antinvestor / service-fintech

来自 GitHub 依赖图的完整解析依赖集合：46 个直接依赖与 139 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 185 个包，其中也包含从不交付的开发与测试版本固定：1 个存在已知公告，0 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 113345,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "C": 2688,
        "Go": 2251765,
        "C++": 29933,
        "Dart": 2189815,
        "HTML": 4712,
        "CMake": 19941,
        "Shell": 438,
        "Swift": 3784,
        "Kotlin": 1452,
        "Makefile": 2547,
        "Dockerfile": 7032,
        "JavaScript": 4244126,
        "TypeScript": 93217
      },
      "pushed_at": "2026-07-22T09:08:26Z",
      "created_at": "2026-03-13T11:19:02Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T09:09:43Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript",
        "Go",
        "Dart"
      ]
    },
    "owner": {
      "blog": "www.antinvestor.com",
      "name": "Ant Investor Limited",
      "type": "Organization",
      "login": "antinvestor",
      "company": null,
      "location": "Uganda",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/65283563?v=4",
      "created_at": "2020-05-13T09:44:56Z",
      "is_verified": null,
      "public_repos": 15,
      "account_age_days": 2261
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.96.13",
          "kind": "patch",
          "published_at": "2026-07-21T02:12:47Z"
        },
        {
          "tag": "v1.96.12",
          "kind": "patch",
          "published_at": "2026-07-11T04:48:04Z"
        },
        {
          "tag": "v1.96.11",
          "kind": "patch",
          "published_at": "2026-07-09T21:43:54Z"
        },
        {
          "tag": "v1.96.10",
          "kind": "patch",
          "published_at": "2026-06-11T00:47:00Z"
        },
        {
          "tag": "v1.96.9",
          "kind": "patch",
          "published_at": "2026-06-10T22:02:01Z"
        },
        {
          "tag": "v1.96.8",
          "kind": "patch",
          "published_at": "2026-06-10T21:49:20Z"
        },
        {
          "tag": "v1.96.7",
          "kind": "patch",
          "published_at": "2026-06-10T17:34:40Z"
        },
        {
          "tag": "v1.96.6",
          "kind": "patch",
          "published_at": "2026-06-10T10:19:55Z"
        },
        {
          "tag": "v1.96.5",
          "kind": "patch",
          "published_at": "2026-06-09T04:30:46Z"
        },
        {
          "tag": "v1.96.4",
          "kind": "patch",
          "published_at": "2026-05-31T00:44:43Z"
        },
        {
          "tag": "v1.96.3",
          "kind": "patch",
          "published_at": "2026-05-22T03:03:49Z"
        },
        {
          "tag": "v1.96.2",
          "kind": "patch",
          "published_at": "2026-05-21T21:34:43Z"
        },
        {
          "tag": "v1.96.1",
          "kind": "patch",
          "published_at": "2026-05-21T21:14:17Z"
        },
        {
          "tag": "v1.96.0",
          "kind": "minor",
          "published_at": "2026-05-16T00:36:09Z"
        },
        {
          "tag": "v0.17.12",
          "kind": "patch",
          "published_at": "2026-05-12T18:55:09Z"
        },
        {
          "tag": "v0.17.11",
          "kind": "patch",
          "published_at": "2026-05-11T19:25:46Z"
        },
        {
          "tag": "v0.17.10",
          "kind": "patch",
          "published_at": "2026-05-11T19:22:50Z"
        },
        {
          "tag": "v0.17.9",
          "kind": "patch",
          "published_at": "2026-05-10T08:24:14Z"
        },
        {
          "tag": "v0.17.8",
          "kind": "patch",
          "published_at": "2026-05-07T18:57:24Z"
        },
        {
          "tag": "v0.17.7",
          "kind": "patch",
          "published_at": "2026-05-07T17:59:45Z"
        },
        {
          "tag": "v0.17.6",
          "kind": "patch",
          "published_at": "2026-05-06T00:34:23Z"
        },
        {
          "tag": "v0.17.5",
          "kind": "patch",
          "published_at": "2026-05-01T00:38:27Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2026-04-26T00:32:12Z"
        },
        {
          "tag": "v0.17.4",
          "kind": "patch",
          "published_at": "2026-04-21T06:06:12Z"
        },
        {
          "tag": "v0.17.3",
          "kind": "patch",
          "published_at": "2026-04-15T12:00:47Z"
        },
        {
          "tag": "v0.17.2",
          "kind": "patch",
          "published_at": "2026-04-15T11:37:48Z"
        },
        {
          "tag": "v0.17.1",
          "kind": "patch",
          "published_at": "2026-04-15T08:57:47Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-04-15T07:12:57Z"
        },
        {
          "tag": "v0.16.13",
          "kind": "patch",
          "published_at": "2026-04-14T18:51:29Z"
        },
        {
          "tag": "v0.16.12",
          "kind": "patch",
          "published_at": "2026-04-14T18:26:38Z"
        },
        {
          "tag": "v0.16.11",
          "kind": "patch",
          "published_at": "2026-04-14T17:45:08Z"
        },
        {
          "tag": "v0.16.10",
          "kind": "patch",
          "published_at": "2026-04-14T17:07:01Z"
        },
        {
          "tag": "v0.16.9",
          "kind": "patch",
          "published_at": "2026-04-14T16:49:34Z"
        },
        {
          "tag": "v0.16.8",
          "kind": "patch",
          "published_at": "2026-04-14T13:23:56Z"
        },
        {
          "tag": "v0.16.7",
          "kind": "patch",
          "published_at": "2026-04-14T12:34:49Z"
        },
        {
          "tag": "v0.16.6",
          "kind": "patch",
          "published_at": "2026-04-14T11:47:56Z"
        },
        {
          "tag": "v0.16.5",
          "kind": "patch",
          "published_at": "2026-04-14T10:04:03Z"
        },
        {
          "tag": "v0.16.4",
          "kind": "patch",
          "published_at": "2026-04-14T06:10:15Z"
        },
        {
          "tag": "v0.16.3",
          "kind": "patch",
          "published_at": "2026-04-14T04:05:57Z"
        },
        {
          "tag": "v0.16.2",
          "kind": "patch",
          "published_at": "2026-04-14T03:32:35Z"
        },
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2026-04-13T21:37:39Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-04-12T16:35:21Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-04-11T00:25:43Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-04-09T09:48:53Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2026-04-08T07:15:23Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2026-04-07T06:41:10Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-04-07T06:35:22Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-04-07T06:05:22Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-04-07T05:53:25Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-04-07T05:29:50Z"
        },
        {
          "tag": "v0.4.32",
          "kind": "patch",
          "published_at": "2026-04-06T00:27:04Z"
        },
        {
          "tag": "v0.4.31",
          "kind": "patch",
          "published_at": "2026-04-04T16:01:04Z"
        },
        {
          "tag": "v0.4.30",
          "kind": "patch",
          "published_at": "2026-04-03T10:03:15Z"
        },
        {
          "tag": "v0.4.29",
          "kind": "patch",
          "published_at": "2026-04-03T09:52:22Z"
        },
        {
          "tag": "v0.4.28",
          "kind": "patch",
          "published_at": "2026-04-03T09:24:57Z"
        },
        {
          "tag": "v0.4.27",
          "kind": "patch",
          "published_at": "2026-04-03T08:27:08Z"
        },
        {
          "tag": "v0.4.26",
          "kind": "patch",
          "published_at": "2026-03-31T14:01:17Z"
        },
        {
          "tag": "v0.4.25",
          "kind": "patch",
          "published_at": "2026-03-31T13:45:35Z"
        },
        {
          "tag": "v0.4.24",
          "kind": "patch",
          "published_at": "2026-03-31T10:28:39Z"
        },
        {
          "tag": "v0.4.23",
          "kind": "patch",
          "published_at": "2026-03-31T10:22:45Z"
        },
        {
          "tag": "v0.4.11",
          "kind": "patch",
          "published_at": "2026-03-31T00:26:14Z"
        },
        {
          "tag": "v0.4.10",
          "kind": "patch",
          "published_at": "2026-03-29T07:26:46Z"
        },
        {
          "tag": "v0.4.9",
          "kind": "patch",
          "published_at": "2026-03-29T07:01:15Z"
        },
        {
          "tag": "v0.4.8",
          "kind": "patch",
          "published_at": "2026-03-28T16:41:17Z"
        },
        {
          "tag": "v0.4.7",
          "kind": "patch",
          "published_at": "2026-03-28T16:07:34Z"
        },
        {
          "tag": "v0.4.6",
          "kind": "patch",
          "published_at": "2026-03-28T15:35:38Z"
        },
        {
          "tag": "v0.4.5",
          "kind": "patch",
          "published_at": "2026-03-28T15:22:17Z"
        },
        {
          "tag": "v0.4.4",
          "kind": "patch",
          "published_at": "2026-03-28T15:03:27Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2026-03-28T12:45:53Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2026-03-28T11:55:43Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-03-28T11:27:47Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-03-28T09:34:21Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-03-26T00:25:48Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-03-23T10:08:05Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-03-23T08:54:10Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-03-23T07:02:49Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-03-22T11:12:34Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-03-20T08:51:26Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-03-14T11:48:45Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "dc09df271c2c50f340d17cc89262c618ae3002b1",
          "body": "Bumps the production-dependencies group with 2 updates: [github.com/pitabwire/frame/v2](https://github.com/pitabwire/frame) and [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/pitabwire/frame/v2` from 2.0.7 to 2.0.8\n- [Release notes](https://github.com/pit\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#277)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T09:08:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "906994f3915c38a8eda25e21eb2e28845f559391",
          "body": "Pick up tenancy RLS session-binding hardening (opt-in semantics preserved).",
          "is_bot": false,
          "headline": "deps: bump frame/v2 to v2.0.7 (#276)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-07-21T18:50:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87bbbd0af9ba4dca62264439ee1f8127923f8f98",
          "body": "Bumps the production-dependencies group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/antinvestor/common/v2](https://github.com/antinvestor/common) | `2.0.0` | `2.0.1` |\n| [github.com/antinvestor/service-trustage](https://github.com/antinvestor/service-trustage) | `0.3.6\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 6 updates (#275)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T09:09:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b4d6b3df6ee16575037d50ad9b0d65f494e52f36",
          "body": "Upgrade github.com/pitabwire/frame/v2 for queue push multiplexing\n(Knative Events + Cloud Tasks).",
          "is_bot": false,
          "headline": "chore(deps): bump frame to v2.0.6",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-07-20T12:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c907a6dfd08e8107e2c3e32ba0bb9ba5f1dc149",
          "body": "…n (#274)\n\nBumps [drift](https://github.com/simolus3/drift) from 2.34.1 to 2.34.2.\n- [Release notes](https://github.com/simolus3/drift/releases)\n- [Commits](https://github.com/simolus3/drift/compare/drift-2.34.1...drift-2.34.2)\n\n---\nupdated-dependencies:\n- dependency-name: drift\n  dependency-version\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump drift from 2.34.1 to 2.34.2 in /ui/old-implementatio…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T18:10:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "22e28b3b56d9499b8c9e7f1c819413c06aa8f159",
          "body": "Bumps [drift_flutter](https://github.com/simolus3/drift) from 0.3.0 to 0.3.1.\n- [Release notes](https://github.com/simolus3/drift/releases)\n- [Commits](https://github.com/simolus3/drift/compare/drift_flutter-0.3.0...drift_flutter-0.3.1)\n\n---\nupdated-dependencies:\n- dependency-name: drift_flutter\n  d\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump drift_flutter in /ui/old-implementation (#273)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T18:07:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a45a6525e2231daf0be9c57c2e2043ba7a3623e",
          "body": "Bumps [connectivity_plus](https://github.com/fluttercommunity/plus_plugins/tree/main/packages/connectivity_plus) from 7.2.0 to 7.3.0.\n- [Release notes](https://github.com/fluttercommunity/plus_plugins/releases)\n- [Commits](https://github.com/fluttercommunity/plus_plugins/commits/connectivity_plus-v7\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump connectivity_plus in /ui/old-implementation (#272)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T18:06:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "18aef5f9ae95a817def9979825b096c90b4ad10e",
          "body": "Bumps [google_fonts](https://github.com/flutter/packages/tree/main/packages) from 8.1.0 to 8.2.0.\n- [Commits](https://github.com/flutter/packages/commits/google_fonts-v8.2.0/packages)\n\n---\nupdated-dependencies:\n- dependency-name: google_fonts\n  dependency-version: 8.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump google_fonts in /ui/old-implementation (#271)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T18:06:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fadc026d516b50f10be9efdd01be9d46bebf6af",
          "body": "Bumps the production-dependencies group with 2 updates: [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto).\n\n\nUpdates `google.golang.org/api` from 0.288.0 to 0.289.0\n- [Release notes](\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#270)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T09:08:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b891489847dac9e9917980bc73d29b16c5e515c1",
          "body": "Bumps the production-dependencies group with 2 updates: [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `cloud.google.com/go/pubsub` from 1.50.4 to 1.51.0\n- [Release notes](https://github.com/googlea\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#269)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T09:09:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76b78efa1fcc87ac2fad2f09f1885453b0f4f7db",
          "body": "---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/field/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-92f7f0a31d8b.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/field/connectrpc/go (#266)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:25:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77a00b89d800dffdd485647eb27d7fb8ba6aa31a",
          "body": "…268)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/limits/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-f7ed287d7dff.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/limits/connectrpc/go (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:25:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6baff7648db54a2cc0938a2e29a4a6cd684199bf",
          "body": "…#265)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/profile/connectrpc/go\n  dependency-version: 1.20.0-20260709214326-6f6e8857a1e6.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/profile/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:24:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "414bbfb2ddba508e8064dd40c643b149e7c5f33c",
          "body": "---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/files/connectrpc/go\n  dependency-version: 1.20.0-20260709215054-48b5c99c48f3.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/files/connectrpc/go (#263)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:24:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38c0d857f207b0d8d1a7c98c9cd2a1282e9b314f",
          "body": "---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/audit/connectrpc/go\n  dependency-version: 1.20.0-20260709203043-d15c1412493f.1\n  dependency-type: indirect\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/audit/connectrpc/go (#257)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:22:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16148feafb0b22576258dbab32a420dd36b665c6",
          "body": "---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/loans/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-5f3ebfd08539.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/loans/connectrpc/go (#267)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:22:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1a11ec90f6acbb9b6c6c51fc99de9b380b7b900",
          "body": "…#261)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/tenancy/connectrpc/go\n  dependency-version: 1.20.0-20260709203041-c02aadb0111f.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/tenancy/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:20:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7cecc3f8ea67bbdf2eaa810211cb6d96c5711113",
          "body": "…(#259)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/identity/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-010e57de534c.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/identity/connectrpc/go …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:19:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4cca5619999bb5139afb1b91f84b4bcfbfd5a0e",
          "body": "…/go (#258)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/profile/protocolbuffers/go\n  dependency-version: 1.36.11-20260709214326-6f6e8857a1e6.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/profile/protocolbuffers…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:19:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce52ad086c1d02c19a13c4e0c147bc60631a7cfd",
          "body": "…o (#256)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/files/protocolbuffers/go\n  dependency-version: 1.36.11-20260709215054-48b5c99c48f3.1\n  dependency-type: indirect\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/files/protocolbuffers/g…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:18:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed0cdedf52c9cb3038de9633f4a8ff07b53dfe0c",
          "body": "Bumps the production-dependencies group with 2 updates: [github.com/antinvestor/service-trustage](https://github.com/antinvestor/service-trustage) and [github.com/lmittmann/tint](https://github.com/lmittmann/tint).\n\n\nUpdates `github.com/antinvestor/service-trustage` from 0.3.60 to 0.3.61\n- [Release \n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#255)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T09:18:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a101a6c35d2d567633c6ac109a6cad5239f8a3f4",
          "body": "Align with platform identity (sub===profile_id via NormalizeIdentity)\nand reliable permission registration against tenancy.",
          "is_bot": false,
          "headline": "chore(deps): bump frame/v2 to v2.0.5 (#254)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-07-11T04:45:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7b7e19dfef4818cbd72c3bb27563ec0adc7339c",
          "body": "…ion (#253)\n\n---\nupdated-dependencies:\n- dependency-name: app_links\n  dependency-version: 7.2.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump app_links from 7.2.0 to 7.2.1 in /ui/old-implementat…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T18:07:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60d0a0ed374e3104c611ad93cdb80a147597c574",
          "body": "…n (#252)\n\nBumps [drift](https://github.com/simolus3/drift) from 2.34.0 to 2.34.1.\n- [Release notes](https://github.com/simolus3/drift/releases)\n- [Commits](https://github.com/simolus3/drift/compare/drift-2.34.0...drift-2.34.1)\n\n---\nupdated-dependencies:\n- dependency-name: drift\n  dependency-version\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump drift from 2.34.0 to 2.34.1 in /ui/old-implementatio…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T18:07:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d047edb6b05b14347dc66e4e0b344cbf44cce9e9",
          "body": "---\nupdated-dependencies:\n- dependency-name: build_runner\n  dependency-version: 2.15.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump build_runner in /ui/old-implementation (#251)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T18:07:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6478373d86ac0e3a54d2b5b6af91a3e640c20c18",
          "body": "…248)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/ledger/connectrpc/go\n  dependency-version: 1.20.0-20260709214338-fcdd6e08a283.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/ledger/connectrpc/go (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:39:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e9372e20aa9b5b2fb2d05e756b6603a4ba4af03",
          "body": "…#250)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/payment/connectrpc/go\n  dependency-version: 1.20.0-20260709214338-d7f951ea5a6e.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/payment/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:38:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac8e8c0ae437b1dbb0efca77002dea97ce4d908d",
          "body": "…/go (#249)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/notification/connectrpc/go\n  dependency-version: 1.20.0-20260709214330-626c8192b906.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/notification/connectrpc…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:34:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e602e22def0e7e2368f62f0132e0ce697b56316b",
          "body": "…#246)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/funding/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-e20408cc729f.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/funding/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:32:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1796736d79b2dc534aab3e076f041b03fc3be54e",
          "body": "…#243)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/savings/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-53b54a6e6029.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/savings/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2719d3d907187cc058760c214e38bbed03ce50c",
          "body": "…o (#242)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/operations/connectrpc/go\n  dependency-version: 1.20.0-20260709214610-7dc983e854b8.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/operations/connectrpc/g…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:27:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "455ecbad10af93df5276dda17f624626dcae9e7f",
          "body": "Bumps the production-dependencies group with 3 updates: [github.com/antinvestor/service-trustage](https://github.com/antinvestor/service-trustage), [github.com/prometheus/common](https://github.com/prometheus/common) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).\n\n\n\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 3 updates (#241)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T09:25:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "923a1464ba7204437a36551bc6a64a13e13bc19a",
          "body": "* chore(deps): migrate to pitabwire/frame/v2@v2.0.3\n\nRewrite imports for frame/v2 and common/v2, update go.mod/go.sum, and fix compile breaks from ServiceTarget/ServiceID and related v2 APIs.\n\nAlso migrate identity login clients to tenancy AuthContract CreateOAuthClient/GetOAuthClient (CreateClient removed from TenancyService on main).\n\n* chore: goimports after frame/v2 migration",
          "is_bot": false,
          "headline": "chore(deps): migrate to frame/v2@v2.0.3 (#240)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-07-09T21:12:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9585a2561868524cc409c8d98dbdd9a685950626",
          "body": "Bumps the production-dependencies group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) | `1.50.3` | `1.50.4` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.53.0` | `0.54.0` |\n| [golang.org/x\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 6 updates (#239)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T09:09:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aedc0edff9610c7ba4cad950f1a7569b16c616bc",
          "body": "Bumps the production-dependencies group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) | `1.50.2` | `1.50.3` |\n| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.29.1` | `0.29.2` |\n| [github.\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 7 updates (#237)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-08T09:08:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c658a18ed95c750cb9b95da587678d057efb7357",
          "body": "…up (#236)\n\nBumps the production-dependencies group with 1 update: [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/text` from 0.38.0 to 0.39.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.38.0...v0.39.0)\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump golang.org/x/text in the production-dependencies gro…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T09:08:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d315647abb965efcaaa22de46159a42262a63c2",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/google/cel-go](https://github.com/google/cel-go).\n\n\nUpdates `github.com/google/cel-go` from 0.28.1 to 0.29.1\n- [Release notes](https://github.com/google/cel-go/releases)\n- [Commits](https://github.com/google/cel-go/compare/v0.28.1...\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/google/cel-go (#235)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T09:15:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8755e2065622f914fc3acaebbaf27d4c80078010",
          "body": "Bumps [image_picker](https://github.com/flutter/packages/tree/main/packages/image_picker) from 1.2.2 to 1.2.3.\n- [Commits](https://github.com/flutter/packages/commits/image_picker-v1.2.3/packages/image_picker)\n\n---\nupdated-dependencies:\n- dependency-name: image_picker\n  dependency-version: 1.2.3\n  d\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump image_picker in /ui/old-implementation (#234)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T18:06:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5512796d6253d006d293c8af8f93e983827957ad",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/klauspost/compress](https://github.com/klauspost/compress).\n\n\nUpdates `github.com/klauspost/compress` from 1.18.7 to 1.19.0\n- [Release notes](https://github.com/klauspost/compress/releases)\n- [Commits](https://github.com/klauspost/co\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/klauspost/compress (#233)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T09:07:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9fd7c247c89c6617261e696c98ef3c3453657115",
          "body": "…#231)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/tenancy/connectrpc/go\n  dependency-version: 1.20.0-20260629120315-dfdba54ae9d9.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/tenancy/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T09:17:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a0df0d36960da87d0097bf77974f3c958004dea",
          "body": "Bumps the production-dependencies group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/pitabwire/frame](https://github.com/pitabwire/frame) | `1.98.4` | `1.98.5` |\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.18.7` |\n| [github.c\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 7 updates (#232)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T09:14:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e685ebcf712642506e6f7bc9369c2e75a8abfff6",
          "body": "…/go (#230)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/tenancy/protocolbuffers/go\n  dependency-version: 1.36.11-20260629120315-dfdba54ae9d9.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/tenancy/protocolbuffers…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-30T09:08:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb073a2c271d90cc3def3d24346870d21b5c1f2e",
          "body": "…#228)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/tenancy/connectrpc/go\n  dependency-version: 1.20.0-20260629054636-19bb401b07c4.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/tenancy/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T09:16:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ceb125ba69ec3e4c34066e22d93f4b045f4c4192",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/prometheus/procfs](https://github.com/prometheus/procfs).\n\n\nUpdates `github.com/prometheus/procfs` from 0.20.1 to 0.21.0\n- [Release notes](https://github.com/prometheus/procfs/releases)\n- [Commits](https://github.com/prometheus/procf\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/prometheus/procfs (#227)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T09:16:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d804c50553dfdd4c42c85febbf674422384e4515",
          "body": "Bumps [connectivity_plus](https://github.com/fluttercommunity/plus_plugins/tree/main/packages/connectivity_plus) from 7.1.1 to 7.2.0.\n- [Release notes](https://github.com/fluttercommunity/plus_plugins/releases)\n- [Commits](https://github.com/fluttercommunity/plus_plugins/commits/connectivity_plus-v7\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump connectivity_plus in /ui/old-implementation (#226)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-26T18:06:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9888593173c99672fce43e9c08841b70edfaa2f7",
          "body": "…ion (#225)\n\nBumps [app_links](https://github.com/llfbandit/app_links) from 7.1.2 to 7.2.0.\n- [Release notes](https://github.com/llfbandit/app_links/releases)\n- [Commits](https://github.com/llfbandit/app_links/compare/7.1.2...7.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: app_links\n  dependenc\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump app_links from 7.1.2 to 7.2.0 in /ui/old-implementat…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-26T18:06:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "655e367958045c0d3e45c63785b6fe23552f645a",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/moby/sys/user](https://github.com/moby/sys).\n\n\nUpdates `github.com/moby/sys/user` from 0.4.0 to 0.4.1\n- [Release notes](https://github.com/moby/sys/releases)\n- [Commits](https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1)\n\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/moby/sys/user (#224)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-26T09:07:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f1c3b88a27691166b384156fcf2b4bebc067c3c9",
          "body": "…223)\n\nBumps the production-dependencies group with 1 update: [gorm.io/gorm](https://github.com/go-gorm/gorm).\n\n\nUpdates `gorm.io/gorm` from 1.31.1 to 1.31.2\n- [Release notes](https://github.com/go-gorm/gorm/releases)\n- [Commits](https://github.com/go-gorm/gorm/compare/v1.31.1...v1.31.2)\n\n---\nupdate\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump gorm.io/gorm in the production-dependencies group (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T09:07:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff38c2216da53d62cd19c9c9d4791fb05cda5d5d",
          "body": "Bumps the production-dependencies group with 1 update: [google.golang.org/api](https://github.com/googleapis/google-api-go-client).\n\n\nUpdates `google.golang.org/api` from 0.285.0 to 0.286.0\n- [Release notes](https://github.com/googleapis/google-api-go-client/releases)\n- [Changelog](https://github.co\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump google.golang.org/api (#222)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T09:08:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d59b0e4b7836867890f9673a74dbfe0ccd73b29",
          "body": "Bumps the production-dependencies group with 3 updates: [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe), [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) and [github.com/testcontainers/testcontainers-go/modules/postgres](https:/\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 3 updates (#221)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T09:16:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a8b3979ba784cc17946832006cb07889e9b9ff30",
          "body": "Bumps the production-dependencies group with 3 updates: [github.com/antinvestor/common](https://github.com/antinvestor/common), [github.com/moby/moby/api](https://github.com/moby/moby) and [github.com/moby/moby/client](https://github.com/moby/moby).\n\n\nUpdates `github.com/antinvestor/common` from 1.5\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 3 updates (#220)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-19T09:08:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "294109ecf1d8a330bc2c6f1596c5df19df0480ae",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci(deps): bump actions/checkout from 6 to 7 (#219)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-19T09:08:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e97428392153d5d14b303720c702e2a89e16c9d1",
          "body": "…#217)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/payment/connectrpc/go\n  dependency-version: 1.20.0-20260612103037-9360f7ab38b4.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/payment/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T09:11:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d326c572f54abcaf450ceedc22f571c8f65b838d",
          "body": "Bumps the production-dependencies group with 4 updates: [github.com/prometheus/common](https://github.com/prometheus/common), [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe), [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [google.golang.org/genp\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 4 updates (#218)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T09:08:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e72a750f63109000eeb30dae0d7b19af883ef5f9",
          "body": "…/go (#216)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/payment/protocolbuffers/go\n  dependency-version: 1.36.11-20260612103037-9360f7ab38b4.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/payment/protocolbuffers…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T09:20:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a084b8c4bd054ed939969cc5063ad7ae97b4c1b",
          "body": "Bumps [flutter_riverpod](https://github.com/rrousselGit/riverpod) from 3.3.1 to 3.3.2.\n- [Commits](https://github.com/rrousselGit/riverpod/compare/flutter_riverpod-v3.3.1...flutter_riverpod-v3.3.2)\n\n---\nupdated-dependencies:\n- dependency-name: flutter_riverpod\n  dependency-version: 3.3.2\n  dependenc\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump flutter_riverpod in /ui/old-implementation (#214)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:09:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48d1736914f03bc5f400cfd7b583f25248f7e62e",
          "body": "Bumps [drift_dev](https://github.com/simolus3/drift) from 2.33.0 to 2.34.0.\n- [Release notes](https://github.com/simolus3/drift/releases)\n- [Commits](https://github.com/simolus3/drift/compare/drift_dev-2.33.0...drift_dev-2.34.0)\n\n---\nupdated-dependencies:\n- dependency-name: drift_dev\n  dependency-ve\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump drift_dev in /ui/old-implementation (#213)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:08:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "faba251d8638eae07c5ded4f86a863546cdabe7c",
          "body": "Bumps [geolocator](https://github.com/baseflow/flutter-geolocator) from 14.0.2 to 14.0.3.\n- [Commits](https://github.com/baseflow/flutter-geolocator/compare/geolocator_v14.0.2...geolocator_14.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: geolocator\n  dependency-version: 14.0.3\n  dependency-type\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump geolocator in /ui/old-implementation (#212)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:08:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c08787c95621e280f803daa041b396c30441150",
          "body": "Bumps [go_router](https://github.com/flutter/packages/tree/main/packages) from 17.2.1 to 17.3.0.\n- [Commits](https://github.com/flutter/packages/commits/go_router-v17.3.0/packages)\n\n---\nupdated-dependencies:\n- dependency-name: go_router\n  dependency-version: 17.3.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump go_router in /ui/old-implementation (#211)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:07:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b00ca0405d7f487a0be2f310d0be7bf619d434b",
          "body": "…n (#210)\n\nBumps [drift](https://github.com/simolus3/drift) from 2.33.0 to 2.34.0.\n- [Release notes](https://github.com/simolus3/drift/releases)\n- [Commits](https://github.com/simolus3/drift/compare/drift-2.33.0...drift-2.34.0)\n\n---\nupdated-dependencies:\n- dependency-name: drift\n  dependency-version\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump drift from 2.33.0 to 2.34.0 in /ui/old-implementatio…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:06:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc56d21051dda0798e644a98cea882ddcc0726a3",
          "body": "Bumps [riverpod_annotation](https://github.com/rrousselGit/riverpod) from 4.0.2 to 4.0.3.\n- [Commits](https://github.com/rrousselGit/riverpod/compare/riverpod_annotation-v4.0.2...riverpod_annotation-v4.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: riverpod_annotation\n  dependency-version: 4.0.3\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump riverpod_annotation in /ui/old-implementation (#209)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:06:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "af126f05bb7633bff962bcf045851cc4a4cefb1f",
          "body": "…ion (#208)\n\nBumps [app_links](https://github.com/llfbandit/app_links) from 7.1.1 to 7.1.2.\n- [Release notes](https://github.com/llfbandit/app_links/releases)\n- [Commits](https://github.com/llfbandit/app_links/compare/7.1.1...7.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: app_links\n  dependenc\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump app_links from 7.1.1 to 7.1.2 in /ui/old-implementat…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T18:06:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a6f28fc70398c8a122a60d6e59699757df1ae5b",
          "body": "…#207)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/profile/connectrpc/go\n  dependency-version: 1.20.0-20260612021939-e32a27e4910e.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/profile/connectrpc/go (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T09:15:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14d3f039fe9b0e0424907dcb48480217d4cccca1",
          "body": "…/go (#206)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/profile/protocolbuffers/go\n  dependency-version: 1.36.11-20260612021939-e32a27e4910e.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump buf.build/gen/go/antinvestor/profile/protocolbuffers…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T09:13:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1da71474e878d61a8dad7fd6afc2d08f3cb5da1d",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/felixge/httpsnoop](https://github.com/felixge/httpsnoop).\n\n\nUpdates `github.com/felixge/httpsnoop` from 1.0.4 to 1.1.0\n- [Release notes](https://github.com/felixge/httpsnoop/releases)\n- [Commits](https://github.com/felixge/httpsnoop/\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/felixge/httpsnoop (#205)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T09:12:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28ec267592a408d75452e17afe20a56e6b1297cb",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/antinvestor/service-trustage](https://github.com/antinvestor/service-trustage).\n\n\nUpdates `github.com/antinvestor/service-trustage` from 0.3.55 to 0.3.59\n- [Release notes](https://github.com/antinvestor/service-trustage/releases)\n- [\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/antinvestor/service-trustage (#204)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-11T09:08:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f822edd97786ec0aec69f8ba7ba57549b626a170",
          "body": "… (#203)\n\nReplace the bespoke RestAnalyticsDataSource with ui_core 0.5.0's\nThesaAnalyticsDataSource (exact gate contract: nested time_range,\nstep granularity, AnalyticsQueryException on non-200, client-side\nstripping of reserved tenancy filters). A thin SeedAnalyticsDataSource\nsubclass adds the one \n[…]\nassert the exact\n  request body per KPI/chart and the loading/error/empty states.\n\nLocal dev consumes ui_core via gitignored pubspec_overrides.yaml;\npubspec.yaml stays on the hosted ^0.5.0 constraint.",
          "is_bot": false,
          "headline": "feat(seed): converge dashboard onto standardized Thesa analytics gate…",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T22:19:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6aa9fce201679ff546049d9bf334e82d71360bf",
          "body": "…me v1.98.4 (#202)\n\n* deps: pin frame v1.98.4 (drop local dev replace)\n\n* feat(telemetry): migrate business counters to frame's tenant-scoped BusinessMetrics\n\nConvert all 31 custom business instruments across the five app metrics\nfiles (operations, funding, savings, loans, identity) from raw OTel\nme\n[…]\nithAttributes boilerplate) and adds a\nManualReader-based test proving loans_created_total datapoints carry\ntenant_id/partition_id when recorded with a claims context and omit\nthem on claim-less paths.",
          "is_bot": false,
          "headline": "feat(telemetry): transparently tenant-scoped business metrics via fra…",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T22:01:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9d70dcf67d383cdc75b0a47fbc56682168f347da",
          "body": null,
          "is_bot": false,
          "headline": "deps: pin frame v1.98.4 (drop local dev replace) (#201)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T21:48:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0a71b7dc2970c11312622b54c4d4768c7799445",
          "body": "Bumps [antinvestor_api_common](https://github.com/antinvestor/common) from 1.52.0 to 1.53.1.\n- [Release notes](https://github.com/antinvestor/common/releases)\n- [Changelog](https://github.com/antinvestor/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/antinvestor/common/commits/dart/co\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump antinvestor_api_common in /ui/old-implementation (#200)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:34:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f2db684377884d446a4b3ef595e73da9b827d87",
          "body": "Bumps [build_runner](https://github.com/dart-lang/build) from 2.13.1 to 2.15.0.\n- [Release notes](https://github.com/dart-lang/build/releases)\n- [Commits](https://github.com/dart-lang/build/compare/build_runner-v2.13.1...build_runner-v2.15.0)\n\n---\nupdated-dependencies:\n- dependency-name: build_runne\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump build_runner in /ui/old-implementation (#199)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:31:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3474cf450e0af98d6c8c681235427ebb8c4cbf8f",
          "body": "Bumps [drift_flutter](https://github.com/simolus3/drift) from 0.2.8 to 0.3.0.\n- [Release notes](https://github.com/simolus3/drift/releases)\n- [Commits](https://github.com/simolus3/drift/compare/drift_flutter-0.2.8...drift_flutter-0.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: drift_flutter\n  d\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump drift_flutter in /ui/old-implementation (#198)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:31:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "78d7123d5878caaef1b9e34931026e1a13d9afd2",
          "body": "Bumps [flutter_secure_storage](https://github.com/mogol/flutter_secure_storage) from 10.0.0 to 10.3.1.\n- [Release notes](https://github.com/mogol/flutter_secure_storage/releases)\n- [Commits](https://github.com/mogol/flutter_secure_storage/compare/v10.0.0...v10.3.1)\n\n---\nupdated-dependencies:\n- depen\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump flutter_secure_storage in /ui/old-implementation (#197)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:30:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4abece6ff85b1ffa0e7de6f494996d54cefe3612",
          "body": "Bumps [image_picker](https://github.com/flutter/packages/tree/main/packages/image_picker) from 1.2.1 to 1.2.2.\n- [Commits](https://github.com/flutter/packages/commits/image_picker-v1.2.2/packages/image_picker)\n\n---\nupdated-dependencies:\n- dependency-name: image_picker\n  dependency-version: 1.2.2\n  d\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump image_picker in /ui/old-implementation (#196)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:29:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad53b09bbf39a08fad9927b0c30da37c8228542f",
          "body": "…ion (#195)\n\nBumps [app_links](https://github.com/llfbandit/app_links) from 7.0.0 to 7.1.1.\n- [Release notes](https://github.com/llfbandit/app_links/releases)\n- [Commits](https://github.com/llfbandit/app_links/compare/7.0.0...7.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: app_links\n  dependenc\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump app_links from 7.0.0 to 7.1.1 in /ui/old-implementat…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:28:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "911d83c3d9cfa5df6645dd0c6ed71a0312df22e9",
          "body": "Bumps [google_fonts](https://github.com/flutter/packages/tree/main/packages) from 8.0.2 to 8.1.0.\n- [Commits](https://github.com/flutter/packages/commits/google_fonts-v8.1.0/packages)\n\n---\nupdated-dependencies:\n- dependency-name: google_fonts\n  dependency-version: 8.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump google_fonts in /ui/old-implementation (#194)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2397f001c13406cff299fa1e52381fc0eea61948",
          "body": "Bumps the production-dependencies group with 3 updates: [github.com/antinvestor/service-trustage](https://github.com/antinvestor/service-trustage), [github.com/pitabwire/frame](https://github.com/pitabwire/frame) and [golang.org/x/net](https://github.com/golang/net).\n\n\nUpdates `github.com/antinvesto\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 3 updates (#193)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T19:28:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "00ce4ee4c6b2fe6893e71e23eb2c6e3ff75af449",
          "body": "* chore(deps): jose security floor + watch pub ecosystem with dependabot\n\ndependency_overrides floor 'jose: >=0.3.5+1' in both UI apps — the\nGHSA (untrusted JWK header key acceptance, <=0.3.5) is already absent\n(locks pin 0.3.5+2) but nothing previously prevented resolution below\nthe patch. Added pu\n[…]\nted\nbut only present via overrides, which don't declare). The Flutter PR\nworkflow remains red on ui-touching PRs until the UI packages are\npublished; it does not gate main (pull_request trigger only).",
          "is_bot": false,
          "headline": "chore(deps): jose security floor + dependabot pub ecosystem (#192)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T19:25:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "506545fb3525cb85a465a7a521ea2b3a886da266",
          "body": "A 19MB Go ELF binary (output of 'go build ./apps/<app>/cmd/' run from\nthe repo root) was committed. Removed and root-anchored '/cmd' added\nto .gitignore — apps/*/cmd source directories are unaffected.",
          "is_bot": false,
          "headline": "chore: remove tracked root 'cmd' build artifact, ignore it (#191)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T18:10:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5165a506c48d13e9c7f93c244658df266f1192ab",
          "body": "…#190)\n\n* fix(identity): exercise Postgres RLS in raw-AutoMigrate test suites\n\nframe >=v1.95 enforces tenant isolation via Postgres row-level\nsecurity, but the identity app's three raw-AutoMigrate suites\n(business/approval_workflow, business/org_unit, repository/migrate)\ninstalled no policies and ra\n[…]\nuseless ones, gochecknoglobals nolints for cobra flag vars\n\nNo behavior changes; all suites pass with -count=1 (limits, identity,\nfunding, loans, savings, operations, stawi, pkg/limits, limits-admin).",
          "is_bot": false,
          "headline": "fix(identity): exercise Postgres RLS in raw-AutoMigrate test suites (…",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T17:34:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a1106e858b3d7265e9e10229721159b7c17a0d9",
          "body": "Picks up pitabwire/util v0.9.1 via frame: MultiHandler now respects each\nchild handler's Enabled level, so LOG_LEVEL=info actually suppresses\nDEBUG output (SQL query logs, per-event ack logs) when OTel telemetry\nis enabled.",
          "is_bot": false,
          "headline": "deps: bump pitabwire/frame to v1.98.1 (#189)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-10T09:54:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3382311c1fa73c05d42f85ed7905403e15f4b55a",
          "body": "Bumps the production-dependencies group with 1 update: [google.golang.org/api](https://github.com/googleapis/google-api-go-client).\n\n\nUpdates `google.golang.org/api` from 0.283.0 to 0.284.0\n- [Release notes](https://github.com/googleapis/google-api-go-client/releases)\n- [Changelog](https://github.co\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump google.golang.org/api (#188)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T09:09:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a580954db30b6dd61c1272e3cf490479833521c",
          "body": "Bumps the production-dependencies group with 4 updates: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/sync](https://github.com/golang/sync), [golang.org/x/sys](https://github.com/golang/sys) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/cry\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 4 updates (#187)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T09:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d57d1cbc90faf44db89e0cfb2b84d453c67ab37a",
          "body": "Adopt frame v1.98.0 (telemetry on OTel v1.44 / semconv v1.41) and align the\nOpenTelemetry stack to v1.44 + gocloud v0.46. Resolves the resource.Merge\n'conflicting Schema URL' (1.41.0 vs 1.40.0) telemetry-init failure.",
          "is_bot": false,
          "headline": "chore(deps): frame v1.98.0, OpenTelemetry v1.44, gocloud v0.46 (#186)",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-06-08T19:20:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16f5cc25dae152400668cf3e30b9a478922bd1e5",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/moby/sys/sequential](https://github.com/moby/sys).\n\n\nUpdates `github.com/moby/sys/sequential` from 0.6.0 to 0.7.0\n- [Release notes](https://github.com/moby/sys/releases)\n- [Commits](https://github.com/moby/sys/compare/signal/v0.6.0..\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/moby/sys/sequential (#185)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T09:22:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "25424fab0122fc077d57fd4ba7477a294cf5168c",
          "body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6 to 7.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci(deps): bump codecov/codecov-action from 6 to 7 (#184)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T09:21:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e0d7894c7ec77a9cfd0f5e1cc66943e2f595c17e",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/pitabwire/frame](https://github.com/pitabwire/frame).\n\n\nUpdates `github.com/pitabwire/frame` from 1.97.6 to 1.97.8\n- [Release notes](https://github.com/pitabwire/frame/releases)\n- [Commits](https://github.com/pitabwire/frame/compare/\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/pitabwire/frame (#183)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T09:06:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e2f6649fedee856046f7c71dc42d1a99976e68dc",
          "body": "Bumps the production-dependencies group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/nats-io/nkeys](https://github.com/nats-io/nkeys) | `0.4.15` | `0.4.16` |\n| [github.com/prometheus/common\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 5 updates (#182)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T23:31:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf56c9a3f8f219b2fd53bf6c8caf234e7be1280d",
          "body": "Bumps the production-dependencies group with 3 updates: [github.com/prometheus/common](https://github.com/prometheus/common), [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).\n\n\nUpdates `github.com/pro\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 3 updates (#181)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-02T03:46:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f47d60748822256eb498a261cfb1f0111f79b190",
          "body": "…180)\n\nBumps the production-dependencies group with 32 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/antinvestor/service-trustage](https://github.com/antinvestor/service-trustage) | `0.3.51` | `0.3.52` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemet\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 32 updates (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-28T09:53:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "22cb2e145517550ef482a9a8b4e51472f83808f1",
          "body": "Bakes workflow definitions into the Docker image at /workflows and\nsyncs them to Trustage during DO_DATABASE_MIGRATE=true. Seed has no\nworkflows yet but the plumbing is ready.",
          "is_bot": false,
          "headline": "feat(stawi,seed): wire Trustage workflow loader into migration Jobs",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-05-28T02:30:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca2461b5cc7472555beac408938b30a5555bcdbc",
          "body": "Bumps the production-dependencies group with 2 updates: [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto).\n\n\nUpdates `google.golang.org/api` from 0.280.0 to 0.281.0\n- [Release notes](\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#179)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-27T11:14:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1520a403012ef2221d2ab9e1ac2b26cdfab672f2",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/ebitengine/purego](https://github.com/ebitengine/purego).\n\n\nUpdates `github.com/ebitengine/purego` from 0.10.0 to 0.10.1\n- [Release notes](https://github.com/ebitengine/purego/releases)\n- [Commits](https://github.com/ebitengine/pureg\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/ebitengine/purego (#178)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-26T16:43:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dba06c8d4f228222eddabb7a57223d7f237303eb",
          "body": "Bumps the production-dependencies group with 1 update: [github.com/panjf2000/ants/v2](https://github.com/panjf2000/ants).\n\n\nUpdates `github.com/panjf2000/ants/v2` from 2.12.0 to 2.12.1\n- [Release notes](https://github.com/panjf2000/ants/releases)\n- [Commits](https://github.com/panjf2000/ants/compare\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump github.com/panjf2000/ants/v2 (#177)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-25T14:03:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "68752f3608f29ac2808228ebc78425518305d29a",
          "body": "…176)\n\n---\nupdated-dependencies:\n- dependency-name: buf.build/gen/go/antinvestor/field/connectrpc/go\n  dependency-version: 1.20.0-20260509052652-a3bbaa6e5d2d.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: production-dependencies\n- dependency-nam\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 17 updates (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-22T09:27:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d7e9eaff10341f7a76d6410b0b477b5424e2eb3",
          "body": "Frame v1.97.6 converts WithPermissionRegistration's Fatal-on-failure\nto a background retry-with-backoff loop (1s, 2s, 5s, 10s, 20s, 30s,\n60s thereafter). This prevents pods from crashlooping forever when\nthe tenancy registration endpoint or the OAuth2 signer endpoint is\nbriefly unreachable — notably\n[…]\nts of the auth\nservice where its own signer isn't Ready yet (self-bootstrap window).\n\nUpstream: pitabwire/frame@5c0707b \"fix(permissions): retry-with-backoff\ninstead of Fatal on registration failure\".",
          "is_bot": false,
          "headline": "chore(deps): bump pitabwire/frame to v1.97.6",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-05-22T02:40:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8cc10212afd607cc295dd916f9c52c1639456275",
          "body": "Frame v1.97.5 fixes a double JSON-marshal bug in\nWithPermissionRegistration's publishManifest. The previous version\npre-marshalled the manifest to []byte and passed that to\nHTTPClientManager().Invoke, which re-marshalled — yielding a\nbase64-encoded string instead of a JSON object. Tenancy's\n/_intern\n[…]\nservice_namespaces empty and the OPL\nConfigMap unable to aggregate any service namespaces.\n\nUpstream: pitabwire/frame@df294fa \"fix(permissions): pass manifest\nmap to Invoke, drop double JSON marshal\".",
          "is_bot": false,
          "headline": "chore(deps): bump pitabwire/frame to v1.97.5",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-05-21T21:22:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c5002a9a3529ea0a064df924e0c2d31db3a8792",
          "body": "Frame v1.97.4 drops the DO_MIGRATION=true gate on\nWithPermissionRegistration. The PreStartMethod now fires from every\nsvc.Run when PERMISSIONS_REGISTRATION_URL is set, so this service's\npermission manifest is automatically posted to tenancy on every pod\nstartup (idempotent upsert keyed on namespace)\n[…]\nail atomically with\nNotFound — rolling back the Plane-1 tuple in the same batch.\n\nUpstream: pitabwire/frame@30846eef \"fix(permissions): drop\nDO_MIGRATION gate so registration runs on every pod start\".",
          "is_bot": false,
          "headline": "chore(deps): bump pitabwire/frame to v1.97.4",
          "author_name": "Peter Bwire",
          "author_login": "pitabwire",
          "committed_at": "2026-05-21T20:56:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f976e351e812c433765c5668e1972b329ed4092a",
          "body": "Bumps the production-dependencies group with 2 updates: [connectrpc.com/connect](https://github.com/connectrpc/connect-go) and [github.com/exaring/otelpgx](https://github.com/exaring/otelpgx).\n\n\nUpdates `connectrpc.com/connect` from 1.19.2 to 1.20.0\n- [Release notes](https://github.com/connectrpc/co\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#175)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-21T09:27:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b3cc4498a8db52955c88f4d0ed6ec7db26ca33f",
          "body": "Bumps the production-dependencies group with 2 updates: [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto).\n\n\nUpdates `google.golang.org/api` from 0.279.0 to 0.280.0\n- [Release notes](\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps(deps): bump the production-dependencies group with 2 updates (#174)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T21:35:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 79,
      "commits_last_year": 631,
      "latest_release_at": "2026-07-21T02:12:47Z",
      "latest_release_tag": "v1.96.13",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 19,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 5.7
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 0,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [
        "proto/field/field/v1/field.proto",
        "proto/funding/funding/v1/funding.proto",
        "proto/identity/identity/v1/identity.proto",
        "proto/limits/limits/v1/limits.proto",
        "proto/loans/loans/v1/loans.proto",
        "proto/operations/operations/v1/operations.proto",
        "proto/savings/savings/v1/savings.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "gen/go/field/connectrpc/go/go.mod",
        "gen/go/field/protocolbuffers/go/go.mod",
        "gen/go/identity/connectrpc/go/go.mod",
        "gen/go/identity/protocolbuffers/go/go.mod",
        "go.mod",
        "ui/old-implementation/android/app/build.gradle.kts",
        "ui/old-implementation/android/build.gradle.kts",
        "ui/seed/android/app/build.gradle.kts",
        "ui/seed/android/build.gradle.kts"
      ],
      "largest_source_bytes": 463470,
      "source_files_sampled": 1248,
      "oversized_source_files": 64,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 15
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 185,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "buf.build/gen/go/antinvestor/common/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260509050709-3f270876dbf3.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/field/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-92f7f0a31d8b.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/field/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-92f7f0a31d8b.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/files/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709215054-48b5c99c48f3.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/funding/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-e20408cc729f.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/funding/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-e20408cc729f.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/identity/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-010e57de534c.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/identity/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-010e57de534c.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/ledger/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214338-fcdd6e08a283.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/ledger/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214338-fcdd6e08a283.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/limits/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-f7ed287d7dff.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/limits/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-f7ed287d7dff.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/loans/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-5f3ebfd08539.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/loans/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-5f3ebfd08539.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/notification/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214330-626c8192b906.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/notification/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214330-626c8192b906.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/operations/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-7dc983e854b8.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/operations/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-7dc983e854b8.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/payment/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214338-d7f951ea5a6e.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/payment/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214338-d7f951ea5a6e.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/profile/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214326-6f6e8857a1e6.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/profile/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214326-6f6e8857a1e6.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/savings/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709214610-53b54a6e6029.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/savings/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709214610-53b54a6e6029.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/tenancy/connectrpc/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0-20260709203041-c02aadb0111f.1"
        },
        {
          "name": "buf.build/gen/go/antinvestor/tenancy/protocolbuffers/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11-20260709203041-c02aadb0111f.1"
        },
        {
          "name": "connectrpc.com/connect",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0"
        },
        {
          "name": "github.com/antinvestor/common/audit",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260709203737-8d31a2fefc3a"
        },
        {
          "name": "github.com/antinvestor/common/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.1"
        },
        {
          "name": "github.com/antinvestor/service-trustage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.62"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/hashicorp/golang-lru/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.7"
        },
        {
          "name": "github.com/pitabwire/frame/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.8"
        },
        {
          "name": "github.com/pitabwire/util",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "github.com/pitabwire/util/decimalx",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.2"
        },
        {
          "name": "github.com/pitabwire/util/moneyx",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/tsenart/vegeta/v12",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v12.13.0"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        },
        {
          "name": "gorm.io/datatypes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.7"
        },
        {
          "name": "gorm.io/gorm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.31.2"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "buf.build/gen/go/antinvestor/common/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260509050709-3f270876dbf3.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/field/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-92f7f0a31d8b.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/field/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-92f7f0a31d8b.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/files/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709215054-48b5c99c48f3.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/funding/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-e20408cc729f.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/funding/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-e20408cc729f.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/identity/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-010e57de534c.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/identity/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-010e57de534c.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/ledger/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214338-fcdd6e08a283.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/ledger/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214338-fcdd6e08a283.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/limits/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-f7ed287d7dff.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/limits/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-f7ed287d7dff.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/loans/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-5f3ebfd08539.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/loans/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-5f3ebfd08539.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/notification/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214330-626c8192b906.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/notification/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214330-626c8192b906.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/operations/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-7dc983e854b8.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/operations/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-7dc983e854b8.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/payment/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214338-d7f951ea5a6e.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/payment/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214338-d7f951ea5a6e.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/profile/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214326-6f6e8857a1e6.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/profile/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214326-6f6e8857a1e6.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/savings/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709214610-53b54a6e6029.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/savings/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709214610-53b54a6e6029.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/tenancy/connectrpc/go",
            "direct": true,
            "version": "v1.20.0-20260709203041-c02aadb0111f.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/tenancy/protocolbuffers/go",
            "direct": true,
            "version": "v1.36.11-20260709203041-c02aadb0111f.1",
            "ecosystem": "go"
          },
          {
            "name": "connectrpc.com/connect",
            "direct": true,
            "version": "v1.19.1",
            "ecosystem": "go"
          },
          {
            "name": "connectrpc.com/connect",
            "direct": true,
            "version": "v1.20.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antinvestor/common/audit",
            "direct": true,
            "version": "v0.0.0-20260709203737-8d31a2fefc3a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antinvestor/common/v2",
            "direct": true,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antinvestor/service-trustage",
            "direct": true,
            "version": "v0.3.62",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": true,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pitabwire/frame/v2",
            "direct": true,
            "version": "v2.0.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pitabwire/util",
            "direct": true,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pitabwire/util/decimalx",
            "direct": true,
            "version": "v0.7.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pitabwire/util/moneyx",
            "direct": true,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tsenart/vegeta/v12",
            "direct": true,
            "version": "v12.13.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/datatypes",
            "direct": true,
            "version": "v1.2.7",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/gorm",
            "direct": true,
            "version": "v1.31.2",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/audit/connectrpc/go",
            "direct": false,
            "version": "v1.20.0-20260709203043-d15c1412493f.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/audit/protocolbuffers/go",
            "direct": false,
            "version": "v1.36.11-20260709203043-d15c1412493f.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/antinvestor/files/protocolbuffers/go",
            "direct": false,
            "version": "v1.36.11-20260709215054-48b5c99c48f3.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go",
            "direct": false,
            "version": "v1.36.11-20260709200747-435963d16310.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/gen/go/gnostic/gnostic/protocolbuffers/go",
            "direct": false,
            "version": "v1.36.11-20230414000709-087bc8072ce4.1",
            "ecosystem": "go"
          },
          {
            "name": "buf.build/go/protovalidate",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.2",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/pubsub",
            "direct": false,
            "version": "v1.51.0",
            "ecosystem": "go"
          },
          {
            "name": "connectrpc.com/otelconnect",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antlr4-go/antlr/v4",
            "direct": false,
            "version": "v4.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/caarlos0/env/v11",
            "direct": false,
            "version": "v11.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cockroachdb/apd/v3",
            "direct": false,
            "version": "v3.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/dockercfg",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/exaring/otelpgx",
            "direct": false,
            "version": "v0.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-sql-driver/mysql",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/cel-go",
            "direct": false,
            "version": "v0.29.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/influxdata/tdigest",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgpassfile",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgservicefile",
            "direct": false,
            "version": "v0.0.0-20240606120523-5a60cdf6a761",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgx/v5",
            "direct": false,
            "version": "v5.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/puddle/v2",
            "direct": false,
            "version": "v2.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/inflection",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/now",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lmittmann/tint",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20260330125221-c963978e514e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/go-archive",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/api",
            "direct": false,
            "version": "v1.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/client",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nats.go",
            "direct": false,
            "version": "v1.52.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nkeys",
            "direct": false,
            "version": "v0.4.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nuid",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nicksnyder/go-i18n/v2",
            "direct": false,
            "version": "v2.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ory/keto/proto",
            "direct": false,
            "version": "v0.13.0-alpha.0.0.20260420082854-eb334a7a5cf0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/panjf2000/ants/v2",
            "direct": false,
            "version": "v2.12.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pitabwire/natspubsub",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.70.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/otlptranslator",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/dnscache",
            "direct": false,
            "version": "v0.0.0-20230804202142-fc85eb664529",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/xid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.26.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/postgres",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/otelslog",
            "direct": false,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/prometheus",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/exporters/autoexport",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/propagators/autoprop",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/propagators/aws",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/propagators/b3",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/propagators/jaeger",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/propagators/ot",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/prometheus",
            "direct": false,
            "version": "v0.66.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdoutlog",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdoutmetric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "gocloud.dev",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20260410095643-746e56fc9e2f",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20240903120638-7835f813f4da",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": false,
            "version": "v0.289.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260630182238-925bb5da69e7",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260706201446-f0a921348800",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/mysql",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/postgres",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 185,
        "direct_count": 46,
        "indirect_count": 139
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 255,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 22
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "pitabwire",
          "commits": 404,
          "avatar_url": "https://avatars.githubusercontent.com/u/4368681?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-merge.yaml",
        "changelog.yaml",
        "ci.yaml",
        "ci.yml",
        "dart-publish.yaml",
        "dependabot.yaml",
        "dockerfile-lint.yml",
        "draft-release.yaml",
        "proto.yml",
        "publish-release.yaml",
        "release-branch.yaml",
        "release.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 5,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/3 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "dc09df271c2c50f340d17cc89262c618ae3002b1",
        "ran_at": "2026-07-23T02:37:56Z",
        "aggregate_score": 4.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T09:11:15Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-22T09:08:19Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/antinvestor/service-fintech",
    "host": "github.com",
    "name": "service-fintech",
    "owner": "antinvestor"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 50,
      "inputs": {
        "security": 54,
        "vitality": 86,
        "community": 1,
        "governance": 41,
        "engineering": 60
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "commits_last_year": 631,
              "human_commit_share": 0.16,
              "days_since_last_push": 0,
              "active_weeks_last_year": 19
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "19/52 weeks with commits",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "631 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 631
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 79,
              "latest_release_tag": "v1.96.13",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 5.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "79 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 79
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~5.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 5.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 1,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 41,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "merged_prs": 255,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 22
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "255/277 decided PRs merged",
                "points": 35.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 255,
                      "decided": 277
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/3 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "antinvestor",
              "public_repos": 15,
              "account_age_days": 2261
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of antinvestor",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "antinvestor"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "15 public repos, account ~6 yr old",
                "points": 20.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 15
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 60,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "12 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "critical",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 54,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/3 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 185 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 185
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 185,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 185,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 42,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": "Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "legible_commit_history"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": null,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "gen/go/field/connectrpc/go/go.mod",
                "gen/go/field/protocolbuffers/go/go.mod",
                "gen/go/identity/connectrpc/go/go.mod",
                "gen/go/identity/protocolbuffers/go/go.mod",
                "go.mod",
                "ui/old-implementation/android/app/build.gradle.kts",
                "ui/old-implementation/android/build.gradle.kts",
                "ui/seed/android/app/build.gradle.kts",
                "ui/seed/android/build.gradle.kts"
              ],
              "dependency_bot_commit_share": 0.84
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "84 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 84,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 463470,
              "source_files_sampled": 1248,
              "oversized_source_files": 64
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "64/1248 source files over 60KB",
                "points": 52.2,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 1248,
                      "oversized": 64
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "proto/field/field/v1/field.proto",
                "proto/funding/funding/v1/funding.proto",
                "proto/identity/identity/v1/identity.proto",
                "proto/limits/limits/v1/limits.proto",
                "proto/loans/loans/v1/loans.proto",
                "proto/operations/operations/v1/operations.proto",
                "proto/savings/savings/v1/savings.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "proto/field/field/v1/field.proto, proto/funding/funding/v1/funding.proto, proto/identity/identity/v1/identity.proto, proto/limits/limits/v1/limits.proto, proto/loans/loans/v1/loans.proto, proto/operations/operations/v1/operations.proto, proto/savings/savings/v1/savings.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "proto/field/field/v1/field.proto, proto/funding/funding/v1/funding.proto, proto/identity/identity/v1/identity.proto, proto/limits/limits/v1/limits.proto, proto/loans/loans/v1/loans.proto, proto/operations/operations/v1/operations.proto, proto/savings/savings/v1/savings.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Could not fetch go package 'github.com/antinvestor/service-fintech' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T02:38:35.674038Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/antinvestor/service-fintech.svg",
  "full_name": "antinvestor/service-fintech",
  "license_state": "absent",
  "license_spdx": null
}