公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-24 19:36 UTC
LumeWeb / portal
The Web3 Hosting Platform
LumeWeb/portal 的健康指数为 100 分中的 62 分，处于「中等」区间。 其得分最高的类别是Vitality（94/100），最低的是Community & Adoption（29/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
62
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
62
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | go.lumeweb.com/portal | v0.5.1 | - | 15 | 7 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
94
开发活跃度
96优秀
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 31.8/36 | 提交节奏 — 52 周中有 46 周有提交 |
| 18/18 | 提交量 — 最近一年 835 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 835 |
| human_commit_share | 0.6 |
| days_since_last_push | 0 |
| active_weeks_last_year | 46 |
发布纪律
92优秀
评分方式
| 27/27 | 有发布版本 — 已发布 10 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 59 天前 |
| 19.8/27 | 发布节奏 — 约每 78.5 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 10 |
| latest_release_tag | v0.5.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 59 |
| mean_days_between_releases | 78.5 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
29
流行度与采用
10危急
评分方式
| 9.8/60 | 星标 — 5 个星标 |
| 0/25 | 复刻 — 1 个复刻 |
| 0/15 | 关注者 — 1 位关注者 |
所用输入
| forks | 1 |
| stars | 5 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
55
维护者韧性（巴士系数）
18危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 2.7/13.5 | 贡献者广度 — 2 位贡献者 |
| 6/10 | OpenSSF Scorecard：Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.999 |
议题与 PR 响应能力
58中等
评分方式
| 11.7/46.8 | 议题解决 — 25% 的议题已关闭 |
| 33.9/38.3 | PR 接受 — 已裁定的 PR 中 1,499/1,693 已合并 |
| 12/15 | OpenSSF Scorecard：Code-Review — Found 4/5 approved changesets -- score normalized to 8 |
所用输入
| merged_prs | 1,499 |
| open_issues | 3 |
| closed_issues | 1 |
| issue_closed_ratio | 0.25 |
| closed_unmerged_prs | 194 |
所有权与托管责任
62中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 10.3/25 | 所有者影响力 — LumeWeb 有 26 位关注者 |
| 22/25 | 既往记录 — 317 个公开仓库，账户约 4 年 |
所用输入
| followers | 26 |
| owner_type | Organization |
| is_verified | — |
| owner_login | LumeWeb |
| public_repos | 317 |
| account_age_days | 1,642 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 7 天前 |
| 20/20 | 版本历史 — 15 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | go.lumeweb.com/portal |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 7 |
工程质量
基础的工程与文档实践是否到位？
61
工程实践
68中等
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
66
安全态势
60中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 2.5/2.5 | CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 6/7.5 | Code-Review — Found 4/5 approved changesets -- score normalized to 8 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6/7.5 | Vulnerabilities — 2 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 6 |
已排除计分（无数据或不适用）：branch_protection, packaging, signed_releases。 其余权重已重新归一化。
依赖安全公告
89优秀
评分方式
| 26.6/35 | 直接依赖不含已知公告 — 1 个受影响：golang.org/x/crypto v0.54.0 (unknown) |
| 0/25 | 间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分 |
| 40/40 | 没有长期未处理的公告 — 没有公告公开超过 90 天 |
所用输入
| source | osv |
| advisories | 8 |
| affected_packages | 5 |
| assessed_packages | 342 |
| unassessed_packages | 0 |
| affected_by_severity | critical 1, high 3, unknown 1 |
| direct_affected_packages | 1 |
已排除计分（无数据或不适用）：间接依赖不含已知公告。 其余权重已重新归一化。 已将 342 个已解析依赖与 OSV 比对。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
78
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — AGENTS.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 60 次人类提交中有 60 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 15,112 |
评分方式
| 12.6/18 | 一条命令的引导启动 — go.mod（工具链约定，无任务运行器） |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 40 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum, pnpm-lock.yaml |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.4 |
面向模型的代码可读性
99优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 54.4/55 | 可控的文件大小 — 采样的 377 个源文件中有 4 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 81,000 |
| source_files_sampled | 377 |
| oversized_source_files | 4 |
关键数据
5GitHub 星标
2贡献者
835最近 12 个月提交数
0距最近推送天数
10发布版本数
1巴士系数（bus factor）
3开放议题
Go软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
更多细节
OpenSSF Scorecard 6.0 / 10
6.0综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 25 out of 25 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 8 | Code-Review | Found 4/5 approved changesets -- score normalized to 8 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 8 | Vulnerabilities | 2 existing vulnerabilities detected |
直接依赖 83
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/AfterShip/email-verifier | v1.4.1 | go.mod |
| Go | github.com/DATA-DOG/go-sqlmock | v1.5.2 | go.mod |
| Go | github.com/Oudwins/zog | v0.22.2 | go.mod |
| Go | github.com/adjust/rmq/v5 | v5.2.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2 | v1.43.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/config | v1.32.31 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.19.30 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/s3 | v1.106.0 | go.mod |
| Go | github.com/aws/smithy-go | v1.27.4 | go.mod |
| Go | github.com/casbin/casbin/v3 | v3.10.0 | go.mod |
| Go | github.com/casbin/gorm-adapter/v3 | v3.41.0 | go.mod |
| Go | github.com/docker/go-units | v0.5.0 | go.mod |
| Go | github.com/eventials/go-tus | v0.0.0-20250612203642-7827b129cd4c | go.mod |
| Go | github.com/fatih/structs | v1.1.0 | go.mod |
| Go | github.com/gabriel-vasile/mimetype | v1.4.15 | go.mod |
| Go | github.com/gammazero/workerpool | v1.2.1 | go.mod |
| Go | github.com/go-co-op/gocron/mocks/v2 | v2.0.0-20260717182408-cc444c2a6f2c | go.mod |
| Go | github.com/go-co-op/gocron/v2 | v2.22.0 | go.mod |
| Go | github.com/go-gorm/caches/v4 | v4.0.5 | go.mod |
| Go | github.com/go-kiss/monkey | v0.0.0-20240508030602-d03795257a64 | go.mod |
| Go | github.com/go-sql-driver/mysql | v1.10.0 | go.mod |
| Go | github.com/go-viper/mapstructure/v2 | v2.5.0 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/invopop/jsonschema | v0.14.0 | go.mod |
| Go | github.com/ipfs/go-cid | v0.6.2 | go.mod |
| Go | github.com/johannesboyne/gofakes3 | v1.2.0 | go.mod |
| Go | github.com/kenshaw/snaker | v0.4.3 | go.mod |
| Go | github.com/knadh/koanf/parsers/json | v1.0.0 | go.mod |
| Go | github.com/knadh/koanf/providers/confmap | v1.0.0 | go.mod |
| Go | github.com/knadh/koanf/providers/rawbytes | v1.0.0 | go.mod |
| Go | github.com/knadh/koanf/providers/structs | v1.0.0 | go.mod |
| Go | github.com/knadh/koanf/v2 | v2.3.5 | go.mod |
| Go | github.com/labstack/echo-contrib | v0.17.4 | go.mod |
| Go | github.com/labstack/echo/v4 | v4.15.4 | go.mod |
| Go | github.com/looplab/fsm | v1.0.3 | go.mod |
| Go | github.com/mattn/go-sqlite3 | v1.14.48 | go.mod |
| Go | github.com/miekg/dns | v1.1.72 | go.mod |
| Go | github.com/multiformats/go-multibase | v0.3.0 | go.mod |
| Go | github.com/multiformats/go-multihash | v0.2.3 | go.mod |
| Go | github.com/pquerna/otp | v1.5.0 | go.mod |
| Go | github.com/pressly/goose/v3 | v3.27.3 | go.mod |
| Go | github.com/pterm/pterm | v0.12.83 | go.mod |
| Go | github.com/redis/go-redis/v9 | v9.21.0 | go.mod |
| Go | github.com/samber/lo | v1.53.0 | go.mod |
| Go | github.com/spf13/afero | v1.15.0 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/tus/tusd/v2 | v2.10.0 | go.mod |
| Go | github.com/urfave/cli/v3 | v3.10.1 | go.mod |
| Go | github.com/wneessen/go-mail | v0.8.1 | go.mod |
| Go | go.lumeweb.com/configmanager | v0.3.29 | go.mod |
| Go | go.lumeweb.com/event/v2 | v2.1.0 | go.mod |
| Go | go.lumeweb.com/httputil | v0.5.6 | go.mod |
| Go | go.lumeweb.com/portal-middleware | v0.3.7 | go.mod |
| Go | go.lumeweb.com/portal-router | v0.7.6 | go.mod |
| Go | go.opentelemetry.io/contrib/bridges/otelzap | v0.19.0 | go.mod |
| Go | go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho | v0.69.0 | go.mod |
| Go | go.opentelemetry.io/otel | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc | v0.20.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/log | v0.20.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk/log | v0.20.0 | go.mod |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | go.mod |
| Go | go.sia.tech/core | v0.21.7 | go.mod |
| Go | go.sia.tech/coreutils | v0.23.5 | go.mod |
| Go | go.sia.tech/indexd | v0.4.0 | go.mod |
| Go | go.sia.tech/siastorage | v0.1.1-0.20260714120443-c13c06751808 | go.mod |
| Go | go.uber.org/mock | v0.6.0 | go.mod |
| Go | go.uber.org/zap | v1.28.0 | go.mod |
| Go | go.uber.org/zap/exp | v0.3.0 | go.mod |
| Go | golang.org/x/crypto | v0.54.0 | go.mod |
| Go | golang.org/x/exp | v0.0.0-20260718201538-764159d718ef | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | gorm.io/datatypes | v1.2.7 | go.mod |
| Go | gorm.io/driver/mysql | v1.6.0 | go.mod |
| Go | gorm.io/driver/sqlite | v1.6.0 | go.mod |
| Go | gorm.io/gorm | v1.31.2 | go.mod |
| Go | gorm.io/plugin/opentelemetry | v0.1.16 | go.mod |
| Go | github.com/golang-jwt/jwt/v5 | v5.3.1 | go.mod |
| Go | github.com/knadh/koanf/maps | v0.1.2 | go.mod |
| Go | github.com/prometheus/client_golang | v1.24.1 | go.mod |
| Go | github.com/prometheus/client_model | v0.6.2 | go.mod |
| Go | go.lumeweb.com/queryutil | v0.3.17 | go.mod |
全部依赖 342
来自 GitHub 依赖图的完整解析依赖集合：83 个直接依赖与 259 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| Go | github.com/adjust/rmq/v5 | v5.2.0 | 直接 |
| Go | github.com/aftership/email-verifier | v1.4.1 | 直接 |
| Go | github.com/aws/aws-sdk-go-v2 | v1.43.0 | 直接 |
| Go | github.com/aws/aws-sdk-go-v2/config | v1.32.31 | 直接 |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.19.30 | 直接 |
| Go | github.com/aws/aws-sdk-go-v2/service/s3 | v1.106.0 | 直接 |
| Go | github.com/aws/smithy-go | v1.27.4 | 直接 |
| Go | github.com/casbin/casbin/v3 | v3.10.0 | 直接 |
| Go | github.com/casbin/gorm-adapter/v3 | v3.41.0 | 直接 |
| Go | github.com/data-dog/go-sqlmock | v1.5.2 | 直接 |
| Go | github.com/docker/go-units | v0.5.0 | 直接 |
| Go | github.com/eventials/go-tus | v0.0.0-20250612203642-7827b129cd4c | 直接 |
| Go | github.com/fatih/structs | v1.1.0 | 直接 |
| Go | github.com/gabriel-vasile/mimetype | v1.4.15 | 直接 |
| Go | github.com/gammazero/workerpool | v1.2.1 | 直接 |
| Go | github.com/go-co-op/gocron/mocks/v2 | v2.0.0-20260717182408-cc444c2a6f2c | 直接 |
| Go | github.com/go-co-op/gocron/v2 | v2.22.0 | 直接 |
| Go | github.com/go-gorm/caches/v4 | v4.0.5 | 直接 |
| Go | github.com/go-kiss/monkey | v0.0.0-20240508030602-d03795257a64 | 直接 |
| Go | github.com/go-sql-driver/mysql | v1.10.0 | 直接 |
| Go | github.com/go-viper/mapstructure/v2 | v2.5.0 | 直接 |
| Go | github.com/golang-jwt/jwt/v5 | v5.3.1 | 直接 |
| Go | github.com/google/uuid | v1.6.0 | 直接 |
| Go | github.com/invopop/jsonschema | v0.14.0 | 直接 |
| Go | github.com/ipfs/go-cid | v0.6.2 | 直接 |
| Go | github.com/johannesboyne/gofakes3 | v1.2.0 | 直接 |
| Go | github.com/kenshaw/snaker | v0.4.3 | 直接 |
| Go | github.com/knadh/koanf/maps | v0.1.2 | 直接 |
| Go | github.com/knadh/koanf/parsers/json | v1.0.0 | 直接 |
| Go | github.com/knadh/koanf/providers/confmap | v1.0.0 | 直接 |
| Go | github.com/knadh/koanf/providers/rawbytes | v1.0.0 | 直接 |
| Go | github.com/knadh/koanf/providers/structs | v1.0.0 | 直接 |
| Go | github.com/knadh/koanf/v2 | v2.3.5 | 直接 |
| Go | github.com/labstack/echo-contrib | v0.17.4 | 直接 |
| Go | github.com/labstack/echo/v4 | v4.15.4 | 直接 |
| Go | github.com/looplab/fsm | v1.0.3 | 直接 |
| Go | github.com/mattn/go-sqlite3 | v1.14.48 | 直接 |
| Go | github.com/miekg/dns | v1.1.72 | 直接 |
| Go | github.com/multiformats/go-multibase | v0.3.0 | 直接 |
| Go | github.com/multiformats/go-multihash | v0.2.3 | 直接 |
| Go | github.com/oudwins/zog | v0.22.2 | 直接 |
| Go | github.com/pquerna/otp | v1.5.0 | 直接 |
| Go | github.com/pressly/goose/v3 | v3.27.3 | 直接 |
| Go | github.com/prometheus/client_golang | v1.24.1 | 直接 |
| Go | github.com/prometheus/client_model | v0.6.2 | 直接 |
| Go | github.com/pterm/pterm | v0.12.83 | 直接 |
| Go | github.com/redis/go-redis/v9 | v9.21.0 | 直接 |
| Go | github.com/samber/lo | v1.53.0 | 直接 |
| Go | github.com/spf13/afero | v1.15.0 | 直接 |
| Go | github.com/stretchr/testify | v1.11.1 | 直接 |
| Go | github.com/tus/tusd/v2 | v2.10.0 | 直接 |
| Go | github.com/urfave/cli/v3 | v3.10.1 | 直接 |
| Go | github.com/wneessen/go-mail | v0.8.1 | 直接 |
| Go | go.lumeweb.com/configmanager | v0.3.29 | 直接 |
| Go | go.lumeweb.com/event/v2 | v2.1.0 | 直接 |
| Go | go.lumeweb.com/httputil | v0.5.6 | 直接 |
| Go | go.lumeweb.com/portal-middleware | v0.3.7 | 直接 |
| Go | go.lumeweb.com/portal-router | v0.7.6 | 直接 |
| Go | go.lumeweb.com/queryutil | v0.3.17 | 直接 |
| Go | go.opentelemetry.io/contrib/bridges/otelzap | v0.19.0 | 直接 |
| Go | go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho | v0.69.0 | 直接 |
| Go | go.opentelemetry.io/otel | v1.44.0 | 直接 |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc | v0.20.0 | 直接 |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | 直接 |
| Go | go.opentelemetry.io/otel/log | v0.20.0 | 直接 |
| Go | go.opentelemetry.io/otel/sdk | v1.44.0 | 直接 |
| Go | go.opentelemetry.io/otel/sdk/log | v0.20.0 | 直接 |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | 直接 |
| Go | go.sia.tech/core | v0.21.7 | 直接 |
| Go | go.sia.tech/coreutils | v0.23.5 | 直接 |
| Go | go.sia.tech/indexd | v0.4.0 | 直接 |
| Go | go.sia.tech/siastorage | v0.1.1-0.20260714120443-c13c06751808 | 直接 |
| Go | go.uber.org/mock | v0.6.0 | 直接 |
| Go | go.uber.org/zap | v1.28.0 | 直接 |
| Go | go.uber.org/zap/exp | v0.3.0 | 直接 |
| Go | golang.org/x/crypto | v0.54.0 | 直接 |
| Go | golang.org/x/exp | v0.0.0-20260718201538-764159d718ef | 直接 |
| Go | gopkg.in/yaml.v3 | v3.0.1 | 直接 |
| Go | gorm.io/datatypes | v1.2.7 | 直接 |
| Go | gorm.io/driver/mysql | v1.6.0 | 直接 |
| Go | gorm.io/driver/sqlite | v1.6.0 | 直接 |
| Go | gorm.io/gorm | v1.31.2 | 直接 |
| Go | gorm.io/plugin/opentelemetry | v0.1.16 | 直接 |
| Go | atomicgo.dev/cursor | v0.2.0 | 间接 |
| Go | atomicgo.dev/keyboard | v0.2.9 | 间接 |
| Go | atomicgo.dev/schedule | v0.1.0 | 间接 |
| Go | filippo.io/edwards25519 | v1.2.0 | 间接 |
| Go | github.com/alicebob/miniredis/v2 | v2.37.0 | 间接 |
| Go | github.com/andybalholm/brotli | v1.2.2 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.7.14 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.31 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.31 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.31 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/internal/v4a | v1.4.32 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.13 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/checksum | v1.9.24 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.31 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/s3shared | v1.19.32 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/signin | v1.5.0 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/sso | v1.33.0 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.38.0 | 间接 |
| Go | github.com/aws/aws-sdk-go-v2/service/sts | v1.45.0 | 间接 |
| Go | github.com/bahlo/generic-list-go | v0.2.0 | 间接 |
| Go | github.com/beorn7/perks | v1.0.1 | 间接 |
| Go | github.com/bmatcuk/doublestar/v4 | v4.9.1 | 间接 |
| Go | github.com/boombuler/barcode | v1.1.0 | 间接 |
| Go | github.com/buger/jsonparser | v1.1.2 | 间接 |
| Go | github.com/casbin/govaluate | v1.10.0 | 间接 |
| Go | github.com/cenkalti/backoff/v5 | v5.0.3 | 间接 |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | 间接 |
| Go | github.com/clickhouse/ch-go | v0.73.0 | 间接 |
| Go | github.com/clickhouse/clickhouse-go/v2 | v2.47.0 | 间接 |
| Go | github.com/clipperhouse/uax29/v2 | v2.7.0 | 间接 |
| Go | github.com/containerd/console | v1.0.5 | 间接 |
| Go | github.com/coreos/go-semver | v0.3.1 | 间接 |
| Go | github.com/coreos/go-systemd/v22 | v22.7.0 | 间接 |
| Go | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | 间接 |
| Go | github.com/dunglas/httpsfv | v1.1.0 | 间接 |
| Go | github.com/dustin/go-humanize | v1.0.1 | 间接 |
| Go | github.com/fsnotify/fsnotify | v1.9.0 | 间接 |
| Go | github.com/gammazero/deque | v1.2.1 | 间接 |
| Go | github.com/getkin/kin-openapi | v0.134.0 | 间接 |
| Go | github.com/ghodss/yaml | v1.0.0 | 间接 |
| Go | github.com/glebarez/go-sqlite | v1.22.0 | 间接 |
| Go | github.com/glebarez/sqlite | v1.11.0 | 间接 |
| Go | github.com/go-faster/city | v1.0.1 | 间接 |
| Go | github.com/go-faster/errors | v0.7.1 | 间接 |
| Go | github.com/go-logr/logr | v1.4.4 | 间接 |
| Go | github.com/go-logr/stdr | v1.2.2 | 间接 |
| Go | github.com/go-openapi/jsonpointer | v0.22.5 | 间接 |
| Go | github.com/go-openapi/swag/jsonname | v0.25.5 | 间接 |
| Go | github.com/golang-sql/civil | v0.0.0-20220223132316-b832511892a9 | 间接 |
| Go | github.com/golang-sql/sqlexp | v0.1.0 | 间接 |
| Go | github.com/golang/protobuf | v1.5.4 | 间接 |
| Go | github.com/gookit/color | v1.6.0 | 间接 |
| Go | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.29.0 | 间接 |
| Go | github.com/hashicorp/go-version | v1.9.0 | 间接 |
| Go | github.com/hbollon/go-edlib | v1.7.0 | 间接 |
| Go | github.com/huandu/go-tls | v1.0.1 | 间接 |
| Go | github.com/jackc/pgpassfile | v1.0.0 | 间接 |
| Go | github.com/jackc/pgservicefile | v0.0.0-20240606120523-5a60cdf6a761 | 间接 |
| Go | github.com/jackc/pgx/v5 | v5.10.0 | 间接 |
| Go | github.com/jackc/puddle/v2 | v2.2.2 | 间接 |
| Go | github.com/jinzhu/inflection | v1.0.0 | 间接 |
| Go | github.com/jinzhu/now | v1.1.5 | 间接 |
| Go | github.com/jonboulle/clockwork | v0.5.0 | 间接 |
| Go | github.com/josharian/intern | v1.0.0 | 间接 |
| Go | github.com/julienschmidt/httprouter | v1.3.0 | 间接 |
| Go | github.com/klauspost/compress | v1.19.1 | 间接 |
| Go | github.com/klauspost/cpuid/v2 | v2.3.0 | 间接 |
| Go | github.com/klauspost/reedsolomon | v1.14.1 | 间接 |
| Go | github.com/knadh/koanf/parsers/yaml | v1.1.0 | 间接 |
| Go | github.com/knadh/koanf/providers/file | v1.2.1 | 间接 |
| Go | github.com/labstack/gommon | v0.5.0 | 间接 |
| Go | github.com/lithammer/fuzzysearch | v1.1.8 | 间接 |
| Go | github.com/mailru/easyjson | v0.9.1 | 间接 |
| Go | github.com/mattn/go-colorable | v0.1.15 | 间接 |
| Go | github.com/mattn/go-isatty | v0.0.23 | 间接 |
| Go | github.com/mattn/go-runewidth | v0.0.20 | 间接 |
| Go | github.com/mfridman/interpolate | v0.0.2 | 间接 |
| Go | github.com/microsoft/go-mssqldb | v1.10.0 | 间接 |
| Go | github.com/minio/sha256-simd | v1.0.1 | 间接 |
| Go | github.com/mitchellh/copystructure | v1.2.0 | 间接 |
| Go | github.com/mitchellh/reflectwalk | v1.0.2 | 间接 |
| Go | github.com/mohae/deepcopy | v0.0.0-20170929034955-c48cc78d4826 | 间接 |
| Go | github.com/mr-tron/base58 | v1.3.0 | 间接 |
| Go | github.com/multiformats/go-base32 | v0.1.0 | 间接 |
| Go | github.com/multiformats/go-base36 | v0.2.0 | 间接 |
| Go | github.com/multiformats/go-varint | v0.1.0 | 间接 |
| Go | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | 间接 |
| Go | github.com/ncruces/go-strftime | v1.0.0 | 间接 |
| Go | github.com/oasdiff/yaml | v0.0.0-20260313112342-a3ea61cb4d4c | 间接 |
| Go | github.com/oasdiff/yaml3 | v0.0.0-20260224194419-61cd415a242b | 间接 |
| Go | github.com/oschwald/geoip2-golang | v1.13.0 | 间接 |
| Go | github.com/oschwald/maxminddb-golang | v1.13.1 | 间接 |
| Go | github.com/paulmach/orb | v0.13.0 | 间接 |
| Go | github.com/pb33f/ordered-map/v2 | v2.3.1 | 间接 |
| Go | github.com/perimeterx/marshmallow | v1.1.5 | 间接 |
| Go | github.com/pierrec/lz4/v4 | v4.1.27 | 间接 |
| Go | github.com/pkg/errors | v0.9.1 | 间接 |
| Go | github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | 间接 |
| Go | github.com/prometheus/common | v0.70.1 | 间接 |
| Go | github.com/prometheus/procfs | v0.21.1 | 间接 |
| Go | github.com/quic-go/qpack | v0.6.0 | 间接 |
| Go | github.com/quic-go/quic-go | v0.60.0 | 间接 |
| Go | github.com/quic-go/webtransport-go | v0.11.1 | 间接 |
| Go | github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | 间接 |
| Go | github.com/robfig/cron/v3 | v3.0.1 | 间接 |
| Go | github.com/rs/cors | v1.11.1 | 间接 |
| Go | github.com/ryszard/goskiplist | v0.0.0-20150312221310-2dfbae5fcf46 | 间接 |
| Go | github.com/segmentio/asm | v1.2.1 | 间接 |
| Go | github.com/sethvargo/go-retry | v0.4.0 | 间接 |
| Go | github.com/shopspring/decimal | v1.4.0 | 间接 |
| Go | github.com/spaolacci/murmur3 | v1.1.0 | 间接 |
| Go | github.com/spf13/cast | v1.10.0 | 间接 |
| Go | github.com/stretchr/objx | v0.5.3 | 间接 |
| Go | github.com/valyala/bytebufferpool | v1.0.0 | 间接 |
| Go | github.com/valyala/fasttemplate | v1.2.2 | 间接 |
| Go | github.com/woodsbury/decimal128 | v1.4.0 | 间接 |
| Go | github.com/xo/terminfo | v0.0.0-20220910002029-abceb7e1c41e | 间接 |
| Go | github.com/yuin/gopher-lua | v1.1.1 | 间接 |
| Go | go.etcd.io/etcd/api/v3 | v3.7.0 | 间接 |
| Go | go.etcd.io/etcd/client/pkg/v3 | v3.7.0 | 间接 |
| Go | go.etcd.io/etcd/client/v3 | v3.7.0 | 间接 |
| Go | go.lumeweb.com/gswagger | v0.20.12 | 间接 |
| Go | go.opentelemetry.io/auto/sdk | v1.2.1 | 间接 |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | 间接 |
| Go | go.opentelemetry.io/otel/metric | v1.44.0 | 间接 |
| Go | go.opentelemetry.io/proto/otlp | v1.10.0 | 间接 |
| Go | go.shabbyrobe.org/gocovmerge | v0.0.0-20230507111327-fa4f82cfbf4d | 间接 |
| Go | go.sia.tech/jape | v0.14.1 | 间接 |
| Go | go.sia.tech/mux | v1.5.3 | 间接 |
| Go | go.uber.org/atomic | v1.11.0 | 间接 |
| Go | go.uber.org/multierr | v1.11.0 | 间接 |
| Go | go.yaml.in/yaml/v2 | v2.4.4 | 间接 |
| Go | go.yaml.in/yaml/v3 | v3.0.4 | 间接 |
| Go | go.yaml.in/yaml/v4 | v4.0.0-rc.2 | 间接 |
| Go | golang.org/x/arch | v0.24.0 | 间接 |
| Go | golang.org/x/mod | v0.38.0 | 间接 |
| Go | golang.org/x/net | v0.57.0 | 间接 |
| Go | golang.org/x/sync | v0.22.0 | 间接 |
| Go | golang.org/x/sys | v0.47.0 | 间接 |
| Go | golang.org/x/term | v0.45.0 | 间接 |
| Go | golang.org/x/text | v0.40.0 | 间接 |
| Go | golang.org/x/time | v0.15.0 | 间接 |
| Go | golang.org/x/tools | v0.48.0 | 间接 |
| Go | google.golang.org/genproto/googleapis/api | v0.0.0-20260526163538-3dc84a4a5aaa | 间接 |
| Go | google.golang.org/genproto/googleapis/rpc | v0.0.0-20260720211330-0afa2a65878a | 间接 |
| Go | google.golang.org/grpc | v1.82.1 | 间接 |
| Go | google.golang.org/protobuf | v1.36.11 | 间接 |
| Go | gopkg.in/yaml.v2 | v2.4.0 | 间接 |
| Go | gorm.io/driver/clickhouse | v0.7.0 | 间接 |
| Go | gorm.io/driver/postgres | v1.6.0 | 间接 |
| Go | gorm.io/driver/sqlserver | v1.6.3 | 间接 |
| Go | gorm.io/plugin/dbresolver | v1.6.2 | 间接 |
| Go | lukechampine.com/blake3 | v1.4.1 | 间接 |
| Go | lukechampine.com/frand | v1.5.1 | 间接 |
| Go | modernc.org/libc | v1.74.3 | 间接 |
| Go | modernc.org/mathutil | v1.7.1 | 间接 |
| Go | modernc.org/memory | v1.11.0 | 间接 |
| Go | modernc.org/sqlite | v1.54.0 | 间接 |
| npm | @babel/runtime | 7.28.4 | 间接 |
| npm | @changesets/apply-release-plan | 7.0.14 | 间接 |
| npm | @changesets/assemble-release-plan | 6.0.9 | 间接 |
| npm | @changesets/changelog-git | 0.2.1 | 间接 |
| npm | @changesets/cli | 2.29.8 | 间接 |
| npm | @changesets/config | 3.1.2 | 间接 |
| npm | @changesets/errors | 0.2.0 | 间接 |
| npm | @changesets/get-dependents-graph | 2.1.3 | 间接 |
| npm | @changesets/get-release-plan | 4.0.14 | 间接 |
| npm | @changesets/get-version-range-type | 0.4.0 | 间接 |
| npm | @changesets/git | 3.0.4 | 间接 |
| npm | @changesets/logger | 0.1.1 | 间接 |
| npm | @changesets/parse | 0.4.2 | 间接 |
| npm | @changesets/pre | 2.0.2 | 间接 |
| npm | @changesets/read | 0.6.6 | 间接 |
| npm | @changesets/should-skip-package | 0.1.2 | 间接 |
| npm | @changesets/types | 4.1.0 | 间接 |
| npm | @changesets/types | 6.1.0 | 间接 |
| npm | @changesets/write | 0.4.0 | 间接 |
| npm | @inquirer/external-editor | 1.0.3 | 间接 |
| npm | @manypkg/find-root | 1.1.0 | 间接 |
| npm | @manypkg/get-packages | 1.1.3 | 间接 |
| npm | @nodelib/fs.scandir | 2.1.5 | 间接 |
| npm | @nodelib/fs.stat | 2.0.5 | 间接 |
| npm | @nodelib/fs.walk | 1.2.8 | 间接 |
| npm | @types/node | 12.20.55 | 间接 |
| npm | ansi-colors | 4.1.3 | 间接 |
| npm | ansi-regex | 5.0.1 | 间接 |
| npm | argparse | 1.0.10 | 间接 |
| npm | argparse | 2.0.1 | 间接 |
| npm | array-union | 2.1.0 | 间接 |
| npm | better-path-resolve | 1.0.0 | 间接 |
| npm | braces | 3.0.3 | 间接 |
| npm | chardet | 2.1.1 | 间接 |
| npm | ci-info | 3.9.0 | 间接 |
| npm | cross-spawn | 7.0.6 | 间接 |
| npm | detect-indent | 6.1.0 | 间接 |
| npm | dir-glob | 3.0.1 | 间接 |
| npm | enquirer | 2.4.1 | 间接 |
| npm | esprima | 4.0.1 | 间接 |
| npm | extendable-error | 0.1.7 | 间接 |
| npm | fast-glob | 3.3.3 | 间接 |
| npm | fastq | 1.19.1 | 间接 |
| npm | fill-range | 7.1.1 | 间接 |
| npm | find-up | 4.1.0 | 间接 |
| npm | fs-extra | 7.0.1 | 间接 |
| npm | fs-extra | 8.1.0 | 间接 |
| npm | glob-parent | 5.1.2 | 间接 |
| npm | globby | 11.1.0 | 间接 |
| npm | graceful-fs | 4.2.11 | 间接 |
| npm | human-id | 4.1.3 | 间接 |
| npm | iconv-lite | 0.7.1 | 间接 |
| npm | ignore | 5.3.2 | 间接 |
| npm | is-extglob | 2.1.1 | 间接 |
| npm | is-glob | 4.0.3 | 间接 |
| npm | is-number | 7.0.0 | 间接 |
| npm | is-subdir | 1.2.0 | 间接 |
| npm | is-windows | 1.0.2 | 间接 |
| npm | isexe | 2.0.0 | 间接 |
| npm | js-yaml | 3.14.2 | 间接 |
| npm | js-yaml | 4.1.1 | 间接 |
| npm | jsonfile | 4.0.0 | 间接 |
| npm | locate-path | 5.0.0 | 间接 |
| npm | lodash.startcase | 4.4.0 | 间接 |
| npm | merge2 | 1.4.1 | 间接 |
| npm | micromatch | 4.0.8 | 间接 |
| npm | mri | 1.2.0 | 间接 |
| npm | outdent | 0.5.0 | 间接 |
| npm | p-filter | 2.1.0 | 间接 |
| npm | p-limit | 2.3.0 | 间接 |
| npm | p-locate | 4.1.0 | 间接 |
| npm | p-map | 2.1.0 | 间接 |
| npm | p-try | 2.2.0 | 间接 |
| npm | package-manager-detector | 0.2.11 | 间接 |
| npm | path-exists | 4.0.0 | 间接 |
| npm | path-key | 3.1.1 | 间接 |
| npm | path-type | 4.0.0 | 间接 |
| npm | picocolors | 1.1.1 | 间接 |
| npm | picomatch | 2.3.1 | 间接 |
| npm | pify | 4.0.1 | 间接 |
| npm | prettier | 2.8.8 | 间接 |
| npm | quansync | 0.2.11 | 间接 |
| npm | queue-microtask | 1.2.3 | 间接 |
| npm | read-yaml-file | 1.1.0 | 间接 |
| npm | resolve-from | 5.0.0 | 间接 |
| npm | reusify | 1.1.0 | 间接 |
| npm | run-parallel | 1.2.0 | 间接 |
| npm | safer-buffer | 2.1.2 | 间接 |
| npm | semver | 7.7.3 | 间接 |
| npm | shebang-command | 2.0.0 | 间接 |
| npm | shebang-regex | 3.0.0 | 间接 |
| npm | signal-exit | 4.1.0 | 间接 |
| npm | slash | 3.0.0 | 间接 |
| npm | spawndamnit | 3.0.1 | 间接 |
| npm | sprintf-js | 1.0.3 | 间接 |
| npm | strip-ansi | 6.0.1 | 间接 |
| npm | strip-bom | 3.0.0 | 间接 |
| npm | term-size | 2.2.1 | 间接 |
| npm | to-regex-range | 5.0.1 | 间接 |
| npm | universalify | 0.1.2 | 间接 |
| npm | which | 2.0.2 | 间接 |
依赖安全公告 5
该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 342 个包，其中也包含从不交付的开发与测试版本固定：5 个存在已知公告，1 个为直接依赖。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| github.com/getkin/kin-openapi | v0.134.0 | 间接 | 严重 | 1 | 0.144.0 |
| js-yaml | 3.14.2 | 间接 | 高 | 2 | 4.3.0 |
| js-yaml | 4.1.1 | 间接 | 高 | 2 | 4.3.0 |
| picomatch | 2.3.1 | 间接 | 高 | 2 | 4.0.4 |
| golang.org/x/crypto | v0.54.0 | 直接 | 未知 | 1 | — |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 7726,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 1980734,
"Shell": 2301
},
"pushed_at": "2026-07-24T13:01:07Z",
"created_at": "2023-06-28T05:12:47Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T13:01:41Z",
"description": "The Web3 Hosting Platform",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "develop",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://lumeweb.com",
"name": "Lume Web",
"type": "Organization",
"login": "LumeWeb",
"company": null,
"location": "United States of America",
"followers": 26,
"avatar_url": "https://avatars.githubusercontent.com/u/98288234?v=4",
"created_at": "2022-01-23T22:19:27Z",
"is_verified": null,
"public_repos": 317,
"account_age_days": 1642
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-26T16:49:40Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2025-01-07T14:58:31Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2025-01-01T13:40:53Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2024-11-06T10:33:24Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2024-11-06T08:29:00Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2024-11-06T08:05:05Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2024-10-31T14:45:05Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2024-10-30T11:00:33Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2024-06-19T19:24:32Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-06-19T04:44:31Z"
}
],
"recent_commits": [
{
"oid": "d74f4f158e630272b420d9fec2921a1399c49218",
"body": "…24.1",
"is_bot": true,
"headline": "chore(deps): update module github.com/prometheus/client_golang to v1.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-24T13:00:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86a0c12ae99519b2ded285a3c16af55fd078d2da",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.15",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T19:16:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c41a9d5fa1b4da47df2f9d42c6104291f2d979af",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.lumeweb.com/httputil to v0.5.6",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T18:15:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e95763dd4179496b2188810fd52821b9a4536585",
"body": "…32.31",
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T18:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dadc7cf595818e1c0e29c165384b25aaf89f0b9",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/pressly/goose/v3 to v3.27.3",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T16:46:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c144f8a515cb524f924ad51fcdad8e60be1028c",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.14",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T16:10:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a32858a7aaedf15cf9e980f8801c7addc77432ed",
"body": "…o v1.19.30",
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/credentials t…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T09:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "504215509d051636d08da30c966549bf2d9e14bf",
"body": "… v1.106.0",
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T03:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c41c0241abaf9508d59754104cf2ee710a6ecf4",
"body": "…24.0",
"is_bot": true,
"headline": "chore(deps): update module github.com/prometheus/client_golang to v1.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-20T20:36:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f465740515cb2096874b7cae81a1fbe6ade6bde",
"body": null,
"is_bot": true,
"headline": "chore(deps): update golang.org/x/exp digest to 764159d",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-19T05:18:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bfbfa016507bcb760ad4a05fba818060d2885a1",
"body": "…0.0-20260717182408-cc444c2a6f2c",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-18T03:12:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "149039d2061018ba0048b066a2457f24295c25c4",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.6",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-17T17:40:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50d94ef81a8af73e9b05f16f5088e8014a130546",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.5",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-17T17:17:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "901049bcdd77c6e71e5cdc782ba686ae23d9d926",
"body": "Error keys like UPLOAD_QUOTA_EXCEEDED now produce reason UploadQuotaExceeded\ninstead of the raw SCREAMING_SNAKE_CASE value. Account errors with Err\nprefix still work (ErrAccountCreationFailed -> AccountCreationFailed).",
"is_bot": false,
"headline": "fix: MarshalJSON converts SCREAMING_SNAKE_CASE to PascalCase",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-17T14:40:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e9ba1ab202e80cd12732199a55651d19b813a8",
"body": null,
"is_bot": true,
"headline": "chore(deps): update go.sia.tech/siastorage digest to c13c067",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-17T14:15:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efeb01c2a05bad715ffb595d09811e54ba92d317",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.sia.tech/core to v0.21.7",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-17T14:14:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68f0147acf02a6d7fdb9beb717707a5a42847ed8",
"body": "feat(core): add MarshalJSON to core.Error for canonical error shape",
"is_bot": false,
"headline": "Merge pull request #1681 from LumeWeb/feat/core-error-marshal-json",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-17T14:10:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b60f16e3aba77fe393ef41b12fc5427bea8c94c5",
"body": "Add json.Marshaler implementation to core.Error producing the canonical\n{\"error\":{\"reason\":\"...\",\"details\":\"...\"}} shape. This is the same\nlogic duplicated across IPFSError, BillingError, and QuotaError plugins.\n\nWith this change, httputil v0.5.5's errors.As-based Marshaler detection\nwill serialize \n[…]\nh ErrKey/Err prefix stripping (matches plugin logic)\n- Add json.Marshaler interface assertion\n- Remove json struct tags (MarshalJSON is now authoritative)\n- Add tests for prefix stripping and nil case",
"is_bot": false,
"headline": "feat(core): add MarshalJSON to core.Error for canonical error shape",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-17T14:09:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3690e7bb2666ac157a1aec0296f5d4baab3877e",
"body": "…ults\n\nfix: use CamelCase keys in MailConfig.Defaults to match configmanager field lookup",
"is_bot": false,
"headline": "Merge pull request #1680 from LumeWeb/fix/mail-config-snake-case-defa…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-17T09:59:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45fe4898b58d6f7f5b987489808da0d23f53a622",
"body": "… field lookup\n\nconfigmanager's DefaultConfigSource.findMatchingField matches defaults\nmap keys against Go struct field names (case-sensitive), not config\ntags. Snake_case keys like \"auth_type\" never matched field \"AuthType\",\nso no mail defaults were applied — AuthType stayed empty, causing\nSMTP auth to be silently skipped and MXRoute to reject with 550.",
"is_bot": false,
"headline": "fix: use CamelCase keys in MailConfig.Defaults to match configmanager…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-17T09:33:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e43559faad0ab8f33081057241582d04cd65e30b",
"body": "… v1.105.2",
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-17T03:28:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f520b2d3f5851efce7abbd9bff0035875418ee0",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/smithy-go to v1.27.4",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-17T03:18:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eacd9b8b04bc32f4239ed5594b92119bfed43be",
"body": null,
"is_bot": true,
"headline": "chore(deps): update actions/setup-go action to v7",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-16T06:03:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fa77c4a7d9e545e262be26080c0c67c6868438a",
"body": "Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.105.0 to 1.105.1.\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.105.0...service/s3/v1.105.1)\n\n---\nupdated-dependencie\n[…]\n.com/aws/aws-sdk-go-v2/service/s3\n dependency-version: 1.105.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T02:40:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "29b8c319ccd8e187022f1d7b83e134e4f0948e43",
"body": "…32.30",
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-14T02:21:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eeb198b960f61aef407e050e4bdc2652708d05a",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/mattn/go-sqlite3 to v1.14.48",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-13T08:32:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9257904eabb42c1aa4c377fa1fc8127fd88b83e4",
"body": "…ation\n\nfix(migrator): remove hash computation and drop unused hash column",
"is_bot": false,
"headline": "Merge pull request #1670 from LumeWeb/fix/migrator-remove-hash-comput…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:53:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2f1fe247fed6728433328fb4da9e7a2ebcdab19",
"body": "- Removed protocol.Hash() call — objectKey from renterd is already the encoded hash\n- Eliminated double-download (hash consumed reader, then re-downloaded for upload)\n- Dropped unused hash column from renter_objects table (migration + model)\n- Removed Hash field assignments from pinAndStore and uploadStaged\n- Updated tests to remove Hash field references and mock expectations",
"is_bot": false,
"headline": "fix(migrator): remove hash computation and drop unused hash column",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:52:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26a4f0a721391f8fe88b3c2aaac7e489b77b4a51",
"body": "fix(db): replace gorm-prometheus plugin with core registry integration",
"is_bot": false,
"headline": "Merge pull request #1669 from LumeWeb/fix/db-metrics-into-core-registry",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:36:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0a57b40e54b16588e515085b0e4213f82030998",
"body": "The gorm-prometheus plugin ran its own HTTP server on :9091\n(StartServer: true), causing port bind conflicts when multiple\nprocesses (e.g. the migrate CLI) initialize the DB.\n\nReplace it with a native dbStatsCollector that registers DB stats\ngauges on the portal's core metrics registry, exposed through the\nexisting /metrics endpoint. Same metric names (gorm_dbstats_*),\nsame refresh interval, no separate HTTP server.\n\nRemoves gorm.io/plugin/prometheus dependency.",
"is_bot": false,
"headline": "fix(db): replace gorm-prometheus plugin with core registry integration",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4dbdf245555b67aa16b1eee08117e04a4ae1db2",
"body": "…oute\n\nfix(migrator): correct renterd worker download route and add missing migration",
"is_bot": false,
"headline": "Merge pull request #1668 from LumeWeb/fix/migrator-renterd-download-r…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afb4fb3cd5f39d04b8843e6b473701a193fc603c",
"body": "…ing migration\n\n- renterd v2 worker route is /object/*key (singular), not /objects/*key\n- add goose migration for object_sync_cursor table (was registered as\n a GORM model but never had a migration)",
"is_bot": false,
"headline": "fix(migrator): use correct renterd worker download route and add miss…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3be852fb3363d956996db7b7838ab0086e108adf",
"body": "feat: add core.WireService for CLI commands to wire individual services",
"is_bot": false,
"headline": "Merge pull request #1667 from LumeWeb/feat/wire-service-helper",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T04:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3025fe516d11aa1a69bb41a704fe164ed6ac6e9",
"body": "Add WireService(ctx, service) to core/context.go — extracts the\ncomponent wiring logic from ContextWithStartupComponent's OnStartup\ncallback into a reusable function. CLI commands call this after Init()\nto wire config/DB/logger/tracer into a specific service without\nrunning all startup funcs.\n\nRente\n[…]\nver path unchanged.\n\nThe migrate command now uses WireService + ServiceInit instead of\nStartComponents(), avoiding resource conflicts (LevelDB locks,\nPrometheus port bindings) with the running server.",
"is_bot": false,
"headline": "feat: add core.WireService for CLI commands to wire individual services",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T03:58:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "976904345d4e2b51fa54afe6f976d351d1773158",
"body": "…nents-and-servers\n\nrefactor: split Start() into StartComponents() and StartServers()",
"is_bot": false,
"headline": "Merge pull request #1666 from LumeWeb/refactor/split-start-into-compo…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T03:37:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a31519f2175d95d6083df9705761256b196dda29",
"body": "Start() is now a thin wrapper that calls StartComponents() then\nStartServers():\n\n- StartComponents(): boot start event, startup funcs (wires config/DB\n into services and runs their init), startup funcs completed event.\n- StartServers(): plugin workflows, protocol workflows, protocols,\n cron, HTTP,\n[…]\n starting HTTP, cron, or mailer.\n\nAlso fixes the migrate command to use ActivePortal().Context() for\nservice lookup — StartComponents updates the portal's context, making\nthe original portalCtx stale.",
"is_bot": false,
"headline": "refactor: split Start() into StartComponents() and StartServers()",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T03:31:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3650ffde346b14ed5e1ce64e55d9d82b6e74deec",
"body": "fix(migrator): strip leading slash from renterd object keys",
"is_bot": false,
"headline": "Merge pull request #1665 from LumeWeb/fix/migrator-leading-slash",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T02:41:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d5a73b3e0a9ff2b37b52d6b4612c504793de61c",
"body": "Renterd returns object keys with a leading slash (e.g. /Qm...), but\nnormal uploads use EncodeFileName which produces keys without a leading\nslash. Without stripping, migrated objects would be stored under a\ndifferent key than normal uploads, causing duplicate uploads and failed\nlookups by UploadExists.",
"is_bot": false,
"headline": "fix(migrator): strip leading slash from renterd object keys",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T02:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a69418094805ca57a1a472d61ca391da36cc9e8",
"body": "fix(migrator): use ActivePortal context for service lookup",
"is_bot": false,
"headline": "Merge pull request #1664 from LumeWeb/fix/migrator-stale-context",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T02:31:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13ae916f6c78102c704475d4742c7e5f8327b805",
"body": "portal.Init() creates a new context with registered services and updates\nthe portal's internal context via SetContext. The original portalCtx\npassed to NewActivePortal is stale — it doesn't have any services.\nUse portal.ActivePortal().Context() to get the updated context.",
"is_bot": false,
"headline": "fix(migrator): use ActivePortal context for service lookup",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T02:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1666bf5d7a537c06fecf86113fbc4e35a9b894f8",
"body": "fix(migrator): use portal.Stop instead of portal.Shutdown to avoid os.Exit",
"is_bot": false,
"headline": "Merge pull request #1663 from LumeWeb/fix/migrator-stop-not-shutdown",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-12T02:15:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23abf85658bfe1640116069056a52a61ba905d3b",
"body": "….Exit\n\nportal.Shutdown calls os.Exit(), which kills the process before the\nCLI framework can print returned errors. This was swallowing all\nerrors from migrateRenterdAction — including Init failures, missing\nservices, and migration errors. Use portal.Stop() for cleanup instead,\nwhich does not call os.Exit.",
"is_bot": false,
"headline": "fix(migrator): use portal.Stop instead of portal.Shutdown to avoid os…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T18:44:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dcd97c15e5411047689b17e9cfdf74f7ec53290",
"body": "fix(migrator): correct renterd API endpoints and error handling",
"is_bot": false,
"headline": "Merge pull request #1662 from LumeWeb/fix/migrator-renterd-endpoints",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T18:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdabca7950d583332f2bb333a702b2e655d4603c",
"body": "- Fix bus list endpoint: use /api/bus/objects/* with query params\n- Fix worker download endpoint: use /api/worker/objects/{key}\n- Consolidate bus and worker URLs into single --renterd-url flag\n (renterd serves both on same port, different path prefixes)\n- Fix portal.Init error being swallowed by portal.Shutdown's os.Exit\n by logging and shutting down before returning the error\n- Add comprehensive tests for RenterdClient HTTP behavior",
"is_bot": false,
"headline": "fix(migrator): correct renterd API endpoints and error handling",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T18:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06c5a8233396791b13925a8c93b160e20d2abaef",
"body": "fix(cli): print CLI errors to stderr before exit",
"is_bot": false,
"headline": "Merge pull request #1661 from LumeWeb/fix/cli-print-errors",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T14:34:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf729225a18941db695e6c30d7b54ed0f46012f1",
"body": null,
"is_bot": false,
"headline": "fix(cli): print CLI errors to stderr before exit",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T14:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06006fe619a7e4d757c12ed3f6901bb07267d780",
"body": "fix(sia-login): gate env var output behind --print-env flag",
"is_bot": false,
"headline": "Merge pull request #1660 from LumeWeb/fix/sia-login-env-vars",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T14:08:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "768fcb30df547e4d2ad48b492c2a32753d1643c1",
"body": "Env vars are no longer printed by default after login. Users must\nexplicitly opt in with --print-env. Also changed Persist() to a\nglobal save instead of scoped to core.storage.sia.",
"is_bot": false,
"headline": "fix(sia-login): gate env var output behind --print-env flag",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T14:07:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d4892a38a0d8e9ac192b76cd722efbd6f21c637",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.sia.tech/indexd to v0.4.0",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-11T13:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b242b55e63aeb3631e15d64c1965b7d421675b6c",
"body": "fix(sia-login): persist app key to config file after BulkSetAtomic",
"is_bot": false,
"headline": "Merge pull request #1659 from LumeWeb/fix/sia-login-persist-app-key",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T13:40:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1135a48a84010252e55ef7327ff4aa64746691b0",
"body": "BulkSetAtomic only sets values in-memory (koanf). Persist() must be\ncalled separately to write the values to the file source so they\nsurvive restarts.",
"is_bot": false,
"headline": "fix(sia-login): persist app key to config file after BulkSetAtomic",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T13:39:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "558aa4b195a7418b1ee63d400b7b7bdd0db221bc",
"body": "fix(cron): guard Stop() against nil BaseComponent",
"is_bot": false,
"headline": "Merge pull request #1656 from LumeWeb/fix/cron-stop-nil-panic",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T13:36:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b622bd0e9483334f036daf4259772dfc0419d97",
"body": "CronServiceDefault.Stop() calls c.Config() which dereferences the\nembedded *BaseComponent. When the portal shuts down before the\nstartup sequence has wired the component (e.g. migrate-renterd-objects\ncommand), BaseComponent is nil and causes a SIGSEGV.\n\nAdd a nil guard to skip cleanup when the component was never initialized.",
"is_bot": false,
"headline": "fix(cron): guard Stop() against nil BaseComponent",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T13:35:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bd3bf0d4345f73e6a1b5bca19a8be4be9f33f86",
"body": null,
"is_bot": true,
"headline": "chore(deps): update go.sia.tech/siastorage digest to 49501b7",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-11T12:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d83aa1f0689a238879e2f2b38c7c519396a8cb7",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.4",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-11T12:43:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29428116fa4e5809f36c16d34a293b507ad5ca87",
"body": "feat: migrate RenterService from renterd to indexd-native storage",
"is_bot": false,
"headline": "Merge pull request #1629 from LumeWeb/feat/indexd-renter-service",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T12:39:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71bf77cb08e8783520a62484f97474b3e5af3987",
"body": "…cing and packing fixes\n\nMigrate RenterService from renterd to indexd-native storage.\n\nTracing (comprehensive, all methods):\n- service/renter.go: 11 methods (UploadObject, DownloadObject, etc.)\n- service/internal/indexd/packing.go: 4 methods (PackStagedObjects, uploadGroup, uploadSubGroup, RecoverSt\n[…]\nFailure_BailsEarly (Bug 4)\n\nMock enhancements:\n- MockRenterPackedUpload: AddFailOnCalls, FinalizeCount\n- MockRenterSDK: UploadFactory for per-call fresh uploads\n- MockStagingBackend: GetErr, DeleteErr",
"is_bot": false,
"headline": "feat(indexd): migrate RenterService to indexd-native storage with tra…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T11:32:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a1cfc8c15fe2b35c5e8451a55b63c9b9423fba11",
"body": "fix(otel): add configurable MaxQueueSize to batch span processor",
"is_bot": false,
"headline": "Merge pull request #1653 from LumeWeb/fix/otel-max-queue-size",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T06:50:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2eec07a7fa07d7a36c68c14c360af3e9b0d4051",
"body": "…cessor\n\n- Add MaxQueueSize field to TracingConfig with schema validation and default (8192)\n- Wire sdktrace.WithMaxQueueSize into the batch processor in otel_setup.go\n- Default OTel SDK MaxQueueSize is 2048, which overflows during upload\n operations that generate 700+ error spans in a single trace, silently\n dropping workflow and indexd spans before they reach the exporter",
"is_bot": false,
"headline": "[verified] fix(otel): add configurable MaxQueueSize to batch span pro…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T06:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abf8c97df62158bfc3a0cd655078f7223d9c0efa",
"body": "fix(db): migrate RetryableComponentLock callers to RetryableComponentTransaction",
"is_bot": false,
"headline": "Merge pull request #1652 from LumeWeb/fix/retryable-component-lock-ctx",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T01:55:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85904212d66370c0884844195c022bee09947dab",
"body": "…leComponentTransaction\n\nRetryableComponentLock does not accept a context parameter, so DB\nqueries using it had no context propagation for tracing or cancellation.\nAll 8 call sites in renter.go and storage.go already had ctx in scope —\nmigrated all to RetryableComponentTransaction(component, ctx, ...) which\npasses ctx through to the GORM session via .WithContext(ctx).",
"is_bot": false,
"headline": "[verified] fix(db): migrate RetryableComponentLock callers to Retryab…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f70152c49c12804e991ba082ed448a96dd6c4bd2",
"body": "…0.0-20260710211738-6b80c414e96f",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-11T01:29:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95ccd1d49f1ff8ca1bb51098945dc0d2382c1fe7",
"body": "feat(db): add PrepareStmt, connection pool tuning, and configurable pool settings",
"is_bot": false,
"headline": "Merge pull request #1650 from LumeWeb/feat/db-pool-tuning",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-11T01:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc73eb4b75a25aa8a366285c54b86fc99deee539",
"body": "…figurable pool settings\n\n- Enable PrepareStmt in GORM config to cache prepared statements,\n eliminating COM_STMT_PREPARE round-trips per query (~2-5ms savings)\n- Add MaxOpenConns, MaxIdleConns, ConnMaxLifetime to DatabaseConfig\n with sensible defaults (25/10/5m)\n- Apply pool tuning in MySQLProvider.Connect() via sql.DB setters\n- Add zog schema validation for new pool config fields",
"is_bot": false,
"headline": "[verified] feat(db): add PrepareStmt, connection pool tuning, and con…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T22:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "236aafddc70b7df2a1e2ef9d3e9ab3a059f48a49",
"body": "feat(otel): add trace.id attribute to all spans for orphan span correlation",
"is_bot": false,
"headline": "Merge pull request #1649 from LumeWeb/fix/add-trace-id-attribute",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T20:47:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f18413b67748f146ccee5b05fbe60ec5f8f8be01",
"body": "… span correlation\n\n## Summary\n- Adds trace.id as a span attribute in StartSpan so every span includes its trace ID as a searchable attribute in Tempo\n- Enables correlation of orphan spans whose parent was dropped by tail sampling",
"is_bot": false,
"headline": "[verified] feat(otel): add trace.id attribute to all spans for orphan…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T20:46:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1a8997e9971c65af99e11d8533e800bb0a7d88d",
"body": "revert: remove boot span recording infrastructure",
"is_bot": false,
"headline": "Merge pull request #1648 from LumeWeb/fix/revert-boot-span-recording",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T19:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2713c9893d2f0d8de67b94970c6ff8549243896a",
"body": "Reverts the boot span tracing approach introduced in PRs #1643, #1644,\n#1646, and #1647, plus the boot-span-specific parts of #1640 (portal.boot\nspan, SetBootTraceParent/BootTraceParent, boot traceparent links in\nworkflow and cron coordinator).\n\nThe boot span recording mechanism (DeferredSpanProcess\n[…]\nn StorageHash interface\n- WorkflowSpanAttributes with CIDString\n\nNon-boot-span changes from #1642 are preserved:\n- WithNewRoot and WithSpanKind SpanConfig options\n- Root span at ExecuteJob entry point",
"is_bot": false,
"headline": "[verified] revert: remove boot span recording infrastructure",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T19:52:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53690b0b99b746eeab6b4ae9c7f84ce68db66a26",
"body": "fix(otel): always use AlwaysSample at builder time to prevent frozen NeverSample",
"is_bot": false,
"headline": "Merge pull request #1647 from LumeWeb/fix/tracer-provider-sampler",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T19:11:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f20dafc670e86438f0a3b310e72ee538b6ac0708",
"body": "…ent frozen NeverSample\n\nNewContext is called before config.Init() loads the config file. The\ndefaults have Enabled=false, so the builder-time TracerProvider was created\nwith NeverSample(). Since the sampler is immutable after creation, no spans\nwere ever recorded—even after the startup func read th\n[…]\nn\nloading real config (Enabled=true) at startup. TestDeferredSpanProcessor_\nNeverSampleDropsSpans directly proves NeverSample causes 0 spans to\nreach the exporter while AlwaysSample exports correctly.",
"is_bot": false,
"headline": "[verified] fix(otel): always use AlwaysSample at builder time to prev…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T19:07:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c90d28bed8204fd33ddf2c5f6f5ebc6b547c6fa3",
"body": "fix(otel): register OnExit at builder time to ensure shutdown on all paths",
"is_bot": false,
"headline": "Merge pull request #1646 from LumeWeb/fix/deferred-processor-shutdown",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T12:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c4ea1a2c8dbb0a9da405cde244882bdaced2084",
"body": "…own on all paths\n\nOnExit was registered inside the startup func, after early-return guards\nfor disabled tracing and missing OTLP endpoint. When either guard\ntriggered, tp.Shutdown() was never called, leaving buffered spans in\nthe DeferredSpanProcessor unflushed and silently lost.\n\nMoved OnExit registration to builder time with a closure-scoped lp\nvariable that the startup func sets when logging is enabled.",
"is_bot": false,
"headline": "[verified] fix(otel): register OnExit at builder time to ensure shutd…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T12:25:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d259d0995ef3052df53fb8343438c23209c89043",
"body": "…ision\n\nfix(content_scan): resolve duplicate Prometheus metric registration",
"is_bot": false,
"headline": "Merge pull request #1645 from LumeWeb/fix/content-scanner-metric-coll…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T10:42:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "959bb41698c6a808db0d7b2a77cd07701cd20ab0",
"body": "…egistration collision\n\nMetricFailed and MetricOperationFailed were both set to \"failed_total\"\nwith the same subsystem prefix, producing two collectors with the same\nfully-qualified name (content_scanner_failed_total) but different label\nsets (scanner_id vs operation) and help strings. Prometheus rejects the\nsecond registration at startup.\n\nRename MetricOperationFailed to \"operation_failed_total\", following the\nsame pattern as the workflow service (failed_total vs step_failed_total).",
"is_bot": false,
"headline": "fix(content_scan): rename MetricOperationFailed to avoid Prometheus r…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T10:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c51294454ad954d9f588e1ee08000afc19112c7",
"body": "fix(otel): defer exporter attachment so boot spans are captured",
"is_bot": false,
"headline": "Merge pull request #1644 from LumeWeb/fix/deferred-span-processor",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T10:10:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c6958ce9b245c619490b6006e70fcf6f521b757",
"body": "The TracerProvider was created inside a startup func that runs AFTER\nthe portal.boot span is created. Spans created before the provider\nwas set went to the no-op tracer and were never exported.\n\nSolution: create the TracerProvider with a DeferredSpanProcessor\nimmediately during context construction \n[…]\nContextWithTelemetry builder option\n- Startup func now only attaches the OTLP exporter to the deferred processor\n- 5 regression tests covering buffering, forwarding, shutdown, idempotency, concurrency",
"is_bot": false,
"headline": "fix(otel): defer exporter attachment so boot spans are captured",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T10:08:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5962dc480f74c61ffe575d9bd175bac1aa892f3",
"body": "fix(boot): force root span at portal boot",
"is_bot": false,
"headline": "Merge pull request #1643 from LumeWeb/fix/boot-root-span",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T09:37:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a8dac2d42e8957edfc09081cc92c82d958cb180",
"body": "The portal.boot span was created without WithNewRoot, so if the\ninitial context carried a trace from an external caller the boot\nspan would inherit it as parent instead of being its own root.\n\n- Apply WithNewRoot() + SpanKindServer to portal.boot span\n- Uses the WithNewRoot infrastructure added in PR #1642",
"is_bot": false,
"headline": "fix(boot): force root span at portal boot with WithNewRoot",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T09:37:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "304b5e8a143e24d0a6b5401ba07105e016e74af2",
"body": "fix(cron): force root span at ExecuteJob entry point",
"is_bot": false,
"headline": "Merge pull request #1642 from LumeWeb/fix/cron-root-span",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T09:35:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba9e563ab956a286a94d1682b85706a809dc3a40",
"body": "Cron jobs triggered by the scheduler had no parent trace context,\ncausing downstream spans to appear as disconnected orphans in Tempo.\n\n- Add WithNewRoot() and NewRoot field to core.SpanConfig\n- Apply WithNewRoot() + SpanKindServer at ExecuteJob to force a clean\n root span for every cron job execut\n[…]\n\n- Remove redundant boot traceparent links from per-job-type span (it's\n now a child of the ExecuteJob root, not a separate trace)\n- Keep boot traceparent as a link on ExecuteJob root for correlation",
"is_bot": false,
"headline": "fix(cron): force root span at ExecuteJob entry point with WithNewRoot",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T09:32:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8efa2e30971d44cb435348cc02146d26c97981f",
"body": "feat(otel): configurable BSP batch timeout and export batch size",
"is_bot": false,
"headline": "Merge pull request #1641 from LumeWeb/fix/bsp-batch-timeout-config",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T08:23:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e76f4e7817c355ad9d63600054a9ba5bfef8d0",
"body": "The OTel BatchSpanProcessor (BSP) defaulted to 5s flush interval and 512\nbatch size. Root spans ended last (via defer) and arrived after Alloy's\ntail sampling decision_wait window, causing '<root span not yet received>'\nin Tempo.\n\nAdd batch_timeout (seconds) and max_export_batch_size config fields to\nTracingConfig. Defaults preserve prior behavior (5s / 512) but can be\ntuned lower (e.g. 1s / 256) so root spans flush before Alloy's 10s\ndecision window elapses.",
"is_bot": false,
"headline": "feat(otel): configurable BSP batch timeout and export batch size",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T08:22:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73f90a3ae6b7ff5a3a656c1da1b397300988fb3f",
"body": "fix: workflow tracing — eventCtx, boot root span, CIDString span attribute",
"is_bot": false,
"headline": "Merge pull request #1640 from LumeWeb/fix/workflow-tracing-v2",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T01:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a898065b43f78d4e4daefd1e3fe3a279cfb509",
"body": "…ibute\n\n- Fix eventCtx: workflowStepExecutorJob.Run now passes eventCtx (carries\n cron job span) instead of ctx (portal root, no span) to all workflow\n service calls. Spans inside ExecuteWorkflowStep now create proper child\n spans of the cron execution trace instead of disconnected root spans.\n\n-\n[…]\n making it easier to trace and\n cross-reference with IPFS gateways.\n\n- Regenerated mocks via mockery, updated hand-written MockStorageHash and\n testStorageHash to implement the new interface method.",
"is_bot": false,
"headline": "fix: workflow tracing - eventCtx, boot root span, CIDString span attr…",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-10T00:56:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d83efb475d64b7fe73966a2366e00e1b5cc6e0ed",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/wneessen/go-mail to v0.8.1",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-10T00:02:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9df4faa3b5aead822bf57063d455599fe6223add",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/v2 to v2.22.0",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-10T00:02:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53d1bf4ccb922b53923d498b125056eaa906c34c",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module github.com/johannesboyne/gofakes3 to v1",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-10T00:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2beef927bce8cbfdde533e3a81d05f6dd174aa4",
"body": "…0.0-20260709183641-10cdd5e5558f",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-09T20:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48afc37f5c6542ad221f47b9b92980ed7bc01118",
"body": null,
"is_bot": true,
"headline": "chore(deps): update golang.org/x/exp digest to 9ea1abe",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-09T20:13:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c48b905155a15a9bff8c59c780325914fd865ef",
"body": "…0.0-20260708234909-c4697d43e545",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-09T01:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11c480c7c492572d79b17e68fe3aa3e6ae8c815b",
"body": "…32.29",
"is_bot": true,
"headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-09T00:53:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69986352e5d8947a1b8963ea46d4fd2ebc86b51d",
"body": "Includes flaky TestFileSource_Watch fix (proper fsnotify lifecycle,\nevent debouncing) and MockKV.GetStream for etcd v3.7.0 compatibility.",
"is_bot": false,
"headline": "chore: bump configmanager to v0.3.29",
"author_name": "Derrick Hammer",
"author_login": "pcfreak30",
"committed_at": "2026-07-09T00:52:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9467368dff1d46d87c5c13c971866d24d2cee7",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module golang.org/x/crypto to v0.54.0",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-08T22:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b767bfd3fe50907ce7ed03dc93f0d71dd10f22a6",
"body": "…0.0-20260708211158-fe80573fdf9e",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-08T21:25:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a2f303ef2dfd1d03487f5b727bb9680a811f1c6",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.etcd.io/etcd/client/v3 to v3.7.0",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-08T21:25:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a05e068ba2b6ea8cb059add349e59be1abc229f",
"body": "…0.0-20260708173245-c3fa241ceee5",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-08T21:20:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea2e65dffb46878d378a63827ec0ee1d8948dae3",
"body": null,
"is_bot": true,
"headline": "chore(deps): update module go.sia.tech/coreutils to v0.23.5",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-08T10:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8c4294836173dc6b12b4a880275ca0c5ffe7a17",
"body": null,
"is_bot": true,
"headline": "chore(deps): update dependency go to v1.26.5",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-08T05:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "046b422d829cf1e955c8c6a31f3c203052a9a2d4",
"body": "…0.0-20260707215852-f7abd19f08ff",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-07T23:11:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e50ad0c94aae9eabd5a63b0c9c34d84a50e7ce50",
"body": "…0.0-20260707142944-b8706290bc4e",
"is_bot": true,
"headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-07T14:51:25Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 10,
"commits_last_year": 835,
"latest_release_at": "2026-05-26T16:49:40Z",
"latest_release_tag": "v0.5.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 46,
"days_since_latest_release": 59,
"mean_days_between_releases": 78.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "go.lumeweb.com/portal",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": null,
"registry_url": "https://pkg.go.dev/go.lumeweb.com/portal",
"is_deprecated": false,
"latest_version": "v0.5.1",
"repository_url": null,
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T14:15:09Z",
"latest_version_yanked": null,
"days_since_latest_publish": 7
}
]
},
"popularity": {
"forks": 1,
"stars": 5,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2025-10-21",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 4
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 81000,
"source_files_sampled": 377,
"oversized_source_files": 4,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 15112
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "github.com/getkin/kin-openapi",
"direct": false,
"version": "v0.134.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-r277-6w6q-xmqw"
],
"fixed_version": "0.144.0",
"advisory_count": 1,
"oldest_advisory_days": 0
},
{
"name": "js-yaml",
"direct": false,
"version": "3.14.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m",
"GHSA-h67p-54hq-rp68"
],
"fixed_version": "4.3.0",
"advisory_count": 2,
"oldest_advisory_days": 39
},
{
"name": "js-yaml",
"direct": false,
"version": "4.1.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m",
"GHSA-h67p-54hq-rp68"
],
"fixed_version": "4.3.0",
"advisory_count": 2,
"oldest_advisory_days": 39
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3v7f-55p6-f55p",
"GHSA-c2c7-rcm5-vvqj"
],
"fixed_version": "4.0.4",
"advisory_count": 2,
"oldest_advisory_days": 120
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 16
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 3,
"unknown": 1,
"critical": 1
},
"advisory_count": 8,
"affected_count": 5,
"assessed_count": 342,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/AfterShip/email-verifier",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.1"
},
{
"name": "github.com/DATA-DOG/go-sqlmock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.2"
},
{
"name": "github.com/Oudwins/zog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.2"
},
{
"name": "github.com/adjust/rmq/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.2.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.32.31"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.30"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.106.0"
},
{
"name": "github.com/aws/smithy-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.27.4"
},
{
"name": "github.com/casbin/casbin/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.10.0"
},
{
"name": "github.com/casbin/gorm-adapter/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.41.0"
},
{
"name": "github.com/docker/go-units",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.0"
},
{
"name": "github.com/eventials/go-tus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250612203642-7827b129cd4c"
},
{
"name": "github.com/fatih/structs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.15"
},
{
"name": "github.com/gammazero/workerpool",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.1"
},
{
"name": "github.com/go-co-op/gocron/mocks/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0-20260717182408-cc444c2a6f2c"
},
{
"name": "github.com/go-co-op/gocron/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.22.0"
},
{
"name": "github.com/go-gorm/caches/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.0.5"
},
{
"name": "github.com/go-kiss/monkey",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20240508030602-d03795257a64"
},
{
"name": "github.com/go-sql-driver/mysql",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/invopop/jsonschema",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
},
{
"name": "github.com/ipfs/go-cid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/johannesboyne/gofakes3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/kenshaw/snaker",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.3"
},
{
"name": "github.com/knadh/koanf/parsers/json",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/knadh/koanf/providers/confmap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/knadh/koanf/providers/rawbytes",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/knadh/koanf/providers/structs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/knadh/koanf/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.3.5"
},
{
"name": "github.com/labstack/echo-contrib",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.4"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.15.4"
},
{
"name": "github.com/looplab/fsm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.3"
},
{
"name": "github.com/mattn/go-sqlite3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.48"
},
{
"name": "github.com/miekg/dns",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.72"
},
{
"name": "github.com/multiformats/go-multibase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/multiformats/go-multihash",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.3"
},
{
"name": "github.com/pquerna/otp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/pressly/goose/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.27.3"
},
{
"name": "github.com/pterm/pterm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.12.83"
},
{
"name": "github.com/redis/go-redis/v9",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v9.21.0"
},
{
"name": "github.com/samber/lo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.53.0"
},
{
"name": "github.com/spf13/afero",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.15.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/tus/tusd/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.10.0"
},
{
"name": "github.com/urfave/cli/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.10.1"
},
{
"name": "github.com/wneessen/go-mail",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.1"
},
{
"name": "go.lumeweb.com/configmanager",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.29"
},
{
"name": "go.lumeweb.com/event/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.0"
},
{
"name": "go.lumeweb.com/httputil",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.6"
},
{
"name": "go.lumeweb.com/portal-middleware",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.7"
},
{
"name": "go.lumeweb.com/portal-router",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.6"
},
{
"name": "go.opentelemetry.io/contrib/bridges/otelzap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.69.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/log",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/log",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.sia.tech/core",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.21.7"
},
{
"name": "go.sia.tech/coreutils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.23.5"
},
{
"name": "go.sia.tech/indexd",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "go.sia.tech/siastorage",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.1-0.20260714120443-c13c06751808"
},
{
"name": "go.uber.org/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.28.0"
},
{
"name": "go.uber.org/zap/exp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.54.0"
},
{
"name": "golang.org/x/exp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260718201538-764159d718ef"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "gorm.io/datatypes",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.7"
},
{
"name": "gorm.io/driver/mysql",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "gorm.io/driver/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "gorm.io/gorm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.31.2"
},
{
"name": "gorm.io/plugin/opentelemetry",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.16"
},
{
"name": "github.com/golang-jwt/jwt/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.1"
},
{
"name": "github.com/knadh/koanf/maps",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.2"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.24.1"
},
{
"name": "github.com/prometheus/client_model",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "go.lumeweb.com/queryutil",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.17"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/adjust/rmq/v5",
"direct": true,
"version": "v5.2.0",
"ecosystem": "go"
},
{
"name": "github.com/aftership/email-verifier",
"direct": true,
"version": "v1.4.1",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"direct": true,
"version": "v1.32.31",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"direct": true,
"version": "v1.19.30",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"direct": true,
"version": "v1.106.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/smithy-go",
"direct": true,
"version": "v1.27.4",
"ecosystem": "go"
},
{
"name": "github.com/casbin/casbin/v3",
"direct": true,
"version": "v3.10.0",
"ecosystem": "go"
},
{
"name": "github.com/casbin/gorm-adapter/v3",
"direct": true,
"version": "v3.41.0",
"ecosystem": "go"
},
{
"name": "github.com/data-dog/go-sqlmock",
"direct": true,
"version": "v1.5.2",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-units",
"direct": true,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/eventials/go-tus",
"direct": true,
"version": "v0.0.0-20250612203642-7827b129cd4c",
"ecosystem": "go"
},
{
"name": "github.com/fatih/structs",
"direct": true,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"direct": true,
"version": "v1.4.15",
"ecosystem": "go"
},
{
"name": "github.com/gammazero/workerpool",
"direct": true,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/go-co-op/gocron/mocks/v2",
"direct": true,
"version": "v2.0.0-20260717182408-cc444c2a6f2c",
"ecosystem": "go"
},
{
"name": "github.com/go-co-op/gocron/v2",
"direct": true,
"version": "v2.22.0",
"ecosystem": "go"
},
{
"name": "github.com/go-gorm/caches/v4",
"direct": true,
"version": "v4.0.5",
"ecosystem": "go"
},
{
"name": "github.com/go-kiss/monkey",
"direct": true,
"version": "v0.0.0-20240508030602-d03795257a64",
"ecosystem": "go"
},
{
"name": "github.com/go-sql-driver/mysql",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"direct": true,
"version": "v2.5.0",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt/v5",
"direct": true,
"version": "v5.3.1",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/invopop/jsonschema",
"direct": true,
"version": "v0.14.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-cid",
"direct": true,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/johannesboyne/gofakes3",
"direct": true,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/kenshaw/snaker",
"direct": true,
"version": "v0.4.3",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/maps",
"direct": true,
"version": "v0.1.2",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/parsers/json",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/providers/confmap",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/providers/rawbytes",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/providers/structs",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/v2",
"direct": true,
"version": "v2.3.5",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo-contrib",
"direct": true,
"version": "v0.17.4",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo/v4",
"direct": true,
"version": "v4.15.4",
"ecosystem": "go"
},
{
"name": "github.com/looplab/fsm",
"direct": true,
"version": "v1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-sqlite3",
"direct": true,
"version": "v1.14.48",
"ecosystem": "go"
},
{
"name": "github.com/miekg/dns",
"direct": true,
"version": "v1.1.72",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multibase",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multihash",
"direct": true,
"version": "v0.2.3",
"ecosystem": "go"
},
{
"name": "github.com/oudwins/zog",
"direct": true,
"version": "v0.22.2",
"ecosystem": "go"
},
{
"name": "github.com/pquerna/otp",
"direct": true,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/pressly/goose/v3",
"direct": true,
"version": "v3.27.3",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.24.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": true,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/pterm/pterm",
"direct": true,
"version": "v0.12.83",
"ecosystem": "go"
},
{
"name": "github.com/redis/go-redis/v9",
"direct": true,
"version": "v9.21.0",
"ecosystem": "go"
},
{
"name": "github.com/samber/lo",
"direct": true,
"version": "v1.53.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": true,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/tus/tusd/v2",
"direct": true,
"version": "v2.10.0",
"ecosystem": "go"
},
{
"name": "github.com/urfave/cli/v3",
"direct": true,
"version": "v3.10.1",
"ecosystem": "go"
},
{
"name": "github.com/wneessen/go-mail",
"direct": true,
"version": "v0.8.1",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/configmanager",
"direct": true,
"version": "v0.3.29",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/event/v2",
"direct": true,
"version": "v2.1.0",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/httputil",
"direct": true,
"version": "v0.5.6",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/portal-middleware",
"direct": true,
"version": "v0.3.7",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/portal-router",
"direct": true,
"version": "v0.7.6",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/queryutil",
"direct": true,
"version": "v0.3.17",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/bridges/otelzap",
"direct": true,
"version": "v0.19.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho",
"direct": true,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/log",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk/log",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.sia.tech/core",
"direct": true,
"version": "v0.21.7",
"ecosystem": "go"
},
{
"name": "go.sia.tech/coreutils",
"direct": true,
"version": "v0.23.5",
"ecosystem": "go"
},
{
"name": "go.sia.tech/indexd",
"direct": true,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "go.sia.tech/siastorage",
"direct": true,
"version": "v0.1.1-0.20260714120443-c13c06751808",
"ecosystem": "go"
},
{
"name": "go.uber.org/mock",
"direct": true,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": true,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap/exp",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": true,
"version": "v0.0.0-20260718201538-764159d718ef",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "gorm.io/datatypes",
"direct": true,
"version": "v1.2.7",
"ecosystem": "go"
},
{
"name": "gorm.io/driver/mysql",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "gorm.io/driver/sqlite",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "gorm.io/gorm",
"direct": true,
"version": "v1.31.2",
"ecosystem": "go"
},
{
"name": "gorm.io/plugin/opentelemetry",
"direct": true,
"version": "v0.1.16",
"ecosystem": "go"
},
{
"name": "atomicgo.dev/cursor",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "atomicgo.dev/keyboard",
"direct": false,
"version": "v0.2.9",
"ecosystem": "go"
},
{
"name": "atomicgo.dev/schedule",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "filippo.io/edwards25519",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/alicebob/miniredis/v2",
"direct": false,
"version": "v2.37.0",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
"direct": false,
"version": "v1.7.14",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
"direct": false,
"version": "v1.18.31",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
"direct": false,
"version": "v1.4.31",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
"direct": false,
"version": "v2.7.31",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
"direct": false,
"version": "v1.4.32",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
"direct": false,
"version": "v1.13.13",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
"direct": false,
"version": "v1.9.24",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
"direct": false,
"version": "v1.13.31",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
"direct": false,
"version": "v1.19.32",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/signin",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sso",
"direct": false,
"version": "v1.33.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
"direct": false,
"version": "v1.38.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sts",
"direct": false,
"version": "v1.45.0",
"ecosystem": "go"
},
{
"name": "github.com/bahlo/generic-list-go",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/bmatcuk/doublestar/v4",
"direct": false,
"version": "v4.9.1",
"ecosystem": "go"
},
{
"name": "github.com/boombuler/barcode",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/buger/jsonparser",
"direct": false,
"version": "v1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/casbin/govaluate",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v5",
"direct": false,
"version": "v5.0.3",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/clickhouse/ch-go",
"direct": false,
"version": "v0.73.0",
"ecosystem": "go"
},
{
"name": "github.com/clickhouse/clickhouse-go/v2",
"direct": false,
"version": "v2.47.0",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/uax29/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/console",
"direct": false,
"version": "v1.0.5",
"ecosystem": "go"
},
{
"name": "github.com/coreos/go-semver",
"direct": false,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "github.com/coreos/go-systemd/v22",
"direct": false,
"version": "v22.7.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/dunglas/httpsfv",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/dustin/go-humanize",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/gammazero/deque",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/getkin/kin-openapi",
"direct": false,
"version": "v0.134.0",
"ecosystem": "go"
},
{
"name": "github.com/ghodss/yaml",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/glebarez/go-sqlite",
"direct": false,
"version": "v1.22.0",
"ecosystem": "go"
},
{
"name": "github.com/glebarez/sqlite",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/city",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/errors",
"direct": false,
"version": "v0.7.1",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.4",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v0.22.5",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/jsonname",
"direct": false,
"version": "v0.25.5",
"ecosystem": "go"
},
{
"name": "github.com/golang-sql/civil",
"direct": false,
"version": "v0.0.0-20220223132316-b832511892a9",
"ecosystem": "go"
},
{
"name": "github.com/golang-sql/sqlexp",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.4",
"ecosystem": "go"
},
{
"name": "github.com/gookit/color",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.29.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-version",
"direct": false,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/hbollon/go-edlib",
"direct": false,
"version": "v1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/huandu/go-tls",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/jackc/pgpassfile",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jackc/pgservicefile",
"direct": false,
"version": "v0.0.0-20240606120523-5a60cdf6a761",
"ecosystem": "go"
},
{
"name": "github.com/jackc/pgx/v5",
"direct": false,
"version": "v5.10.0",
"ecosystem": "go"
},
{
"name": "github.com/jackc/puddle/v2",
"direct": false,
"version": "v2.2.2",
"ecosystem": "go"
},
{
"name": "github.com/jinzhu/inflection",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jinzhu/now",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/jonboulle/clockwork",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/josharian/intern",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/julienschmidt/httprouter",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.19.1",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/reedsolomon",
"direct": false,
"version": "v1.14.1",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/parsers/yaml",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/knadh/koanf/providers/file",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/labstack/gommon",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/lithammer/fuzzysearch",
"direct": false,
"version": "v1.1.8",
"ecosystem": "go"
},
{
"name": "github.com/mailru/easyjson",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.15",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.23",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mfridman/interpolate",
"direct": false,
"version": "v0.0.2",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-mssqldb",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/minio/sha256-simd",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/copystructure",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/reflectwalk",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/mohae/deepcopy",
"direct": false,
"version": "v0.0.0-20170929034955-c48cc78d4826",
"ecosystem": "go"
},
{
"name": "github.com/mr-tron/base58",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-base32",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-base36",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-varint",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/ncruces/go-strftime",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/oasdiff/yaml",
"direct": false,
"version": "v0.0.0-20260313112342-a3ea61cb4d4c",
"ecosystem": "go"
},
{
"name": "github.com/oasdiff/yaml3",
"direct": false,
"version": "v0.0.0-20260224194419-61cd415a242b",
"ecosystem": "go"
},
{
"name": "github.com/oschwald/geoip2-golang",
"direct": false,
"version": "v1.13.0",
"ecosystem": "go"
},
{
"name": "github.com/oschwald/maxminddb-golang",
"direct": false,
"version": "v1.13.1",
"ecosystem": "go"
},
{
"name": "github.com/paulmach/orb",
"direct": false,
"version": "v0.13.0",
"ecosystem": "go"
},
{
"name": "github.com/pb33f/ordered-map/v2",
"direct": false,
"version": "v2.3.1",
"ecosystem": "go"
},
{
"name": "github.com/perimeterx/marshmallow",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/lz4/v4",
"direct": false,
"version": "v4.1.27",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.70.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.21.1",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/qpack",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.60.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/webtransport-go",
"direct": false,
"version": "v0.11.1",
"ecosystem": "go"
},
{
"name": "github.com/remyoudompheng/bigfft",
"direct": false,
"version": "v0.0.0-20230129092748-24d4a6f8daec",
"ecosystem": "go"
},
{
"name": "github.com/robfig/cron/v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "github.com/rs/cors",
"direct": false,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/ryszard/goskiplist",
"direct": false,
"version": "v0.0.0-20150312221310-2dfbae5fcf46",
"ecosystem": "go"
},
{
"name": "github.com/segmentio/asm",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/sethvargo/go-retry",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/shopspring/decimal",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/spaolacci/murmur3",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/objx",
"direct": false,
"version": "v0.5.3",
"ecosystem": "go"
},
{
"name": "github.com/valyala/bytebufferpool",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasttemplate",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/woodsbury/decimal128",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/xo/terminfo",
"direct": false,
"version": "v0.0.0-20220910002029-abceb7e1c41e",
"ecosystem": "go"
},
{
"name": "github.com/yuin/gopher-lua",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "go.etcd.io/etcd/api/v3",
"direct": false,
"version": "v3.7.0",
"ecosystem": "go"
},
{
"name": "go.etcd.io/etcd/client/pkg/v3",
"direct": false,
"version": "v3.7.0",
"ecosystem": "go"
},
{
"name": "go.etcd.io/etcd/client/v3",
"direct": false,
"version": "v3.7.0",
"ecosystem": "go"
},
{
"name": "go.lumeweb.com/gswagger",
"direct": false,
"version": "v0.20.12",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "go.shabbyrobe.org/gocovmerge",
"direct": false,
"version": "v0.0.0-20230507111327-fa4f82cfbf4d",
"ecosystem": "go"
},
{
"name": "go.sia.tech/jape",
"direct": false,
"version": "v0.14.1",
"ecosystem": "go"
},
{
"name": "go.sia.tech/mux",
"direct": false,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "go.uber.org/atomic",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": false,
"version": "v3.0.4",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v4",
"direct": false,
"version": "v4.0.0-rc.2",
"ecosystem": "go"
},
{
"name": "golang.org/x/arch",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.48.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260526163538-3dc84a4a5aaa",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260720211330-0afa2a65878a",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.82.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "gorm.io/driver/clickhouse",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "gorm.io/driver/postgres",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "gorm.io/driver/sqlserver",
"direct": false,
"version": "v1.6.3",
"ecosystem": "go"
},
{
"name": "gorm.io/plugin/dbresolver",
"direct": false,
"version": "v1.6.2",
"ecosystem": "go"
},
{
"name": "lukechampine.com/blake3",
"direct": false,
"version": "v1.4.1",
"ecosystem": "go"
},
{
"name": "lukechampine.com/frand",
"direct": false,
"version": "v1.5.1",
"ecosystem": "go"
},
{
"name": "modernc.org/libc",
"direct": false,
"version": "v1.74.3",
"ecosystem": "go"
},
{
"name": "modernc.org/mathutil",
"direct": false,
"version": "v1.7.1",
"ecosystem": "go"
},
{
"name": "modernc.org/memory",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "modernc.org/sqlite",
"direct": false,
"version": "v1.54.0",
"ecosystem": "go"
},
{
"name": "@babel/runtime",
"direct": false,
"version": "7.28.4",
"ecosystem": "npm"
},
{
"name": "@changesets/apply-release-plan",
"direct": false,
"version": "7.0.14",
"ecosystem": "npm"
},
{
"name": "@changesets/assemble-release-plan",
"direct": false,
"version": "6.0.9",
"ecosystem": "npm"
},
{
"name": "@changesets/changelog-git",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "@changesets/cli",
"direct": false,
"version": "2.29.8",
"ecosystem": "npm"
},
{
"name": "@changesets/config",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@changesets/errors",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@changesets/get-dependents-graph",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "@changesets/get-release-plan",
"direct": false,
"version": "4.0.14",
"ecosystem": "npm"
},
{
"name": "@changesets/get-version-range-type",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "@changesets/git",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "@changesets/logger",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "@changesets/parse",
"direct": false,
"version": "0.4.2",
"ecosystem": "npm"
},
{
"name": "@changesets/pre",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "@changesets/read",
"direct": false,
"version": "0.6.6",
"ecosystem": "npm"
},
{
"name": "@changesets/should-skip-package",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "@changesets/types",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "@changesets/types",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "@changesets/write",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "@inquirer/external-editor",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@manypkg/find-root",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@manypkg/get-packages",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.scandir",
"direct": false,
"version": "2.1.5",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.stat",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.walk",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "12.20.55",
"ecosystem": "npm"
},
{
"name": "ansi-colors",
"direct": false,
"version": "4.1.3",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "1.0.10",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "array-union",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "better-path-resolve",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "chardet",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "ci-info",
"direct": false,
"version": "3.9.0",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "detect-indent",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "dir-glob",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "enquirer",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "extendable-error",
"direct": false,
"version": "0.1.7",
"ecosystem": "npm"
},
{
"name": "fast-glob",
"direct": false,
"version": "3.3.3",
"ecosystem": "npm"
},
{
"name": "fastq",
"direct": false,
"version": "1.19.1",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "globby",
"direct": false,
"version": "11.1.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "human-id",
"direct": false,
"version": "4.1.3",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.1",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "is-subdir",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "is-windows",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "3.14.2",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "lodash.startcase",
"direct": false,
"version": "4.4.0",
"ecosystem": "npm"
},
{
"name": "merge2",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.8",
"ecosystem": "npm"
},
{
"name": "mri",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "outdent",
"direct": false,
"version": "0.5.0",
"ecosystem": "npm"
},
{
"name": "p-filter",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "p-map",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "p-try",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "package-manager-detector",
"direct": false,
"version": "0.2.11",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-type",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "pify",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "2.8.8",
"ecosystem": "npm"
},
{
"name": "quansync",
"direct": false,
"version": "0.2.11",
"ecosystem": "npm"
},
{
"name": "queue-microtask",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "read-yaml-file",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "reusify",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "run-parallel",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.7.3",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "slash",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "spawndamnit",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "sprintf-js",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "term-size",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "universalify",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 342,
"direct_count": 83,
"indirect_count": 259
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 1499,
"open_issues": 3,
"closed_ratio": 0.25,
"closed_issues": 1,
"closed_unmerged_prs": 194
},
"bus_factor": 1,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "pcfreak30",
"commits": 2768,
"avatar_url": "https://avatars.githubusercontent.com/u/10647?v=4"
},
{
"type": "User",
"login": "semantic-release-bot",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.999
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"_build.yml",
"build.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 4/5 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d74f4f158e630272b420d9fec2921a1399c49218",
"ran_at": "2026-07-24T19:36:03Z",
"aggregate_score": 6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T13:01:36Z",
"oldest_open_prs": [
{
"number": 1697,
"created_at": "2026-07-23T19:11:38Z",
"last_comment_at": "2026-07-23T19:11:39Z",
"last_comment_author": "renovate"
}
],
"last_merged_pr_at": "2026-07-24T13:00:26Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 73,
"created_at": "2024-05-01T08:35:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 77,
"created_at": "2024-05-08T18:02:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1115,
"created_at": "2025-10-08T06:07:27Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/LumeWeb/portal",
"host": "github.com",
"name": "portal",
"owner": "LumeWeb"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 66,
"vitality": 94,
"community": 29,
"governance": 55,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 94,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"commits_last_year": 835,
"human_commit_share": 0.6,
"days_since_last_push": 0,
"active_weeks_last_year": 46
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "46/52 weeks with commits",
"points": 31.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 46
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "835 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 835
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 10,
"latest_release_tag": "v0.5.0",
"releases_from_tags": false,
"days_since_latest_release": 59,
"mean_days_between_releases": 78.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "10 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 10
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 59 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 59
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~78.5 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 78.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 29,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"forks": 1,
"stars": 5,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "5 stars",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 5
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.999
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"merged_prs": 1499,
"open_issues": 3,
"closed_issues": 1,
"issue_closed_ratio": 0.25,
"closed_unmerged_prs": 194
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "25% of issues closed",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 25
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1499/1693 decided PRs merged",
"points": 33.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1499,
"decided": 1693
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/5 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"followers": 26,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "LumeWeb",
"public_repos": 317,
"account_age_days": 1642
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "26 followers of LumeWeb",
"points": 10.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 26,
"login": "LumeWeb"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "317 public repos, account ~4 yr old",
"points": 22,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 317
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"go.lumeweb.com/portal"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 7
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 7 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 7
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 66,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/5 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 342 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 342
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 89,
"inputs": {
"source": "osv",
"advisories": 8,
"affected_packages": 5,
"assessed_packages": 342,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 3, unknown 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: golang.org/x/crypto v0.54.0 (unknown)",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "golang.org/x/crypto v0.54.0 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 342,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 78,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 15112
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 60 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 60
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.4
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "40 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 40,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 81000,
"source_files_sampled": 377,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/377 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 377,
"oversized": 4
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-24T19:36:19.883509Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/LumeWeb/portal.svg",
"full_name": "LumeWeb/portal",
"license_state": "standard",
"license_spdx": "MIT"
}