公开记录良好
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-29 14:13 UTC
containerd / nri
Node Resource Interface
containerd/nri 的健康指数为 100 分中的 71 分，处于「良好」区间。 其得分最高的类别是Vitality（81/100），最低的是Security（51/100）。 最近一次更新在 9 天前。 近期的大部分工作由 3 位贡献者完成。
71
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
71
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/containerd/nri | v0.12.1 | - | 15 | 10 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
81
开发活跃度
74良好
评分方式
| 28.8/36 | 推送新近度 — 最近一次推送于 9 天前 |
| 24.2/36 | 提交节奏 — 52 周中有 35 周有提交 |
| 18/18 | 提交量 — 最近一年 181 次提交 |
| 3/10 | OpenSSF Scorecard：Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
所用输入
| commits_last_year | 181 |
| human_commit_share | 1 |
| days_since_last_push | 9 |
| active_weeks_last_year | 35 |
发布纪律
92优秀
评分方式
| 27/27 | 有发布版本 — 已发布 12 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 9 天前 |
| 19.8/27 | 发布节奏 — 约每 108.9 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 12 |
| latest_release_tag | v0.12.1 |
| releases_from_tags | 否 |
| days_since_latest_release | 9 |
| mean_days_between_releases | 108.9 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
59
流行度与采用
67中等
评分方式
| 42.1/60 | 星标 — 396 个星标 |
| 16.7/25 | 复刻 — 101 个复刻 |
| 8.2/15 | 关注者 — 31 位关注者 |
所用输入
| forks | 101 |
| stars | 396 |
| watchers | 31 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（Apache-2.0） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
78
维护者韧性（巴士系数）
74良好
评分方式
| 36/54 | 巴士系数 — 3 位贡献者贡献了半数提交 |
| 14.3/22.5 | 提交分布 — 头号贡献者编写了 37% 的提交 |
| 13.5/13.5 | 贡献者广度 — 45 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 56 contributing companies or organizations |
所用输入
| bus_factor | 3 |
| contributors_sampled | 45 |
| top_contributor_share | 0.366 |
议题与 PR 响应能力
66中等
评分方式
| 19.3/46.8 | 议题解决 — 41% 的议题已关闭 |
| 32.2/38.3 | PR 接受 — 已裁定的 PR 中 180/214 已合并 |
| 15/15 | OpenSSF Scorecard：Code-Review — all changesets reviewed |
所用输入
| merged_prs | 180 |
| open_issues | 40 |
| closed_issues | 28 |
| issue_closed_ratio | 0.412 |
| closed_unmerged_prs | 34 |
所有权与托管责任
76良好
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 22.4/25 | 所有者影响力 — containerd 有 1,307 位关注者 |
| 23.7/25 | 既往记录 — 39 个公开仓库，账户约 10 年 |
所用输入
| followers | 1,307 |
| owner_type | Organization |
| is_verified | — |
| owner_login | containerd |
| public_repos | 39 |
| account_age_days | 3,986 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 10 天前 |
| 20/20 | 版本历史 — 15 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/containerd/nri |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 10 |
工程质量
基础的工程与文档实践是否到位？
80
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .golangci.yml |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
75良好
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
51
安全态势
51中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 56 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 2.2/7.5 | Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 24 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.1 |
已排除计分（无数据或不适用）：signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
68
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 100 次人类提交中有 85 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.85 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .golangci.yml |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 是 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | examples/go.mod, go.mod, plugins/device-injector/go.mod, plugins/differ/go.mod, plugins/hook-injector/go.mod, plugins/logger/go.mod, plugins/network-device-injector/go.mod, plugins/network-logger/go.mod, plugins/rdt/go.mod, plugins/template/go.mod, plugins/ulimit-adjuster/go.mod, plugins/v010-adapter/go.mod, plugins/wasm/go.mod, plugins/writable-cgroups/go.mod |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
98优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 53.4/55 | 可控的文件大小 — 采样的 100 个源文件中有 3 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 439,028 |
| source_files_sampled | 100 |
| oversized_source_files | 3 |
机器可读接口
80良好
评分方式
| 40/40 | API 模式（OpenAPI/GraphQL/proto） — pkg/api/api.proto |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples, samples |
所用输入
| example_dirs | examples, samples |
| has_mcp_signal | 否 |
| api_schema_files | pkg/api/api.proto |
关键数据
396GitHub 星标
45贡献者
181最近 12 个月提交数
9距最近推送天数
12发布版本数
3巴士系数（bus factor）
40开放议题
Go软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 101 ⇿
0Star
101Fork
11发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 9修订 2
每个点涵盖 6 天。
OpenSSF Scorecard 5.1 / 10
5.1综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 56 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 3 | Maintained | 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 9 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 24 existing vulnerabilities detected |
直接依赖 17
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/brianvoe/gofakeit/v7 | v7.12.1 | go.mod |
| Go | github.com/containerd/ttrpc | v1.2.7 | go.mod |
| Go | github.com/google/go-cmp | v0.7.0 | go.mod |
| Go | github.com/knqyf263/go-plugin | v0.9.0 | go.mod |
| Go | github.com/moby/sys/mountinfo | v0.7.2 | go.mod |
| Go | github.com/onsi/ginkgo/v2 | v2.19.1 | go.mod |
| Go | github.com/onsi/gomega | v1.34.0 | go.mod |
| Go | github.com/opencontainers/runtime-spec | v1.3.0 | go.mod |
| Go | github.com/opencontainers/runtime-tools | v0.9.1-0.20251114084447-edf4cb3d2116 | go.mod |
| Go | github.com/sirupsen/logrus | v1.9.3 | go.mod |
| Go | github.com/stretchr/testify | v1.8.4 | go.mod |
| Go | github.com/tetratelabs/wazero | v1.11.0 | go.mod |
| Go | golang.org/x/mod | v0.32.0 | go.mod |
| Go | golang.org/x/sys | v0.39.0 | go.mod |
| Go | google.golang.org/grpc | v1.57.1 | go.mod |
| Go | google.golang.org/protobuf | v1.34.1 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 4125,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 653408,
"Shell": 5022,
"Makefile": 6513,
"Dockerfile": 1173
},
"pushed_at": "2026-07-20T14:04:51Z",
"created_at": "2020-07-28T18:33:54Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T13:30:26Z",
"description": "Node Resource Interface",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "containerd.io",
"name": "containerd",
"type": "Organization",
"login": "containerd",
"company": null,
"location": null,
"followers": 1307,
"avatar_url": "https://avatars.githubusercontent.com/u/14037953?v=4",
"created_at": "2015-08-30T06:48:09Z",
"is_verified": null,
"public_repos": 39,
"account_age_days": 3986
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2026-07-20T14:04:51Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-04-28T17:42:47Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-12-17T12:45:26Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-08-19T17:59:14Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2024-12-12T17:15:41Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2024-11-01T18:24:32Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2024-10-23T20:49:46Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2024-04-18T21:57:27Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2024-02-03T09:02:14Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2023-11-13T17:57:23Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2023-09-15T22:15:17Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2023-09-12T23:25:56Z"
}
],
"recent_commits": [
{
"oid": "84180b63351d03b54a317a265ba01e3e9db19f24",
"body": "adaptation: avoid holding lock across runtime update callback",
"is_bot": false,
"headline": "Merge pull request #301 from ningmingxiao/fix_deadlock",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-07-18T22:12:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55afaa25d2d7827cd51841a5cc2f09981544b894",
"body": "updateContainers currently holds the Adaptation mutex while calling the\nruntime-provided updateFn. containerd's updateFn acquires its local NRI\nmutex, while CRI lifecycle paths acquire the same locks in the opposite\norder:\n\n lifecycle: local mutex -> Adaptation mutex\n update: Adaptation mutex -\n[…]\ne Adaptation mutex and leave synchronization of\nruntime-owned state to the runtime.\n\nFixes https://github.com/containerd/containerd/issues/13733\n\nSigned-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>",
"is_bot": false,
"headline": "adaptation: avoid holding lock across runtime update callback",
"author_name": "ningmingxiao",
"author_login": "ningmingxiao",
"committed_at": "2026-07-17T05:50:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32e4300b66ad2c1ad00526ab3dd2034d7cb5b58d",
"body": "docs: Fix typo in containerd config for default validator.",
"is_bot": false,
"headline": "Merge pull request #297 from grosskur/grosskur/docs-validation-plugins",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-06-05T23:06:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7e479f52f51be794ff24af3a5103f7db47ce08d",
"body": "The sample config is ignored by containerd:\n\n [plugins.\"io.containerd.nri.v1.runtime\"]\n [plugins.\"io.containerd.nri.v1.runtime\".default_validator]\n\nThe correct config is:\n\n [plugins.\"io.containerd.nri.v1.nri\"]\n [plugins.\"io.containerd.nri.v1.nri\".default_validator]\n\nTested with containerd 2.2.3.\n\nSigned-off-by: Alan Grosskurth <grosskur@google.com>",
"is_bot": false,
"headline": "docs: Fix typo in containerd config for default validator.",
"author_name": "Alan Grosskurth",
"author_login": "grosskur",
"committed_at": "2026-06-05T22:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520641efc61c07ccb5a39b13dcfe5598ab1f9ab9",
"body": "Fix .gitignore",
"is_bot": false,
"headline": "Merge pull request #290 from samuelkarp/fix-gitignore",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d37892494085e17e266a7643d8ac37fe6e7eea1",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "fix .gitignore to include info/none",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:32:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a92ac958717b461fbf43d76fd56e0de6eef3115",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "delete manually-added none file",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:31:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57442b2a20c63d48d69dc600c3fb4f0c063c7ef0",
"body": "wire protocol: use dedicated RPC calls for all pod and container life-cycle events.",
"is_bot": false,
"headline": "Merge pull request #274 from klihub/devel/dedicated-lifecycle-events",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-15T19:11:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3402eba0ccd83c5598adab3289425a4c66fb843d",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "README.md: document deprecation of StateChange.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-14T05:43:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e16af776b1e170c24c8f7c3f83db63eb7788cb8",
"body": "Add a backward compatibility wrapper for old plugins which do not\nsupport the full set of dedicated lifecycle events yet. Fall back\nto relaying StateChange events to them.\n\nRecord deprecation warnings for each unimplemented new plugin\ninterface where we need to fall back and funnel calls through\nthe old StateChange RPC call.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: implement wrapper for old plugins.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-14T05:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "299a3ee685cfef34c8910f46b1386aafe51994ba",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: update unit tests for metrics.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e019dce0ee4cf5d0f4e2980d1398a7f2cabddca7",
"body": "Update to use the new dedicated RPC calls to relay all pod and\ncontainer lifecycle events to plugins. Remove old StateChange\nwhich used to multiplex {Run,PostUpdate,Stop,Remove}PodSandbox\npod and {PostCreate,Start,PostStart,PostUpdate,Remove}Container\ncontainer events.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: use dedicated RPC calls for all events.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbf892d2e5e6adc647e602022dcfe7079e4cd6f4",
"body": "Define dedicated RPC calls on the wire for all pod and container\nlifecycle events. Update stub, builtin and WASM plugins accordingly.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,stub: add dedicated RPC calls for all events.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8da10364032fa9fb507f1857da5a1b3141b3800",
"body": "add basic metrics for NRI framework",
"is_bot": false,
"headline": "Merge pull request #277 from chrishenzie/feat/prometheus-metrics",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06a64ce0607484b3c901cdf5aa1568c79e837ffc",
"body": "Add a background to lifecycle SVGs so they are legible in dark mode",
"is_bot": false,
"headline": "Merge pull request #285 from BenTheElder/background",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-08T16:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "560c0c27fa0c36142447d17399cae30cc5faa908",
"body": "logger: fix logger Shutdown function signature",
"is_bot": false,
"headline": "Merge pull request #284 from pandaWall/main",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-08T06:12:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34f24995b9857c9dec616021f15acf0b161e765c",
"body": "Add writable-cgroups experimental plugin",
"is_bot": false,
"headline": "Merge pull request #269 from chrishenzie/writable-cgroups-experiment",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-08T06:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee23a20df205050a75e3abd1f9490f5ed4a657d",
"body": "I went with a blueprint color that is hopefully acceptable on both light and dark. Currently these images are illegible in dark mode.\n\nWe have to set the background within the SVG due to github markdown stripping out CSS and other inline theming.\n\nSigned-off-by: Benjamin Elder <bentheelder@google.com>",
"is_bot": false,
"headline": "Add a background to lifecycle SVGs so they are legible in dark mode",
"author_name": "Benjamin Elder",
"author_login": "BenTheElder",
"committed_at": "2026-04-08T01:40:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9d9a684de469ce5f9eef0820ab2e79f136c81bc",
"body": "Adds a new `writable-cgroups` plugin, designed to enable safe delegation\nof cgroup management to containers. This plugin allows containers to\nmount `/sys/fs/cgroup` as read-write, enabling workloads (like AI/ML\nframeworks) to manage their own sub-cgroups.\n\nThis plugin serves as a reference implementation and test-bed for\nvalidating the `nsdelegate` security model proposed in KEP-5474 as an\nalternative to introducing new Kubernetes API fields.\n\nSigned-off-by: Chris Henzie <chrishenzie@gmail.com>",
"is_bot": false,
"headline": "Add writable-cgroups experimental plugin",
"author_name": "Chris Henzie",
"author_login": "chrishenzie",
"committed_at": "2026-04-07T18:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b9f03a908552c9105baca9a1cd0f3b7cbaeb6d",
"body": "Signed-off-by: pandaWall <chenxu@kylinos.cn>",
"is_bot": false,
"headline": "logger: fix logger Shutdown function signature",
"author_name": "pandaWall",
"author_login": null,
"committed_at": "2026-04-07T08:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32bf1d5775c1aab91ff143f0a615895ff436f542",
"body": "Provides necessary hooks for container runtimes to collect basic runtime\nmetrics regarding NRI plugin activity. This improves observability and\nhelps satisfy v1.0 requirements.\n\nIntroduces a `Metrics` interface that allows us to collect plugin\ncounts, invocations, adjustments, and latency informatio\n[…]\noption) to route these data points\ninto their existing telemetry setups.\n\nRef: https://github.com/containerd/nri/issues/272\nSigned-off-by: Chris Henzie <chrishenzie@gmail.com>\nAssisted-by: Antigravity",
"is_bot": false,
"headline": "Add metrics interface for NRI framework",
"author_name": "Chris Henzie",
"author_login": "chrishenzie",
"committed_at": "2026-04-02T17:50:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "622bc6c0995bdc93962aae62b0b7d6bc07236e12",
"body": "adaptation,stub: exchange NRI versions in use.",
"is_bot": false,
"headline": "Merge pull request #271 from klihub/devel/version-exchange",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-02T04:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d0e81d72cf35445585b72d0a38e56eae087d2ca",
"body": "Add version exchange test and related test option to adaptation.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add a version exchange test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:30:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee82b966aa4540d81ccc32c0a69e77cda95d5e17",
"body": "Exchange NRI versions in use during plugin registration. If we\ndo not get an NRI version from the runtime (too old peer NRI)\ntry to infer it using the runtime type and version.\n\nThe NRI version in use is discovered using the golang runtime\nprovided build info. For plugins hosted in the main NRI repo\n[…]\n subject\nto a replace directive in the plugins' go.mod). Therefore within\nthe repo we fall back to using a git-describe generated version.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,stub: exchange versions during registration.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:30:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4355b7f94b57c95d55b6d734bc32681a3253b66",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "doc: a few fixes to the feature/version table.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:29:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ea59f914980aea206999290dbc338cafc70cbbe",
"body": "Enable adjusting memory policy from NRI plugins",
"is_bot": false,
"headline": "Merge pull request #166 from askervin/5aW_mempolicy",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-17T15:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da6ea0e656c570e6f3b8ec5e0f42a806f9d4dc07",
"body": null,
"is_bot": false,
"headline": "Merge pull request #279 from klihub/fixes/close-on-sync-failure",
"author_name": "Fu Wei",
"author_login": "fuweid",
"committed_at": "2026-03-14T16:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "370f3d5c8f4f74853c1f054ef697baa1ada716c5",
"body": "Don't leave a plugin connected but effectively unregistered if\ninitial plugin synchronization fails. Log the fact as an error\nand close the plugin.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: close plugin if initial sync fails.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-14T08:37:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695be7e4ebaf5940dadbe9fe596827183c87dea8",
"body": "stub: fix new option logging in stub.",
"is_bot": false,
"headline": "Merge pull request #280 from klihub/fixes/stub-option-logging",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-13T20:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ef04429c02458ea3fd7bb02e1cac8b0fe228818",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "stub: fix new option logging in stub.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-13T19:04:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dda906494c65d12bc3be5615cee69d483a1fe3a",
"body": "stub: allow overriding plugin name with Option",
"is_bot": false,
"headline": "Merge pull request #202 from marquiz/devel/stub-name",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-13T13:48:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4b979599070efec3ec0226c6452786348356cb6",
"body": "Add support for adjusting container linux memory policy based\non annotations.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: implement memory policy adjustment.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4bda62bf690295389fd50482222e824b989f520",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add linux memory policy test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35ace8c05ea68ec4783da6e3a8bf757ffc75ed7",
"body": "Signed-off-by: Antti Kervinen <antti.kervinen@intel.com>",
"is_bot": false,
"headline": "Enable adjusting container Linux memory policy.",
"author_name": "Antti Kervinen",
"author_login": "askervin",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6559db68145e61dbc23a189a9f7080a20fefb2c1",
"body": "docs: add validation plugins guide",
"is_bot": false,
"headline": "Merge pull request #278 from samuelkarp/nri-docs",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-03-06T18:40:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b9d909f1c2624af98358d69c499949593bb4965",
"body": "Add a new guide covering NRI validation plugins, including their purpose, deployment process, available validation types, and the built-in default validator. The guide also details required plugins (global and workload-specific) and version requirements.\n\nThe guide was verified by reviewing the content for accuracy against the codebase and existing documentation.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "docs: add validation plugins guide",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-03-05T18:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f467efabfe5243eaf2b6860a82fcd777ab4e5d1",
"body": "avoid nil deref in ToOCILinuxSyscalls",
"is_bot": false,
"headline": "Merge pull request #276 from grey3228/bugfix/nil-errno-deref",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-04T16:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da1671e2afa9a3c7ed43b45118d88a04c39e1c06",
"body": "In ToOCILinuxSyscalls in case if syscall.ErrnoRet is not nil,\nnil ptr errnoRet will be dereferenced without any previous\ninitialization, so it will cause panic.\n\nAvoid dereferencing nil ptr errnoRet by adding previous initialization.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nSigned-off-by: Mikhail Dmitrichenko <m.dmitrichenko222@gmail.com>",
"is_bot": false,
"headline": "avoid nil deref in ToOCILinuxSyscalls",
"author_name": "Mikhail Dmitrichenko",
"author_login": null,
"committed_at": "2026-03-03T10:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1127602217f00ed4fb4e4adc53cdaada99eab280",
"body": "fix: let stub.Run() select to honor context cancellation",
"is_bot": false,
"headline": "Merge pull request #275 from dottorblaster/stub-context-cancellation",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-02-27T16:12:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a69dfa89005abfef8f8bf5dbea90c66a6e522ca",
"body": "Signed-off-by: Alessio Biancalana <alessio@dottorblaster.it>",
"is_bot": false,
"headline": "fix: let stub.Run() select to honor context cancellation",
"author_name": "Alessio Biancalana",
"author_login": "dottorblaster",
"committed_at": "2026-02-27T11:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b9c0b8c56628c4b30d2da62edcfa89a79169ad1",
"body": "api: generate field ownership functions",
"is_bot": false,
"headline": "Merge pull request #263 from samuelkarp/protoc-gen-owners",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-02-23T18:14:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94fcca38e097bfe35af749b85b6619c6bb733bbb",
"body": "Introduce a `protoc` generator (`tools/protoc-gen-owners`) to\nautomatically generate the repetitive field ownership tracking functions.\nThis refactors the `pkg/api/owners.go` file.\n\nThe new generator uses the `Field` enum in `api.proto` as the source of\ntruth. The original `owners.go` file has been \n[…]\nduces manual boilerplate, improves maintainability, and ensures\nconsistency between the protobuf definitions and the Go API.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: generate field ownership functions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-02-20T23:14:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c8e2beb1cee024fc20547cf32880290c4f22b94",
"body": "api: fix OCI hook ownership tracking.",
"is_bot": false,
"headline": "Merge pull request #264 from klihub/fixes/accumulate-oci-hook-ownership",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-02-18T16:39:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed596cb6aba7eb7e48e527a6151b7f11417bb5e8",
"body": "Add integration tests for hook injector plugin",
"is_bot": false,
"headline": "Merge pull request #187 from sameersaeed/hook-injector-tests",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-01-28T14:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67ebccd435e18cf527378e6ce5bc22689111c635",
"body": "Signed-off-by: Sameer <sameer.saeed@live.ca>",
"is_bot": false,
"headline": "Add integration tests for hook injector plugin",
"author_name": "Sameer",
"author_login": "sameersaeed",
"committed_at": "2026-01-28T14:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "012604f8a24a07ccfc78e28c7f9aba6b7bd05cf0",
"body": "go.mod: move from old containers/common repo to go.podman.io/common",
"is_bot": false,
"headline": "Merge pull request #266 from sameersaeed/move-hook-lib",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-28T06:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "637c8db35c1e04a0e7a0ea3ac013658b55f214a5",
"body": "Signed-off-by: Sameer <sameer.saeed@live.ca>",
"is_bot": false,
"headline": "go.mod: move from old containers/common repo to go.podman.io/common",
"author_name": "Sameer",
"author_login": "sameersaeed",
"committed_at": "2026-01-27T21:38:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbb1b7978a0ea8d45d477fa0e85e36d657f45ec6",
"body": "docs: document which versions various NRI features were first available.",
"is_bot": false,
"headline": "Merge pull request #258 from klihub/devel/docs/features-vs-versions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-21T18:50:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95cbd8f2c4b094c0a72d3e3d6d9dd0f0f63f8885",
"body": "Document which version of NRI, containerd and CRI-O support first\nappeared for each piece of pod and container metadata, container\nadjustment, and container update.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "docs: document first available version of features.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-21T18:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "765f01b7e273cb1928ea17a466cbb12d292d9838",
"body": "…stment\n\ndevice-injector: implement sysctl adjustment annotations.",
"is_bot": false,
"headline": "Merge pull request #262 from klihub/devel/device-injector/sysctl-adju…",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-20T20:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a77603943b4742f7f51e3a002460b1de1f8aa6",
"body": "Verify that a registered plugin name is not empty and only contains\ncharacters from the set [a-zA-Z0-9_.+-].\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation: more strict plugin name check.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-19T08:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95ba09f3d846751de2b693e12c4b3e880029c47c",
"body": "Fix hook ownership tracking and add a proper test case for it.\n\nOwnership tracking for OCI hooks is supposed to be accumulative.\nThe implementation tried to accumulate owners, but it was buggy.\nIt tried to delete existing ownership by unclaiming which marks\nownershipdeleted by the plugin instead of \n[…]\nership accumulation. It was only noticed thanks to #263\nwhich switches much of the ownership tracking code to generated\nfrom hand-written.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api: fix OCI hook ownership tracking.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-16T09:12:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "624ea102f4db619870c603cae4dc91fb23f79a54",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: implement sysctl adjustment annotations.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-15T09:38:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1ee56b9da5b7e9c2762b6a30cd7f184da43f4c",
"body": "protoc: Generate pkg/api/strip.go using plugin",
"is_bot": false,
"headline": "Merge pull request #259 from samuelkarp/protoc-gen-strip",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T23:31:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e76da5e2fcbd8d814cc9e0c23719075d4a3abcc",
"body": "Refactor pkg/api/strip.go to be generated automatically by a new protoc\nplugin, 'protoc-gen-strip'. This addresses inconsistencies and missing\nStrip functions in the hand-written file, ensuring comprehensive\ncoverage for protobuf messages.\n\nThe new plugin iterates over protobuf messages and generate\n[…]\nompleteness.\n4. Executed the full project test suite ('make test'), which passed\n successfully, confirming no regressions.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "protoc: Generate pkg/api/strip.go using plugin",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T22:53:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e46f926147ca928e75db625495c4e28004df1fac",
"body": "Reorder functions in pkg/api/strip.go to match the order of the generated code.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "pkg/api: reorder functions in strip.go",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T18:05:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5becd3d849e79e35ad2fcfe8176cf740e5e4a483",
"body": "pkg/api: adjustment stripping fixes.",
"is_bot": false,
"headline": "Merge pull request #251 from klihub/fixes/adjustment-strip",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T16:53:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33335276ba2f0e339e5ed6b253ec8650238edb10",
"body": "Remove incorrect 'clearing' tests for linux scheduling policy\nand I/O priority. We don't really have support for clearing\neither at the moment.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: ditch semantically broken clearing tests.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5c291411a907fdaf14e51716419438b5942388f",
"body": "Okay, let me try to be less stupid here... Stop Strip()ping expected\nresults before comparing them to collected ones. It only masks bugs\nunnoticable if Strip() incorrectly reduces a non-empty adjustment or\nupdate to nil.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: don't mask Strip() bugs by stripping expected results.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0174fb16c4aa8b498b80670374adf9423764a363",
"body": "Add missing handling for LinuxScheduler, LinuxIOPriority,\nLinuxSeccomp, LinuxNamespaces, Sysctl and LinuxNetDevice\nin adjustment stripping.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "pkg/api: fix adjustment stripping.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16d031f07bae4d21378053def20f569ab60f6260",
"body": "Many of our tests set a single field in a container adjustment\nthen does a protocmp against an expected result. Add tests for\nverifying that stripping an adjustment with a single field set\ndoes not unexpectedly drop that field.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "pkg/api: add tests for adjustment stripping.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc2f8191ef9994f20c864510266a966a8868a69e",
"body": "api,adaptation: fix sysctl adjustment collection, add unit test.",
"is_bot": false,
"headline": "Merge pull request #261 from klihub/fixes/sysctl-adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-12T20:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "232234c7c381265ba9112c62da6d4719302cd1e1",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api: fix adjustment stripping for sysctls.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T17:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6128d9c30f418c90edaaa38552dc06884d62bac",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add minimal sysctl adjustment test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T17:20:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7dd8b0818139f56dc24a9a4c5ddc89277fb4837",
"body": "Initilize sysctl map before collecting results. Failing to do\nso results in a crash if any plugin adjusts sysctls.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: initialize sysctl map before collecting results.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T16:50:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95203e5ebad349314449b137e38f9b810725c250",
"body": "ulimit-adjuster: fix a typo in README.md.",
"is_bot": false,
"headline": "Merge pull request #260 from klihub/fixes/doc/rlimit-example",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-12T15:49:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14c8e174856f442e856db2d3465e289552e9c86f",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "ulimit-adjuster: fix typo/copy-paste-o in README.md.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T14:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e27b321b49760cbb69dec2d70da239dece6d8d7",
"body": "docs: add Linux sysctl's as restrictable by validation.",
"is_bot": false,
"headline": "Merge pull request #257 from klihub/fixes/docs/sysctl-restrictions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-09T07:11:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee5f4534311bbfc97e674db23067aeec4e84ab0a",
"body": "adaptation: ensure namespace adjustment is tested",
"is_bot": false,
"headline": "Merge pull request #256 from samuelkarp/api-namespaces-strip",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-01-08T21:46:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf5d2cc0d8d71c77ce7a7d8bffcf13e83c357b0",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "docs: add Linux sysctl's as restrictable by validation.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-08T17:18:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56a637508e9d82fcf65ac5013adbb9e65b69d0c1",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "adaptation: ensure namespace adjustment is tested",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-06T19:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "009475630ff7946572d57c0ce42fe2885f60d86b",
"body": "go.{mod,sum}: bump wazero deps to v1.11.0.",
"is_bot": false,
"headline": "Merge pull request #255 from klihub/devel/bum-wazero-deps",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-22T17:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c75076d2425956804e92fa09daecc6c764a100",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "go.{mod,sum}: bump wazero deps to v1.11.0.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-22T14:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1078130fa016884b4c03880d9d587e6691a67d98",
"body": "adaptation: allow compiling out WASM support altogether.",
"is_bot": false,
"headline": "Merge pull request #253 from klihub/devel/nowasm-build-flag",
"author_name": "Akihiro Suda",
"author_login": "AkihiroSuda",
"committed_at": "2025-12-17T00:38:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab88fe680c11b35234c38c7d4eac72335721c78d",
"body": "Allow WASM support to be disabled at compile time using the\n\"nri_no_wasm\" build tag.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: allow compiling out WASM support altogether.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-16T19:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29bcfcb361e6c36c633d4a2ce6a00ff3e94e7cc3",
"body": "Support direct editing of the intelRdt config",
"is_bot": false,
"headline": "Merge pull request #215 from marquiz/devel/rdt",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-16T15:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0c9f67a905fb24682239a4d6d94b0dd52c13e7",
"body": "Makes it possible to remove/override the linux.intelRdt object from the\ncontainer configuration. Extend the API by adding new 'Remove' field to\nthe LinuxRdt message which is used as a marker to fully delete/override\nthe IntelRdt configuration. This patch also updates the adaptation\nand runtime-tools correspondingly.\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "Implement removal of RDT",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T12:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfbae8a616b80037798e3cfb8315d70f3f2eff7e",
"body": "Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "plugins: add sample rdt plugin",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T12:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d05dd818ed26c3dbeae0fce88289387b62e4665c",
"body": "Add support for direct manipulation of the intelRdt object of the\ncontainer config.\n\nCo-authored-by: Krisztian Litkey <krisztian.litkey@intel.com>\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/adaptation: support new RDT fields",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "725289b256878de8e965327ab6e70dc883ea771b",
"body": "Add support for direct manipulation of the linuxRdt object in the\ncontainer config.\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/runtime-tools/generate: support new RDT fields",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7832a241411573e03982490197d7eb98a1c9d29",
"body": "Add new message for directly managing the linux.intelRdt object of the\nruntime-spec.\n\nNOTE: the old RdtClass field resides under LinuxResources message but\nthe IntelRdt message is sepate from LinuxResources. This is to maintain\nparity with the OCI runtime-spec. It is also much more logical because\nt\n[…]\nd on container\nupdate (missing from UpdateContainerRequest) as this functionality is\nmissing from the runtime spec and runtimes (runc/crun).\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "api: add rdt",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc0990d81d5ef3de226faf6c99d048128bff4efc",
"body": "update wazero/wazero version to v1.10.1",
"is_bot": false,
"headline": "Merge pull request #252 from ningmingxiao/dev01",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-11T07:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9eb9a0f0f6e223e6060805b55957f117f159f5cc",
"body": "Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>",
"is_bot": false,
"headline": "update tetratelabs/wazero version to v1.10.1",
"author_name": "ningmingxiao",
"author_login": "ningmingxiao",
"committed_at": "2025-12-11T07:54:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49087934b6d5d02e29e0b5740e24f0ca61f82d44",
"body": "…path\n\n[plugins] support specifying a custom NRI socket path",
"is_bot": false,
"headline": "Merge pull request #249 from tariq1890/device-injector-custom-socket-…",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-07T09:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2df656516e73b31e013257f713a1df5baa7fdcb0",
"body": "Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>",
"is_bot": false,
"headline": "[plugins] support specifying a custom NRI socket path",
"author_name": "Tariq Ibrahim",
"author_login": "tariq1890",
"committed_at": "2025-12-04T17:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f3e69e159d135a01e64462da2adfb1681bdbfb6",
"body": "pkg/api: add OptionalRepeatedString type",
"is_bot": false,
"headline": "Merge pull request #212 from marquiz/devel/api-optional-repeated-string",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-04T16:08:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687c1a6a8b5c75056acd176dc89c45251926d0bb",
"body": "Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/api: add OptionalRepeatedString type",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-04T08:09:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1418ab598aca50c87d57ee1c2ad69c36e7eac44",
"body": "api,adaptation,generate: allow setting kernel scheduling policy attributes.",
"is_bot": false,
"headline": "Merge pull request #160 from klihub/devel/linux-scheduler-policy",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T17:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a371ac5e7afcd185ee575828f4822d779f0ded9",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: add scheduling policy adjustment.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T17:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e06369e8d1cad80f12eaf6f2c0da19c7ac78396c",
"body": "Allow setting/resetting container linux scheduler attributes.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,generate: allow setting scheduler attributes.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T17:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "649a151c21069500285bf1e4c9c0c9062fa4482e",
"body": "device-injector: always log injection summary.",
"is_bot": false,
"headline": "Merge pull request #246 from klihub/fixes/log-device-injection-summary",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T13:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d6b07c670a06f55a6e3e3cfea4d6f691405b177",
"body": "api,adaptation,generate: allow adjusting linux net devices",
"is_bot": false,
"headline": "Merge pull request #157 from klihub/devel/linux-net-devices",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T13:46:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5145c92e7c215ce3969805005ebdb0f37749e68b",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: add network device injection.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T12:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a03823fe8afbca00b30f669805c911414c58803",
"body": "Allow adding and removing container linux net devices.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,generate: allow adjusting linux net devices.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T12:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96f0f209b39a7cfe019dcfebf8a652e53005ddef",
"body": "Add support for sysctl adjustment",
"is_bot": false,
"headline": "Merge pull request #248 from samuelkarp/sysctl",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-02T21:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "914fbf3faf42da144376c133541c37211d2f9200",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "default-validator: restrict sysctl adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-01T20:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4189560f80f7c02579eec252ae43034bf21cb8a",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: apply sysctl adjustments",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-01T20:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd33dea7daa63b421a9fe5a8d1162275792e5e07",
"body": "feat: Make logger a configurable struct member for stub",
"is_bot": false,
"headline": "Merge pull request #239 from gauravkghildiyal/configurable-logger",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-11-28T12:12:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8705f9b1eb3107ad8bc422978b0412527e3fd236",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: add sysctl container adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-11-26T23:33:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d8611f87ad7e4c05b1ad84da4d1a63e885f5a4b",
"body": "…ools\n\nDrop dependency on opencontainers/runtime-tools",
"is_bot": false,
"headline": "Merge pull request #247 from AkihiroSuda/drop-dependency-on-runtime-t…",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-11-20T15:39:15Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 181,
"latest_release_at": "2026-07-20T14:04:51Z",
"latest_release_tag": "v0.12.1",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 35,
"days_since_latest_release": 9,
"mean_days_between_releases": 108.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/containerd/nri",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/containerd/nri",
"is_deprecated": false,
"latest_version": "v0.12.1",
"repository_url": "https://github.com/containerd/nri",
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T22:12:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 101,
"stars": 396,
"watchers": 31,
"fork_history": {
"days": [
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2020-12-18",
"count": 1
},
{
"date": "2021-03-16",
"count": 2
},
{
"date": "2021-05-06",
"count": 1
},
{
"date": "2021-05-11",
"count": 1
},
{
"date": "2021-06-19",
"count": 1
},
{
"date": "2021-07-06",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-09-08",
"count": 1
},
{
"date": "2021-09-14",
"count": 2
},
{
"date": "2021-09-15",
"count": 1
},
{
"date": "2021-09-22",
"count": 1
},
{
"date": "2021-09-28",
"count": 1
},
{
"date": "2022-01-05",
"count": 1
},
{
"date": "2022-01-13",
"count": 1
},
{
"date": "2022-10-26",
"count": 1
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-29",
"count": 1
},
{
"date": "2023-02-10",
"count": 1
},
{
"date": "2023-03-13",
"count": 1
},
{
"date": "2023-03-14",
"count": 1
},
{
"date": "2023-05-03",
"count": 1
},
{
"date": "2023-05-18",
"count": 1
},
{
"date": "2023-05-23",
"count": 1
},
{
"date": "2023-08-06",
"count": 1
},
{
"date": "2023-08-18",
"count": 1
},
{
"date": "2023-08-22",
"count": 1
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-09-27",
"count": 1
},
{
"date": "2023-10-17",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-11-04",
"count": 1
},
{
"date": "2023-11-22",
"count": 2
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-21",
"count": 1
},
{
"date": "2024-01-25",
"count": 1
},
{
"date": "2024-01-29",
"count": 1
},
{
"date": "2024-03-08",
"count": 1
},
{
"date": "2024-04-15",
"count": 1
},
{
"date": "2024-04-18",
"count": 1
},
{
"date": "2024-04-29",
"count": 1
},
{
"date": "2024-05-10",
"count": 2
},
{
"date": "2024-05-12",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-06-06",
"count": 1
},
{
"date": "2024-06-19",
"count": 1
},
{
"date": "2024-07-04",
"count": 1
},
{
"date": "2024-07-10",
"count": 1
},
{
"date": "2024-08-10",
"count": 1
},
{
"date": "2024-09-07",
"count": 1
},
{
"date": "2024-09-09",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-11-06",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2024-12-29",
"count": 1
},
{
"date": "2025-01-29",
"count": 1
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-12",
"count": 1
},
{
"date": "2025-03-17",
"count": 1
},
{
"date": "2025-04-11",
"count": 1
},
{
"date": "2025-04-18",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-06-12",
"count": 1
},
{
"date": "2025-06-17",
"count": 1
},
{
"date": "2025-06-25",
"count": 1
},
{
"date": "2025-07-08",
"count": 1
},
{
"date": "2025-07-25",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-08-25",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-12",
"count": 1
},
{
"date": "2025-11-11",
"count": 1
},
{
"date": "2025-11-19",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 99,
"total_forks": 101
},
"star_history": null,
"open_issues_and_prs": 60
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples",
"samples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"pkg/api/api.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"examples/go.mod",
"go.mod",
"plugins/device-injector/go.mod",
"plugins/differ/go.mod",
"plugins/hook-injector/go.mod",
"plugins/logger/go.mod",
"plugins/network-device-injector/go.mod",
"plugins/network-logger/go.mod",
"plugins/rdt/go.mod",
"plugins/template/go.mod",
"plugins/ulimit-adjuster/go.mod",
"plugins/v010-adapter/go.mod",
"plugins/wasm/go.mod",
"plugins/writable-cgroups/go.mod"
],
"largest_source_bytes": 439028,
"source_files_sampled": 100,
"oversized_source_files": 3,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"examples/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/brianvoe/gofakeit/v7",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v7.12.1"
},
{
"name": "github.com/containerd/ttrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.7"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/knqyf263/go-plugin",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.0"
},
{
"name": "github.com/moby/sys/mountinfo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.2"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.19.1"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.0"
},
{
"name": "github.com/opencontainers/runtime-spec",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/opencontainers/runtime-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1-0.20251114084447-edf4cb3d2116"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tetratelabs/wazero",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "golang.org/x/mod",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.32.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.39.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.57.1"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.1"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 20,
"merged_prs": 180,
"open_issues": 40,
"closed_ratio": 0.412,
"closed_issues": 28,
"closed_unmerged_prs": 34
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "klihub",
"commits": 181,
"avatar_url": "https://avatars.githubusercontent.com/u/996268?v=4"
},
{
"type": "User",
"login": "mikebrow",
"commits": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/12767641?v=4"
},
{
"type": "User",
"login": "samuelkarp",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/737750?v=4"
},
{
"type": "User",
"login": "marquiz",
"commits": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/1035625?v=4"
},
{
"type": "User",
"login": "fuweid",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/17510957?v=4"
},
{
"type": "User",
"login": "thaJeztah",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/1804568?v=4"
},
{
"type": "User",
"login": "crosbymichael",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/749551?v=4"
},
{
"type": "User",
"login": "dmcgowan",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/169601?v=4"
},
{
"type": "User",
"login": "champtar",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/3536755?v=4"
},
{
"type": "User",
"login": "saschagrunert",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/695473?v=4"
}
],
"contributors_sampled": 45,
"top_contributor_share": 0.366
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"codeql.yml",
"codespell.yml",
"images.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 56 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "24 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "84180b63351d03b54a317a265ba01e3e9db19f24",
"ran_at": "2026-07-29T14:12:28Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T14:22:40Z",
"oldest_open_prs": [
{
"number": 118,
"created_at": "2024-10-24T16:08:10Z",
"last_comment_at": "2025-11-24T21:06:22Z",
"last_comment_author": "mikebrow"
},
{
"number": 183,
"created_at": "2025-07-16T11:34:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 219,
"created_at": "2025-08-29T06:19:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 227,
"created_at": "2025-09-01T09:36:35Z",
"last_comment_at": "2025-09-04T08:46:04Z",
"last_comment_author": "klihub"
},
{
"number": 245,
"created_at": "2025-11-11T19:08:29Z",
"last_comment_at": "2026-04-24T12:09:42Z",
"last_comment_author": "kfox1111"
},
{
"number": 265,
"created_at": "2026-01-20T14:26:10Z",
"last_comment_at": "2026-04-15T22:48:27Z",
"last_comment_author": "samuelkarp"
},
{
"number": 267,
"created_at": "2026-01-28T15:00:20Z",
"last_comment_at": "2026-05-12T13:43:13Z",
"last_comment_author": "MikeZappa87"
},
{
"number": 268,
"created_at": "2026-02-03T19:47:07Z",
"last_comment_at": "2026-03-10T07:25:32Z",
"last_comment_author": "klihub"
},
{
"number": 281,
"created_at": "2026-03-24T00:36:36Z",
"last_comment_at": "2026-03-25T23:42:37Z",
"last_comment_author": "samuelkarp"
},
{
"number": 286,
"created_at": "2026-04-09T19:56:54Z",
"last_comment_at": "2026-05-26T23:21:16Z",
"last_comment_author": "SergeyKanzhelev"
},
{
"number": 288,
"created_at": "2026-04-24T07:11:39Z",
"last_comment_at": "2026-07-20T19:58:41Z",
"last_comment_author": "mikebrow"
},
{
"number": 291,
"created_at": "2026-04-28T18:55:46Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 292,
"created_at": "2026-05-07T11:29:26Z",
"last_comment_at": "2026-06-17T12:55:40Z",
"last_comment_author": "egorikas"
},
{
"number": 293,
"created_at": "2026-05-11T13:24:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 294,
"created_at": "2026-05-11T18:50:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 295,
"created_at": "2026-05-12T13:42:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 296,
"created_at": "2026-05-13T18:03:55Z",
"last_comment_at": "2026-05-26T07:49:03Z",
"last_comment_author": "arpitjain099"
},
{
"number": 298,
"created_at": "2026-07-03T00:21:49Z",
"last_comment_at": "2026-07-16T16:46:41Z",
"last_comment_author": "wevans-ant"
},
{
"number": 300,
"created_at": "2026-07-10T03:42:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 302,
"created_at": "2026-07-22T16:11:04Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T22:12:11Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 35,
"created_at": "2023-03-20T11:53:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2023-06-01T22:30:38Z",
"last_comment_at": "2023-06-02T18:15:00Z",
"last_comment_author": "haircommander"
},
{
"number": 45,
"created_at": "2023-06-14T07:19:56Z",
"last_comment_at": "2023-10-10T17:04:14Z",
"last_comment_author": "kad"
},
{
"number": 49,
"created_at": "2023-09-01T12:38:45Z",
"last_comment_at": "2025-05-23T21:43:06Z",
"last_comment_author": "samuelkarp"
},
{
"number": 56,
"created_at": "2023-09-22T08:03:54Z",
"last_comment_at": "2025-05-23T21:40:08Z",
"last_comment_author": "samuelkarp"
},
{
"number": 63,
"created_at": "2023-12-13T21:34:07Z",
"last_comment_at": "2023-12-14T11:18:41Z",
"last_comment_author": "kad"
},
{
"number": 64,
"created_at": "2024-01-11T09:57:17Z",
"last_comment_at": "2025-05-26T04:36:31Z",
"last_comment_author": "mythi"
},
{
"number": 65,
"created_at": "2024-01-25T22:53:57Z",
"last_comment_at": "2025-05-23T21:36:59Z",
"last_comment_author": "samuelkarp"
},
{
"number": 72,
"created_at": "2024-02-22T09:55:13Z",
"last_comment_at": "2025-08-16T08:37:04Z",
"last_comment_author": "ZiMengSheng"
},
{
"number": 77,
"created_at": "2024-04-12T08:12:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 80,
"created_at": "2024-05-07T12:26:03Z",
"last_comment_at": "2024-05-29T08:34:31Z",
"last_comment_author": "liangjingtao11"
},
{
"number": 83,
"created_at": "2024-05-13T07:56:24Z",
"last_comment_at": "2024-05-15T08:05:49Z",
"last_comment_author": "klihub"
},
{
"number": 86,
"created_at": "2024-05-22T21:10:50Z",
"last_comment_at": "2024-05-23T23:17:12Z",
"last_comment_author": "mikebrow"
},
{
"number": 99,
"created_at": "2024-07-11T11:50:23Z",
"last_comment_at": "2024-07-22T06:52:56Z",
"last_comment_author": "samuelkarp"
},
{
"number": 106,
"created_at": "2024-09-06T13:46:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 114,
"created_at": "2024-10-05T14:59:06Z",
"last_comment_at": "2026-04-16T10:04:26Z",
"last_comment_author": "Andreagit97"
},
{
"number": 122,
"created_at": "2024-11-19T09:22:28Z",
"last_comment_at": "2025-09-17T17:26:33Z",
"last_comment_author": "klihub"
},
{
"number": 127,
"created_at": "2024-12-12T09:19:25Z",
"last_comment_at": "2025-05-23T21:03:11Z",
"last_comment_author": "samuelkarp"
},
{
"number": 129,
"created_at": "2024-12-26T14:21:23Z",
"last_comment_at": "2025-05-23T21:01:36Z",
"last_comment_author": "samuelkarp"
},
{
"number": 142,
"created_at": "2025-01-02T03:17:26Z",
"last_comment_at": "2025-05-23T21:10:07Z",
"last_comment_author": "samuelkarp"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/containerd/nri",
"host": "github.com",
"name": "nri",
"owner": "containerd"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 51,
"vitality": 81,
"community": 59,
"governance": 78,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 181,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 35
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "35/52 weeks with commits",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 35
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "181 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 181
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v0.12.1",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 108.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~108.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 108.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 59,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"forks": 101,
"stars": 396,
"watchers": 31,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "396 stars",
"points": 42.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 396
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "101 forks",
"points": 16.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 101
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "31 watchers",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 31
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 78,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 45,
"top_contributor_share": 0.366
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 37% of commits",
"points": 14.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 37
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "45 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 45
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 56 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"merged_prs": 180,
"open_issues": 40,
"closed_issues": 28,
"issue_closed_ratio": 0.412,
"closed_unmerged_prs": 34
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "41% of issues closed",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 41
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "180/214 decided PRs merged",
"points": 32.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 180,
"decided": 214
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 1307,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "containerd",
"public_repos": 39,
"account_age_days": 3986
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,307 followers of containerd",
"points": 22.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1307,
"login": "containerd"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "39 public repos, account ~10 yr old",
"points": 23.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 39
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/containerd/nri"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 56 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "24 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 68,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.85,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "85 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 85,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"examples/go.mod",
"go.mod",
"plugins/device-injector/go.mod",
"plugins/differ/go.mod",
"plugins/hook-injector/go.mod",
"plugins/logger/go.mod",
"plugins/network-device-injector/go.mod",
"plugins/network-logger/go.mod",
"plugins/rdt/go.mod",
"plugins/template/go.mod",
"plugins/ulimit-adjuster/go.mod",
"plugins/v010-adapter/go.mod",
"plugins/wasm/go.mod",
"plugins/writable-cgroups/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 439028,
"source_files_sampled": 100,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/100 source files over 60KB",
"points": 53.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 100,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples",
"samples"
],
"has_mcp_signal": false,
"api_schema_files": [
"pkg/api/api.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "pkg/api/api.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "pkg/api/api.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples, samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples, samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T14:13:02.593177Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/containerd/nri.svg",
"full_name": "containerd/nri",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}