b7c84232c0a10",
          "body": "Reviewed Dependabot update; checks green and approved.",
          "is_bot": true,
          "headline": "build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 (#296)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T12:00:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3936ae6c0c132d7ccc494879a065d746f7e9fcb",
          "body": "Reviewed Dependabot update; checks green and approved.",
          "is_bot": true,
          "headline": "build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#295)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T12:00:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "301df9b20d9bab3472e78231c1bc520450804429",
          "body": null,
          "is_bot": false,
          "headline": "fix: clear recovered NodeSlicePool stalled condition",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:54:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e4f90f705cc611a79baa9fd2a709d9f77eeb355",
          "body": "* fix: debounce service CIDR overlap events\n\n* docs: note service CIDR overlap marker annotation",
          "is_bot": false,
          "headline": "fix: debounce service CIDR overlap events",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:50:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e0ff4b8b18ba3c5f8e1f54fa21b706b935eec194",
          "body": null,
          "is_bot": false,
          "headline": "test: assert Fast IPAM CHECK stays read-only",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:26:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9952821701d66a3e78365bf04d953cecfb2f92ea",
          "body": null,
          "is_bot": false,
          "headline": "fix: match network-status interface",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:25:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae09380f7a2ae5073afcf6161930907687c9cb7c",
          "body": null,
          "is_bot": false,
          "headline": "fix: validate static addresses against effective bounds",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:25:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b319321829dcc4cf5e39744d5191d2abe2de19e",
          "body": null,
          "is_bot": false,
          "headline": "fix: rollback only new multi-range allocations",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:25:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b76bdccf4deaa76b8ae238cd3aff48921eaf4e88",
          "body": null,
          "is_bot": false,
          "headline": "fix: preserve flat-file boolean precedence",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:25:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e8c388223064b418143976950bb3f61dd37cbae",
          "body": null,
          "is_bot": false,
          "headline": "docs: fix release chart guidance and CI guardrails",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:24:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f2c92088c23e21f6097e2ab6cbe8e1c4a3a31e9",
          "body": null,
          "is_bot": false,
          "headline": "fix: scope NodeSlice mismatch checks by namespace",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:24:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02734b4571b447638458587ad873c97d5716fbbf",
          "body": null,
          "is_bot": false,
          "headline": "perf: linearize NodeSlice assignment",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:24:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b36971e877d007a7790654dc257cf299e711199c",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh implementation proposals",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbb7c013a9260c200ac486dd77c04c0abfd20998",
          "body": null,
          "is_bot": false,
          "headline": "fix: validate IPPool allocation keys",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-07-06T08:23:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb968dfecef8b1c48fadc86074967783416d3f39",
          "body": null,
          "is_bot": false,
          "headline": "fix: repair default branch ci drift (#283)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T23:48:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76952a042acf47294082c48274ded2d82040abc1",
          "body": "Closes #245",
          "is_bot": false,
          "headline": "fix: resolve issue 245 (#282)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T15:50:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd59efa22c93d4fad00f440580464c9ce7f5d943",
          "body": null,
          "is_bot": false,
          "headline": "fix(api): support L3 capacity in IPPool status. Closes #246 (#281)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T15:12:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee654903d80346becd4974e730529c4835e0f6f0",
          "body": "…ons (#276)\n\nCloses #236",
          "is_bot": false,
          "headline": "perf(controller): remove O(N*M) linear scan for overlapping reservati…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T14:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8b4759297f6b09972d70996d790acd1955ac968",
          "body": "…(#275)\n\nCloses #249",
          "is_bot": false,
          "headline": "perf(storage): remove namespace-wide IPPools.List connectivity probe …",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T14:31:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfe3b4f2796a7a915858fd82223bd877cca68691",
          "body": "Closes #250",
          "is_bot": false,
          "headline": "fix(metrics): remove stale NodeSlicePool metrics on delete (#272)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T10:37:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c9179da9a586ccc8f0e8b9a8604b756769c59c2",
          "body": "The Store interface's GetIPPool signature became obsolete when\nthe real backend migrated to PoolIdentifier to support network_name\nand node slices. Since the concrete *KubernetesIPAM type is used\ndirectly at all call sites and no polymorphism is intended,\nthe dead abstraction is removed.\n\nCloses #254",
          "is_bot": false,
          "headline": "refactor(storage): remove stale Store interface (#270)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-30T10:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63a493a5db34c753c24c61ec556fdfcca3dc710c",
          "body": "* Fix test data and formatting\n\n* test: stabilize helm e2e operator targeting\n\n* fix: restore ippool stats reservation parsing",
          "is_bot": false,
          "headline": "Fix ippool tests and formatting (#268)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T15:06:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c961f80b128517eefee127c1357edd9d5db1a7b5",
          "body": null,
          "is_bot": false,
          "headline": "Fix test for #237 (#267)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T15:03:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23d67e776c02084e90a180d81de7afdaf8d91596",
          "body": null,
          "is_bot": false,
          "headline": "Closes #237: deduplicate ORIP counts by IP (#265)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T14:16:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19b24ca5a551fa911192ffb5928184dc9f6a91e0",
          "body": "* fix: use TypedFuncs[*corev1.Node] for node watch predicate\n\nPR #262 introduced predicate.Funcs which doesn't satisfy the typed\npredicate constraint required by source.Kind with TypedEnqueueRequests.\nSwitch to predicate.TypedFuncs[*corev1.Node] with the matching typed\nUpdateEvent.\n\n* fix: rename unused predicate parameter to satisfy revive\n\n* ci: retry flaky e2e-helm/core-lifecycle\n\n* ci: retry persistent e2e flakes (4th attempt)\n\n* test(e2e): find operator deployment by label",
          "is_bot": false,
          "headline": "fix: use TypedFuncs for node watch predicate (fixes #262 compile) (#263)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T14:09:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e7464231d3cdb095542b40a38d24b075e3850b0",
          "body": "Closes #238",
          "is_bot": false,
          "headline": "Fix node watch predicate to avoid reconcile storms (#262)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T12:23:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "270ef7e550fe59d0f831080c819598b097980943",
          "body": "Closes #243",
          "is_bot": false,
          "headline": "Fix Helm serviceAccount.create=false falling back to default (#261)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T12:18:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fc04674eb7d6358c9255964d875e08e4745bdf6",
          "body": "The legacy cni-install.yml downloaded and extracted CNI plugins without\nintegrity checks. Now verifies the upstream .sha256 checksum before\nextraction and pins the alpine image by digest.\n\nCloses #244",
          "is_bot": false,
          "headline": "security(hack): add SHA256 verification and pin installer image (#260)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T12:07:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d11a4fbbdfb5e89d663202bd5eaa8128ff72269",
          "body": "The field's doc comment claimed the reconciler uses it for overlap\ndetection, but the operator sources service CIDRs exclusively from its\n--service-cidr flag. Mark deprecated to prevent further confusion.\n\nCloses #248",
          "is_bot": false,
          "headline": "docs: mark ServiceCIDRs as deprecated (not consumed by operator) (#259)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T12:00:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c162cbe611901475cbe757625205899f3748585",
          "body": "The kustomize-installed matrix exercised node-loss and operator restart\nrecovery, but the Helm-installed matrix omitted both. Add them for\nparity.\n\nCloses #252",
          "is_bot": false,
          "headline": "ci: add node-loss and operator-restart suites to Helm e2e matrix (#258)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T11:53:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ddfa7e5936ed05a1120809d2843f2137b4e0c73",
          "body": "…257)\n\nThe sync workflow already notes workflow exclusions in the PR body, but\nthat can be missed. Now also opens a dedicated issue (label: ci) listing\nthe excluded files so drift is tracked explicitly.\n\nCloses #253",
          "is_bot": false,
          "headline": "ci: create tracking issue when upstream workflow drift is detected (#…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T11:46:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc40c86b990564019e20b34b9c143a90619a4a93",
          "body": "* chore(install-cni): remove dead reconciler_cron_expression config\n\nThe runtime no longer consumes this field; reconciliation is managed by\nthe operator's flags. Removes the env var, config struct field, and JSON\nemission from writeWhereaboutsConf.\n\nCloses #247\n\n* test: remove ReconcilerCron references from install-cni tests",
          "is_bot": false,
          "headline": "chore(install-cni): remove dead reconciler_cron_expression (#256)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T11:24:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "668f06e084092c0856bba37161464e1aa502c512",
          "body": "* test(e2e): fail loud on pod IP parse errors in pool consistency\n\nMissingIPs/StaleIPs swallowed SecondaryIfaceIPValue errors (returning []\nor continuing), so consistency assertions passed even when pod\ninspection failed; the err-check also sat after podIPs[len-1], risking a\npanic on empty results. \n[…]\nith no secondary iface but still panic\non genuine JSON parse failures, closing the false-green hole without\nbreaking valid mixed lists.\n\n* test(e2e): add sentinel skip to NodeSliceChecker.StaleIPs too",
          "is_bot": false,
          "headline": "test(e2e): fail loud on pod IP parse errors in pool consistency (#255)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-29T09:05:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a9896e32356423ee3b9f3bc3a004ae65624c97c9",
          "body": "…s/attest-build-provenance-4.1.1\n\nbuild(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1",
          "is_bot": false,
          "headline": "Merge pull request #241 from telekom/dependabot/github_actions/action…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T20:53:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52f8565c2827f632f60718725c06df8d74dfe0b0",
          "body": null,
          "is_bot": false,
          "headline": "test: update attest provenance action pin",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T20:30:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94c03d8ee273d05eb9ef3643a9e5bae8ea037edd",
          "body": "Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 4.1.0 to 4.1.1.\n- [Release notes](https://github.com/actions/attest-build-provenance/releases)\n- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)\n- [Commits](https://g\n[…]\nme: actions/attest-build-provenance\n  dependency-version: 4.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-28T20:30:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3c6454155ee662095a1a9622630c66556f4246b",
          "body": "…odules-951f3d746a\n\nbuild(deps): bump github.com/onsi/gomega from 1.42.0 to 1.42.1 in the other-go-modules group",
          "is_bot": false,
          "headline": "Merge pull request #240 from telekom/dependabot/go_modules/other-go-m…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T20:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "108130c55858a0475865035402978460ef416da1",
          "body": "…setup-helm-5.0.1\n\nbuild(deps): bump azure/setup-helm from 5.0.0 to 5.0.1",
          "is_bot": false,
          "headline": "Merge pull request #242 from telekom/dependabot/github_actions/azure/…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T20:14:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd4e6d54e161bbb606adf490b6b13246ce09164c",
          "body": "…s/setup-go-6.5.0\n\nbuild(deps): bump actions/setup-go from 6.4.0 to 6.5.0",
          "is_bot": false,
          "headline": "Merge pull request #239 from telekom/dependabot/github_actions/action…",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T20:14:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18abe1f2fbd0301bbc7ddde15e94f7b71b4a8436",
          "body": "Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 5.0.0 to 5.0.1.\n- [Release notes](https://github.com/azure/setup-helm/releases)\n- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/azure/setup-helm/compare/dda3372f752e03dde6b3237\n[…]\n- dependency-name: azure/setup-helm\n  dependency-version: 5.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump azure/setup-helm from 5.0.0 to 5.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-28T15:42:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "791ffbfc438effd15f43fd4d6ad5f05bb8b7b37d",
          "body": "Bumps the other-go-modules group with 1 update: [github.com/onsi/gomega](https://github.com/onsi/gomega).\n\n\nUpdates `github.com/onsi/gomega` from 1.42.0 to 1.42.1\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Comm\n[…]\ndependency-version: 1.42.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: other-go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump github.com/onsi/gomega in the other-go-modules group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-28T15:42:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba6432b1025b73334506392680d4c7ad0ccce230",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)\n\n---\nupdated\n[…]\n- dependency-name: actions/setup-go\n  dependency-version: 6.5.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/setup-go from 6.4.0 to 6.5.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-28T15:42:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd3f4240ee55cb179b0f7474f3647e98eea90f0c",
          "body": "* test: check node-slice cleanup pools\n\n* test: bound node-slice cleanup checks\n\n* test: check node-slice teardown pools",
          "is_bot": false,
          "headline": "test: check node-slice cleanup pools (#235)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T10:18:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab922b63c19041f4d0fae079bf5bef07d2d8b078",
          "body": null,
          "is_bot": false,
          "headline": "fix: check Fast IPAM node-slice pools (#234)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-28T10:18:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "288c16e0955879b407533255914ef9f476e310b8",
          "body": null,
          "is_bot": false,
          "headline": "fix(chart): render operator image pull secrets (#233)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-26T21:21:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd0c8adb96b614599f48d8c418827def22f8e554",
          "body": null,
          "is_bot": false,
          "headline": "ci: remove upstream-only workflow sync files (#232)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-26T13:59:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65b4879d43194c618dc9f216d0ce6061662e5f8b",
          "body": null,
          "is_bot": false,
          "headline": "ci: run docs support matrix guard (#227)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T20:12:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d925f18acd2e59d758a8793f2f19db6ad5cc890",
          "body": null,
          "is_bot": false,
          "headline": "fix: keep overlapping ipRanges allocations unique (#228)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T20:12:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92cbdc6042fb4201b21f69ff985ef340aae07ac9",
          "body": "* fix: guard overlapping reservation deletes by uid\n\n* test: satisfy staticcheck for orip race test\n\n* test: allow slower e2e pod startup",
          "is_bot": false,
          "headline": "fix: guard overlapping reservation deletes by uid (#230)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T20:12:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cde900a55e6573bd6b08ee0d8953e24d05376310",
          "body": null,
          "is_bot": false,
          "headline": "test: verify dual-stack cleanup releases ipv6 (#231)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T20:11:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a51cb3a8aa0831c79fc8c6821869bfce3a144d4",
          "body": "* test: run operator restart e2e in CI\n\n* test: wait for operator restart pod IPs\n\n* test: retry post-restart IP checks\n\n* test: wait longer for allocation release\n\n* test: stop restart replicas before cleanup",
          "is_bot": false,
          "headline": "test: run operator restart e2e in CI (#220)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T11:14:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62eeb54dbe36388aa9a6719774e00cfd1931796a",
          "body": "* fix: wait for release image before chart publish\n\n* fix: extend release image wait window\n\n* fix: sign and attest release chart (#225)",
          "is_bot": false,
          "headline": "fix: wait for release image before chart publish (#222)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T11:13:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bd4fd6348eab321aeaee75a264b11268fbf719c",
          "body": null,
          "is_bot": false,
          "headline": "fix: surface malformed nodeslice NAD configs (#215)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:50:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66167891c045984eae53ede92b54f4f1fe891e3d",
          "body": null,
          "is_bot": false,
          "headline": "fix: guard rollback against reallocated IPs (#216)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:50:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94fccdade80a36a048f01dd5e1ebb1be578d9675",
          "body": null,
          "is_bot": false,
          "headline": "fix: release allocations for NodeLost pods (#217)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:50:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26d06e1e1c6ae51ae4e7572698666e96e18ad127",
          "body": null,
          "is_bot": false,
          "headline": "fix: wire custom Helm CNI paths into installer (#218)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:50:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d03403a85212ff0ff90de3f8734ac6b54b48ca26",
          "body": "* fix: rebuild missing nodeslice status\n\n* fix: preserve truncated nodeslice status\n\n* fix: simplify nodeslice status rebuild",
          "is_bot": false,
          "headline": "fix: rebuild missing nodeslice status (#219)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:50:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50dbab7f8049e5a68cb4655d1095757ab00f04bd",
          "body": null,
          "is_bot": false,
          "headline": "fix: stop advertising unsupported CNI 1.1 commands (#221)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:49:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d34b7ff7baec0690475376cbebe13b40f693252",
          "body": "* test: retry statefulset e2e scale conflicts\n\n* test: satisfy lint for statefulset conflict test",
          "is_bot": false,
          "headline": "test: retry StatefulSet scale conflicts in e2e (#223)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:49:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1755fb4f54d2ea5828775abd897c4c1b7227a6db",
          "body": null,
          "is_bot": false,
          "headline": "test: run Helm IPv6 dual-stack e2e (#224)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:48:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdc843b2fb042069f28ea046d822d469fe04f327",
          "body": null,
          "is_bot": false,
          "headline": "test: cover kind worker node loss (#226)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-25T10:48:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5901084851efb3052c71ee86ff621ba0785ddae",
          "body": null,
          "is_bot": false,
          "headline": "fix: publish install-cni release binary (#209)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:48:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e55894638182ac1b350a50127dab6070e5567eea",
          "body": null,
          "is_bot": false,
          "headline": "fix: guard legacy orip deletes by pod uid (#192)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:29:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48abefdba6238b65b44ffe4843147b7c74af9be6",
          "body": null,
          "is_bot": false,
          "headline": "test: relax e2e statefulset waits (#214)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:28:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "868531fe45a4fbceb34c0998b709563793f77452",
          "body": null,
          "is_bot": false,
          "headline": "test: extend e2e pod delete timeout (#213)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:28:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e8f79f340b4f80a7c40ea53bec8ef5a503ab9c5",
          "body": null,
          "is_bot": false,
          "headline": "fix: reject fast ipam ipRanges configs (#212)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90053f257cb10205cfc6de78f1a30aeb6d1747ce",
          "body": null,
          "is_bot": false,
          "headline": "docs: align support matrix with tested scope (#211)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:28:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "811f62a7e36e4af4eafce788e5dd1b017dd60816",
          "body": null,
          "is_bot": false,
          "headline": "fix: persist e2e diagnostics artifacts (#210)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:28:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "763d9c2121ef76321d9e31db4e4cbfd004123656",
          "body": null,
          "is_bot": false,
          "headline": "fix: avoid stale fast ipam slice reuse (#208)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:27:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2989b3edf21997aed9b8b6b43b8cf58b1df7128",
          "body": null,
          "is_bot": false,
          "headline": "fix: render custom install namespaces (#207)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:27:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6378234d170b63d6ee14a540f001b2eaa81f643",
          "body": null,
          "is_bot": false,
          "headline": "fix: publish release assets on tag push (#205)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:26:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8351569b553f5e8377f19d28f97e1a97132a167d",
          "body": null,
          "is_bot": false,
          "headline": "fix: pin e2e tool downloads (#204)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:26:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd1c958e3c8c6db55753f3334496fc905e81924a",
          "body": null,
          "is_bot": false,
          "headline": "fix: pin e2e workload image (#203)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:26:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68112308179e6374c3d98a554c2a589cd46f50d2",
          "body": null,
          "is_bot": false,
          "headline": "fix: pin e2e Multus manifest (#202)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39099d18c4e67ffe10fbfb8b92d005cf35a51cf4",
          "body": null,
          "is_bot": false,
          "headline": "fix: add map semantics to CRD conditions (#201)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:25:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be4b3854559cda4dbf3691c857afe94b520e39b5",
          "body": null,
          "is_bot": false,
          "headline": "fix: enforce Helm Kubernetes version floor (#200)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:25:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1a8c7fcd1cc12cac3b4f045ecc3c8c6fc55735c",
          "body": null,
          "is_bot": false,
          "headline": "fix: fail fast when e2e CNI plugin install fails (#199)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:25:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f08507a1c3fe1b811e6503565295fdf3a543910",
          "body": null,
          "is_bot": false,
          "headline": "fix: align Helm chart default image tag (#198)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:25:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd03457ea92e0918e36bbde7467a5670099605e7",
          "body": null,
          "is_bot": false,
          "headline": "fix: preserve CRDs during undeploy (#197)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:24:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ed6962ede67b22038243d8dae3d4a669965aefe",
          "body": null,
          "is_bot": false,
          "headline": "fix: pass version metadata to release images (#196)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:24:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6f80d1b05ae101b080406537a8eceedf2ebb570",
          "body": null,
          "is_bot": false,
          "headline": "fix: keep dynamic gateways on the matching IP family (#195)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:24:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "816704aa194b4153f0f996d236f521cfe04091c1",
          "body": null,
          "is_bot": false,
          "headline": "fix: validate CNI CHECK result shape (#194)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:24:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2df19cf740ec89d907045296827b79f809b6399",
          "body": null,
          "is_bot": false,
          "headline": "fix: bind existing helm service accounts (#193)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:23:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eafd9f8308ec59a1e66832c07e9969930b4ca432",
          "body": null,
          "is_bot": false,
          "headline": "fix: reset overlap skip state between retries (#191)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:22:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4474d5904d2c392b7a325c21c8616db3f9916c50",
          "body": null,
          "is_bot": false,
          "headline": "fix: retry overlapping reservation cleanup on deallocate (#190)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T23:21:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5afcfb9bd8e05d3aa21fb04f932ba9130ed150e0",
          "body": null,
          "is_bot": false,
          "headline": "fix: expose service CIDR chart wiring (#189)",
          "author_name": "Maximilian Rink",
          "author_login": "MaxRink",
          "committed_at": "2026-06-24T01:13:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 10,
      "commits_last_year": 390,
      "latest_release_at": "2026-07-17T16:22:44Z",
      "latest_release_tag": "v0.0.8",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 33,
      "days_since_latest_release": 9,
      "mean_days_between_releases": 14.4
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/telekom/whereabouts",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/telekom/whereabouts",
          "is_deprecated": false,
          "latest_version": "v0.0.8",
          "repository_url": "https://github.com/telekom/whereabouts",
          "versions_count": 11,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-13T12:16:11Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 14
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 38
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "vendor/github.com/Masterminds/semver/v3/Makefile",
        "vendor/github.com/emicklei/go-restful/v3/Makefile",
        "vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml",
        "vendor/github.com/munnerz/goautoneg/Makefile",
        "vendor/github.com/onsi/ginkgo/v2/Makefile",
        "vendor/github.com/pkg/errors/Makefile",
        "vendor/github.com/prometheus/procfs/Makefile",
        "vendor/github.com/spf13/cobra/Makefile",
        "vendor/go.uber.org/atomic/Makefile",
        "vendor/go.uber.org/multierr/Makefile",
        "vendor/go.uber.org/zap/Makefile",
        "vendor/k8s.io/gengo/v2/Makefile",
        "vendor/sigs.k8s.io/controller-runtime/Makefile",
        "vendor/sigs.k8s.io/json/Makefile"
      ],
      "api_schema_files": [
        "vendor/github.com/google/gnostic-models/extensions/extension.proto",
        "vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto",
        "vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto",
        "vendor/github.com/google/gnostic-models/openapiv3/annotations.proto",
        "vendor/k8s.io/api/admission/v1/generated.proto",
        "vendor/k8s.io/api/admission/v1beta1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
        "vendor/k8s.io/api/apidiscovery/v2/generated.proto",
        "vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto",
        "vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
        "vendor/k8s.io/api/apps/v1/generated.proto",
        "vendor/k8s.io/api/apps/v1beta1/generated.proto",
        "vendor/k8s.io/api/apps/v1beta2/generated.proto",
        "vendor/k8s.io/api/authentication/v1/generated.proto",
        "vendor/k8s.io/api/authentication/v1alpha1/generated.proto",
        "vendor/k8s.io/api/authentication/v1beta1/generated.proto",
        "vendor/k8s.io/api/authorization/v1/generated.proto",
        "vendor/k8s.io/api/authorization/v1beta1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v2/generated.proto",
        "vendor/k8s.io/api/batch/v1/generated.proto",
        "vendor/k8s.io/api/batch/v1beta1/generated.proto",
        "vendor/k8s.io/api/certificates/v1/generated.proto",
        "vendor/k8s.io/api/certificates/v1alpha1/generated.proto",
        "vendor/k8s.io/api/certificates/v1beta1/generated.proto",
        "vendor/k8s.io/api/coordination/v1/generated.proto",
        "vendor/k8s.io/api/coordination/v1alpha2/generated.proto",
        "vendor/k8s.io/api/coordination/v1beta1/generated.proto",
        "vendor/k8s.io/api/core/v1/generated.proto",
        "vendor/k8s.io/api/discovery/v1/generated.proto",
        "vendor/k8s.io/api/discovery/v1beta1/generated.proto",
        "vendor/k8s.io/api/events/v1/generated.proto",
        "vendor/k8s.io/api/events/v1beta1/generated.proto",
        "vendor/k8s.io/api/extensions/v1beta1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto",
        "vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto",
        "vendor/k8s.io/api/networking/v1/generated.proto",
        "vendor/k8s.io/api/networking/v1beta1/generated.proto",
        "vendor/k8s.io/api/node/v1/generated.proto",
        "vendor/k8s.io/api/node/v1alpha1/generated.proto",
        "vendor/k8s.io/api/node/v1beta1/generated.proto",
        "vendor/k8s.io/api/policy/v1/generated.proto",
        "vendor/k8s.io/api/policy/v1beta1/generated.proto",
        "vendor/k8s.io/api/rbac/v1/generated.proto",
        "vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
        "vendor/k8s.io/api/rbac/v1beta1/generated.proto",
        "vendor/k8s.io/api/resource/v1/generated.proto",
        "vendor/k8s.io/api/resource/v1alpha3/generated.proto",
        "vendor/k8s.io/api/resource/v1beta1/generated.proto",
        "vendor/k8s.io/api/resource/v1beta2/generated.proto",
        "vendor/k8s.io/api/scheduling/v1/generated.proto",
        "vendor/k8s.io/api/scheduling/v1alpha2/generated.proto",
        "vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
        "vendor/k8s.io/api/storage/v1/generated.proto",
        "vendor/k8s.io/api/storage/v1alpha1/generated.proto",
        "vendor/k8s.io/api/storage/v1beta1/generated.proto",
        "vendor/k8s.io/api/storagemigration/v1beta1/generated.proto",
        "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 160376,
      "source_files_sampled": 117,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        ".github/copilot-instructions.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 11568
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 12
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 88,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/blang/semver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.5.1+incompatible"
        },
        {
          "name": "github.com/containernetworking/cni",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/containernetworking/plugins",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.1"
        },
        {
          "name": "github.com/k8snetworkplumbingwg/network-attachment-definition-client",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.7"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.1"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "gomodules.xyz/jsonpatch/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.5.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/code-generator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/kube-openapi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260623045532-0b43c5e46c6b"
        },
        {
          "name": "github.com/gaissmai/extnetip",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.2"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.32.0"
        },
        {
          "name": "github.com/open-policy-agent/cert-controller",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.16.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        },
        {
          "name": "sigs.k8s.io/structured-merge-diff/v6",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v6.4.2"
        },
        {
          "name": "dario.cat/mergo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.2"
        },
        {
          "name": "github.com/fluxcd/pkg/apis/meta",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.31.0"
        },
        {
          "name": "github.com/fluxcd/pkg/runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.111.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        },
        {
          "name": "github.com/prometheus/client_model",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.0"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.1"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260617174310-a95e086a2553"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "dario.cat/mergo",
            "direct": true,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver",
            "direct": true,
            "version": "v3.5.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containernetworking/cni",
            "direct": true,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containernetworking/plugins",
            "direct": true,
            "version": "v1.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fluxcd/pkg/apis/meta",
            "direct": true,
            "version": "v1.31.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fluxcd/pkg/runtime",
            "direct": true,
            "version": "v0.111.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": true,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gaissmai/extnetip",
            "direct": true,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/k8snetworkplumbingwg/network-attachment-definition-client",
            "direct": true,
            "version": "v1.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/open-policy-agent/cert-controller",
            "direct": true,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": true,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": true,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/code-generator",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": true,
            "version": "v0.0.0-20260623045532-0b43c5e46c6b",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20260617174310-a95e086a2553",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.24.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": true,
            "version": "v6.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.7.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.22.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/cmdutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/conv",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/fileutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/loading",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/mangling",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/netutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/stringutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/typeutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/yamlutils",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20260402051712-545e8a4df936",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vishvananda/netns",
            "direct": false,
            "version": "v0.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/atomic",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/gengo/v2",
            "direct": false,
            "version": "v2.0.0-20250922181213-ec3ebc5fd46b",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 88,
        "direct_count": 26,
        "indirect_count": 62
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 10,
        "merged_prs": 244,
        "open_issues": 28,
        "closed_ratio": 0.349,
        "closed_issues": 15,
        "closed_unmerged_prs": 52
      },
      "bus_factor": 2,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "MaxRink",
          "commits": 271,
          "avatar_url": "https://avatars.githubusercontent.com/u/4894735?v=4"
        },
        {
          "type": "User",
          "login": "dougbtv",
          "commits": 220,
          "avatar_url": "https://avatars.githubusercontent.com/u/5472189?v=4"
        },
        {
          "type": "User",
          "login": "maiqueb",
          "commits": 130,
          "avatar_url": "https://avatars.githubusercontent.com/u/39051226?v=4"
        },
        {
          "type": "User",
          "login": "thomasferrandiz",
          "commits": 54,
          "avatar_url": "https://avatars.githubusercontent.com/u/99727775?v=4"
        },
        {
          "type": "User",
          "login": "crandles",
          "commits": 23,
          "avatar_url": "https://avatars.githubusercontent.com/u/190343?v=4"
        },
        {
          "type": "User",
          "login": "nicklesimba",
          "commits": 19,
          "avatar_url": "https://avatars.githubusercontent.com/u/6550370?v=4"
        },
        {
          "type": "User",
          "login": "andreaskaris",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/3291433?v=4"
        },
        {
          "type": "User",
          "login": "bpickard22",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/81641263?v=4"
        },
        {
          "type": "User",
          "login": "ivelichkovich",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/12717569?v=4"
        },
        {
          "type": "User",
          "login": "toelke",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/183276?v=4"
        }
      ],
      "contributors_sampled": 45,
      "top_contributor_share": 0.316
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "binaries-upload-release.yml",
        "build.yml",
        "chart-push-release.yml",
        "docs.yml",
        "fuzz-smoke.yml",
        "image-build.yml",
        "image-push-main.yml",
        "image-push-release.yml",
        "security-scan.yml",
        "stale.yml",
        "test.yml",
        "upstream-sync.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yaml",
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/16 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 23 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "c53034607c7ddd2b6008324e389631217256a198",
        "ran_at": "2026-07-27T14:42:16Z",
        "aggregate_score": 7.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T07:16:26Z",
      "oldest_open_prs": [
        {
          "number": 286,
          "created_at": "2026-07-02T10:52:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 332,
          "created_at": "2026-07-19T15:42:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 333,
          "created_at": "2026-07-19T15:42:26Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 334,
          "created_at": "2026-07-19T15:42:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 335,
          "created_at": "2026-07-19T15:42:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 344,
          "created_at": "2026-07-26T15:42:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 345,
          "created_at": "2026-07-26T15:42:38Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 347,
          "created_at": "2026-07-26T15:42:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 346,
          "created_at": "2026-07-26T15:42:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 348,
          "created_at": "2026-07-26T15:43:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-13T12:16:11Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": [
        {
          "number": 269,
          "created_at": "2026-06-30T07:26:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 284,
          "created_at": "2026-07-01T07:39:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 285,
          "created_at": "2026-07-02T07:15:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 287,
          "created_at": "2026-07-03T07:12:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 288,
          "created_at": "2026-07-04T07:06:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 292,
          "created_at": "2026-07-05T07:12:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 308,
          "created_at": "2026-07-06T07:41:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 309,
          "created_at": "2026-07-07T07:18:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 310,
          "created_at": "2026-07-08T06:56:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 311,
          "created_at": "2026-07-09T07:21:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 312,
          "created_at": "2026-07-10T07:17:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 313,
          "created_at": "2026-07-11T06:50:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 314,
          "created_at": "2026-07-12T06:58:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 323,
          "created_at": "2026-07-13T07:15:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 326,
          "created_at": "2026-07-14T06:50:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 327,
          "created_at": "2026-07-15T06:51:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 328,
          "created_at": "2026-07-16T06:55:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 329,
          "created_at": "2026-07-17T06:53:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 330,
          "created_at": "2026-07-18T06:44:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 331,
          "created_at": "2026-07-19T06:56:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/telekom/whereabouts",
    "host": "github.com",
    "name": "whereabouts",
    "owner": "telekom"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 65,
      "inputs": {
        "security": 80,
        "vitality": 88,
        "community": 12,
        "governance": 70,
        "engineering": 68
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 88,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "commits_last_year": 390,
              "human_commit_share": 0.82,
              "days_since_last_push": 0,
              "active_weeks_last_year": 33
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "33/52 weeks with commits",
                "points": 22.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 33
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "390 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 390
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 10,
              "latest_release_tag": "v0.0.8",
              "releases_from_tags": false,
              "days_since_latest_release": 9,
              "mean_days_between_releases": 14.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "10 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 9 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~14.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 14.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 70,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 45,
              "top_contributor_share": 0.316
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 32% of commits",
                "points": 15.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 32
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "45 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 45
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 23 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 48,
            "inputs": {
              "merged_prs": 244,
              "open_issues": 28,
              "closed_issues": 15,
              "issue_closed_ratio": 0.349,
              "closed_unmerged_prs": 52
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "35% of issues closed",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 35
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "244/296 decided PRs merged",
                "points": 31.5,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 244,
                      "decided": 296
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/16 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "followers": 372,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "telekom",
              "public_repos": 247,
              "account_age_days": 3393
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "372 followers of telekom",
                "points": 18.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 372,
                      "login": "telekom"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "247 public repos, account ~9 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 247
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 9
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/telekom/whereabouts"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 14
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 14 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 14
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "11 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 68,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "12 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml, .golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml, .golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 80,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/16 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 23 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 88 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 88
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 88,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 88,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 11
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 88,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".github/copilot-instructions.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 11568
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "82 of 82 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 82,
                      "sampled": 82
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "vendor/github.com/Masterminds/semver/v3/Makefile",
                "vendor/github.com/emicklei/go-restful/v3/Makefile",
                "vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml",
                "vendor/github.com/munnerz/goautoneg/Makefile",
                "vendor/github.com/onsi/ginkgo/v2/Makefile",
                "vendor/github.com/pkg/errors/Makefile",
                "vendor/github.com/prometheus/procfs/Makefile",
                "vendor/github.com/spf13/cobra/Makefile",
                "vendor/go.uber.org/atomic/Makefile",
                "vendor/go.uber.org/multierr/Makefile",
                "vendor/go.uber.org/zap/Makefile",
                "vendor/k8s.io/gengo/v2/Makefile",
                "vendor/sigs.k8s.io/controller-runtime/Makefile",
                "vendor/sigs.k8s.io/json/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.18
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, vendor/github.com/Masterminds/semver/v3/Makefile, vendor/github.com/emicklei/go-restful/v3/Makefile, vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml, vendor/github.com/munnerz/goautoneg/Makefile, vendor/github.com/onsi/ginkgo/v2/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.uber.org/atomic/Makefile, vendor/go.uber.org/multierr/Makefile, vendor/go.uber.org/zap/Makefile, vendor/k8s.io/gengo/v2/Makefile, vendor/sigs.k8s.io/controller-runtime/Makefile, vendor/sigs.k8s.io/json/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, vendor/github.com/Masterminds/semver/v3/Makefile, vendor/github.com/emicklei/go-restful/v3/Makefile, vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml, vendor/github.com/munnerz/goautoneg/Makefile, vendor/github.com/onsi/ginkgo/v2/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.uber.org/atomic/Makefile, vendor/go.uber.org/multierr/Makefile, vendor/go.uber.org/zap/Makefile, vendor/k8s.io/gengo/v2/Makefile, vendor/sigs.k8s.io/controller-runtime/Makefile, vendor/sigs.k8s.io/json/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml, .golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml, .golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "18 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 18,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 160376,
              "source_files_sampled": 117,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/117 source files over 60KB",
                "points": 53.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 117,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "vendor/github.com/google/gnostic-models/extensions/extension.proto",
                "vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto",
                "vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto",
                "vendor/github.com/google/gnostic-models/openapiv3/annotations.proto",
                "vendor/k8s.io/api/admission/v1/generated.proto",
                "vendor/k8s.io/api/admission/v1beta1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
                "vendor/k8s.io/api/apidiscovery/v2/generated.proto",
                "vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto",
                "vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
                "vendor/k8s.io/api/apps/v1/generated.proto",
                "vendor/k8s.io/api/apps/v1beta1/generated.proto",
                "vendor/k8s.io/api/apps/v1beta2/generated.proto",
                "vendor/k8s.io/api/authentication/v1/generated.proto",
                "vendor/k8s.io/api/authentication/v1alpha1/generated.proto",
                "vendor/k8s.io/api/authentication/v1beta1/generated.proto",
                "vendor/k8s.io/api/authorization/v1/generated.proto",
                "vendor/k8s.io/api/authorization/v1beta1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v2/generated.proto",
                "vendor/k8s.io/api/batch/v1/generated.proto",
                "vendor/k8s.io/api/batch/v1beta1/generated.proto",
                "vendor/k8s.io/api/certificates/v1/generated.proto",
                "vendor/k8s.io/api/certificates/v1alpha1/generated.proto",
                "vendor/k8s.io/api/certificates/v1beta1/generated.proto",
                "vendor/k8s.io/api/coordination/v1/generated.proto",
                "vendor/k8s.io/api/coordination/v1alpha2/generated.proto",
                "vendor/k8s.io/api/coordination/v1beta1/generated.proto",
                "vendor/k8s.io/api/core/v1/generated.proto",
                "vendor/k8s.io/api/discovery/v1/generated.proto",
                "vendor/k8s.io/api/discovery/v1beta1/generated.proto",
                "vendor/k8s.io/api/events/v1/generated.proto",
                "vendor/k8s.io/api/events/v1beta1/generated.proto",
                "vendor/k8s.io/api/extensions/v1beta1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto",
                "vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto",
                "vendor/k8s.io/api/networking/v1/generated.proto",
                "vendor/k8s.io/api/networking/v1beta1/generated.proto",
                "vendor/k8s.io/api/node/v1/generated.proto",
                "vendor/k8s.io/api/node/v1alpha1/generated.proto",
                "vendor/k8s.io/api/node/v1beta1/generated.proto",
                "vendor/k8s.io/api/policy/v1/generated.proto",
                "vendor/k8s.io/api/policy/v1beta1/generated.proto",
                "vendor/k8s.io/api/rbac/v1/generated.proto",
                "vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
                "vendor/k8s.io/api/rbac/v1beta1/generated.proto",
                "vendor/k8s.io/api/resource/v1/generated.proto",
                "vendor/k8s.io/api/resource/v1alpha3/generated.proto",
                "vendor/k8s.io/api/resource/v1beta1/generated.proto",
                "vendor/k8s.io/api/resource/v1beta2/generated.proto",
                "vendor/k8s.io/api/scheduling/v1/generated.proto",
                "vendor/k8s.io/api/scheduling/v1alpha2/generated.proto",
                "vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
                "vendor/k8s.io/api/storage/v1/generated.proto",
                "vendor/k8s.io/api/storage/v1alpha1/generated.proto",
                "vendor/k8s.io/api/storage/v1beta1/generated.proto",
                "vendor/k8s.io/api/storagemigration/v1beta1/generated.proto",
                "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "vendor/github.com/google/gnostic-models/extensions/extension.proto, vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto, vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto, vendor/github.com/google/gnostic-models/openapiv3/annotations.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apidiscovery/v2/generated.proto, vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1alpha1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1alpha1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1alpha2/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1/generated.proto, vendor/k8s.io/api/resource/v1alpha3/generated.proto, vendor/k8s.io/api/resource/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1beta2/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha2/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/api/storagemigration/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "vendor/github.com/google/gnostic-models/extensions/extension.proto, vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto, vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto, vendor/github.com/google/gnostic-models/openapiv3/annotations.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apidiscovery/v2/generated.proto, vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1alpha1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1alpha1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1alpha2/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1/generated.proto, vendor/k8s.io/api/resource/v1alpha3/generated.proto, vendor/k8s.io/api/resource/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1beta2/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha2/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/api/storagemigration/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T14:42:53.103962Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/telekom/whereabouts.svg",
  "full_name": "telekom/whereabouts",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}