hrodrig / kzero

来自 GitHub 依赖图的完整解析依赖集合：8 个直接依赖与 112 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 120 个包，其中也包含从不交付的开发与测试版本固定：5 个存在已知公告，0 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "automation",
        "cli",
        "devops",
        "golang",
        "helm",
        "kubernetes",
        "sre",
        "yaml"
      ],
      "is_fork": false,
      "size_kb": 10502,
      "has_wiki": true,
      "homepage": "https://kzero.hermesrodriguez.com",
      "languages": {
        "Go": 495110,
        "Roff": 5497,
        "Shell": 5464,
        "Makefile": 18391,
        "Dockerfile": 1219
      },
      "pushed_at": "2026-07-20T00:27:12Z",
      "created_at": "2026-05-06T03:49:20Z",
      "owner_type": "User",
      "updated_at": "2026-07-16T02:40:20Z",
      "description": "Go CLI for declarative Kubernetes pipelines (down, up, reset). Turn start-over into a checked-in playbook: return workloads to a known initialization state—ordered scale-down and bring-up for Deployments, StatefulSets, Helm release steps, and custom scripts. Includes API watchdog, throttled progress logs, and delivery-visible notify events.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://hermesrodriguez.com",
      "name": "Hermes Rodríguez",
      "type": "User",
      "login": "hrodrig",
      "company": null,
      "location": "Caracas, Venezuela",
      "followers": 53,
      "avatar_url": "https://avatars.githubusercontent.com/u/105245?v=4",
      "created_at": "2009-07-15T14:44:18Z",
      "is_verified": null,
      "public_repos": 313,
      "account_age_days": 6216
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-07-16T11:25:54Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-07-15T14:36:22Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2026-07-12T04:05:32Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2026-07-12T03:11:47Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-07-08T15:13:23Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-06-29T17:17:51Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-29T16:31:19Z"
        },
        {
          "tag": "v0.7.4",
          "kind": "patch",
          "published_at": "2026-06-16T01:48:29Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2026-06-12T15:08:50Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2026-06-11T18:58:27Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-06-11T02:12:25Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-10T13:11:59Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-06-10T13:06:03Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-06-08T04:08:11Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-05T15:03:02Z"
        },
        {
          "tag": "v0.5.7",
          "kind": "patch",
          "published_at": "2026-06-05T12:46:44Z"
        },
        {
          "tag": "v0.5.6",
          "kind": "patch",
          "published_at": "2026-06-05T11:56:30Z"
        },
        {
          "tag": "v0.5.5",
          "kind": "patch",
          "published_at": "2026-06-05T03:16:01Z"
        },
        {
          "tag": "v0.5.4",
          "kind": "patch",
          "published_at": "2026-06-05T01:09:39Z"
        },
        {
          "tag": "v0.5.3",
          "kind": "patch",
          "published_at": "2026-06-04T12:38:22Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2026-06-04T11:39:52Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-06-04T02:44:29Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-04T02:36:58Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-06-04T01:46:39Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-05-13T21:25:40Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-05-13T19:06:04Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-05-13T03:42:56Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "747a261683831cdf6ff7104eb722ec189c104b3c",
          "body": "- Retry: treat connection lost / http2 client connection lost as transient\n- VERSION, CHANGELOG, README badge, man .TH, ROADMAP, SPEC, BSD ports, demo.gif\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release prep v1.0.1",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-16T02:39:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "47ed3ed6b7241a505406308f6b75e1dd2c880bb9",
          "body": "- Bump VERSION, CHANGELOG, README badge/install examples, man .TH, BSD ports\n- ROADMAP + plan-1.0.0 marked shipped; re-record docs/demo.gif\n- Drop HOMEBREW_TAP_TOKEN from public README; keep in contrib/README + release.yml\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release prep v1.0.0",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T14:23:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dfe3086cecee925e5c60e692e8a95f55b6b1d58c",
          "body": "- light GitHub banner; navy trust + copper CTA\n- SVG source + PNG; bastion-first callout\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: rewrite README hero for out-of-band thesis",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T13:33:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3be3bf84d8ebe42ccbe59fb0cb3cfe29d0ad7aa9",
          "body": "- develop highlights, exit codes, doctor/completion, kind CI\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(README): prep 1.0.0 operator surface",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:50:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d1889b49365711669695e710b9164d22c536ef49",
          "body": "- bump v0.9.0 labels; require_delivery covers stalled\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(SPEC): align contract index with 1.0.0 band",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:47:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3502903bfc96231b57e3c3d80900d9a849defd18",
          "body": "- sectional ANSI help; NO_COLOR=1 disables\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "make help: pgwd-style colored sections",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:40:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6d4d912012e8a627118c5862bd993d4bfd812752",
          "body": "- cobra Execute paths for config/k8s/executor/notify codes\n- notifications cookbook: require_delivery, stalled, exit table\n- sample YAML require_delivery; CHANGELOG Unreleased\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "CLI exit e2e (1–4) and notify delivery docs",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:37:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "46889976347ca8724468bdb073ee092f50b38bf8",
          "body": "- Breaking default: omitted → native; shell is opt-in\n- Migration note in CHANGELOG; sample, schema, SPEC, README, man\n- Update CLI/engine tests for plan-only shell dry-run fixtures\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat: default run.execution to native when omitted (#32)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:17:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3fcfe3356875044ad2f87b67c4cbdf0726aa0c77",
          "body": "- testing/kind: minimal Deployment live down/up (native)\n- GHA job integration-kind (20m budget); flake policy in README\n- make test-kind; SPEC CI contract table\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "ci: kind integration gate for product repo (#34)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:12:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dbad7f089511aa390a9114ec24919ef81a59cfdd",
          "body": "- internal/exitcode: 0–4 (config / k8s / executor / notify), groot-style wrap\n- Wire at unambiguous CLI and require_delivery sites; SPEC §5 + man EXIT STATUS\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat: stable CLI exit code taxonomy (#42)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:08:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "875a1a15aec7feea006f71c430fb224089c8025a",
          "body": "- docs/examples/pvc-statefulset-data-strategy.md (scale→wait→delete, wipe, snapshot, init)\n- Link from SPEC/README/docs index; ROADMAP #33 Done; plan-1.0.0 PR1\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Docs: PVC/StatefulSet data strategy cookbook (#33)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T12:02:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "892fb4920cd407cee3dd894a4631c5a575c196fb",
          "body": "Park sprawl (parallel, webhooks, multi-cluster, secrets, OTel).\nLink from ROADMAP and docs index.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: add bounded plan-1.1.0 (interpreter, #29, resume)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T11:55:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7fb46e4a0aa1e4f9af528a69a2bba57dcdb432ba",
          "body": "- SPEC/README: shebang ignored; Ubuntu dash vs bashisms\n- Draft plan-1.0.0 and index links\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: POSIX /bin/sh hook contract; add plan-1.0.0",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-15T11:44:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3985efd906627ca731c1da8acfd5676bcd9cd521",
          "body": "…ainer)\n\n- archives: format → formats; format_overrides.format → formats\n- nfpms: builds → ids; add maintainer (goreleaser check clean)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(release): modernize GoReleaser config (formats, nfpms ids/maint…",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T22:18:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ee9e92ba2d666b9597c73b7dcfb5e4de1210c1be",
          "body": "newRootCmd + OnInitialize mutates global Viper; drop t.Parallel\nunder go test -race (CI). Changelog Unreleased note.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): stop race in parallel completion tests",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T04:01:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ae9b0723a9ff2860413875852f7afde4173bdc6b",
          "body": "- ROADMAP: #29 not in 1.0.0; post-1.x band + custom: workaround\n- plan-0.9.x: mark #48 fully done (v0.9.2)\n- plan-0.7.x: historical note matches deferral\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: defer #29 to post-1.x; clear #48 partial wording",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:56:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c49fc7216cdf23eb4bdd0b9b7858b6563be230ef",
          "body": "Bump VERSION, CHANGELOG, README badge, man .TH, BSD ports,\nROADMAP, and re-record docs/demo.gif. release-check green.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release prep v0.9.2 (0.9.x stretch)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:49:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "015c21715b4494bf6353a893a0bdbae6030620ec",
          "body": "- configs/kzero.schema.json + sample Language Server hint\n- Close docs polish (#48): Cosign verify examples, README trim\n- SPEC/CHANGELOG/ROADMAP: mark #48–#51 done on develop\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Add JSON Schema for kzero.yaml editor aid (#51)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:34:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7d454b4f3c3051064cafe77ff0c2f54d9ab3c352",
          "body": "Randomize wait in [0, exponential]; add doctor coverage tests so\ncover-check stays above 80%.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(retry): full jitter on live step backoff (#50)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:32:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "92b623fb5a2437c87e27b77f556225e94eb15fac",
          "body": "Check config, PATH binaries, API reachability, pipeline workloads, and\nSelfSubjectAccessReview RBAC hints without mutations; text/json output.\nDocument the command contract in SPECIFICATIONS.md.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): add kzero doctor preflight command (#49)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:28:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7cd163799a868448b717e6213200ce4f2f0cb333",
          "body": "Same cmd/kzero built twice (groot pattern); GoReleaser archives/packages\nand Homebrew include kubectl-kzero; make install-kubectl-plugin; BSD\nports install both binaries.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): ship kubectl-kzero plugin binary (#52)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:24:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a7942832ffd6e01e8b9b489d97a1cce8a80ae6bc",
          "body": "Add kzero completion for bash/zsh/fish/powershell, disable Cobra's\ndefault completion cmd, document in README/man, mark roadmap #53 done.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): shell completion with strict shell validation (#53)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T03:20:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7a9b8d6786d8cf0dc290cfe5a1cee5d52442910d",
          "body": "Record thread-safe ClientFactoryDefault and Engine.PreflightFactory\nunder Fixed for the security patch release.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(changelog): note factory race fixes in v0.9.1",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T02:57:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "febaa2a3799e776f77e4bc90a7dc4fad0277e8d1",
          "body": "Replace process-wide stubLivePreflightOK swaps with per-Engine\nPreflightFactory so parallel live RunDown tests do not clobber each\nother before blockingRunner starts.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(engine): inject PreflightFactory to avoid parallel test races",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T02:52:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dc30de5f1a82f3a19715a0aa823dec05403b727e",
          "body": "Replace mutable DefaultClientFactory global with ClientFactoryDefault()\nand SwapDefaultClientFactory() guarded by sync.RWMutex. Update call sites\nand tests; stub live preflight in shutdown cancel test.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "refactor(validate): thread-safe default client factory",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T02:32:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "15be8a075007a567ac85958322f4fd7ac2a7cc92",
          "body": "- VERSION 0.9.1, CHANGELOG, README badge, man page, BSD ports\n- Document GO-2026-5932 (Helm openpgp) in .govulncheck-ignore.yaml\n- Clarify .grype.yaml policy: oras-go fixed in v2.6.2; govulncheck for transitives\n- ROADMAP: v0.9.1 shipped highlights\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release: prepare v0.9.1 security patch",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T01:36:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5f1b376e94c31a3bf4941472c66563edef45e4e2",
          "body": "- Bump Go toolchain to 1.26.5 (stdlib GO-2026-4970, GO-2026-5856)\n- Upgrade transitive oras.land/oras-go/v2 to v2.6.2 (CVE-2026-50163 / Dependabot #6)\n- Remove GHSA-fxhp-mv3v-67qp Grype ignore from .grype.yaml\n- Final stage: gcr.io/distroless/static-debian13:nonroot (Debian 12 EOL)\n- README badges and minimum Go version aligned\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Security and image base: Go 1.26.5, oras-go v2.6.2, distroless debian13",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-12T00:38:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9e99cebdff0abc163126c693a5d28c94a90f3c08",
          "body": "Re-record terminal demo after VERSION bump so README shows current\nkzero version and analyze output.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: regenerate demo.gif for v0.9.0 (VHS)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-08T15:46:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6a14f81a4a5123bb50d8dbe79d75361988fcea28",
          "body": "Ship the 0.9.x bastion-first hardening band on develop ahead of tagging\nv0.9.0 from main via GitHub Actions Release (GoReleaser).\n\nFeatures and fixes:\n- E2E smoke CI (#45): testing/smoke/ + e2e-smoke job (analyze, dry-run down)\n- Watchdog mid-wait tests (#46); api_watchdog.go HTTP /healthz probe fix\n[…]\nrype.yaml\n\nDocs: CHANGELOG [0.9.0] + compare links; ROADMAP/plan-0.9.x/docs README;\ndeployment-models docker pin v0.9.0; #48 partial (#49-#53 → 0.9.1).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release: prepare v0.9.0 (0.9.x #43-#47, CI smoke, security gates)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-08T14:58:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7974d351e8d5edcdedbb416bcc93b1d4a78cd63c",
          "body": "Update man page for 0.7–0.8 CLI surface; release-check enforces .TH\nversion matches VERSION; document man sync in CONTRIBUTING.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(man): sync kzero.1 to v0.8.1 and guard release",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-08T12:20:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c18b03771314d758a61a77913ff00ba32d81da6c",
          "body": "When notify.require_delivery is true, a failed pipeline.error or\npipeline.stalled POST fails the pipeline (wraps the original error).\nRemove the deferred analyze warning; fix stalled dispatch log event label.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(engine): wire notify.require_delivery fail-fast (#43)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-02T01:22:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3f314d7d26054a917552741b07715507aac6f95d",
          "body": "Add SanitizeForFilename and target --output slug so run-kzero wrappers\ncan embed the cluster name in audit log paths (kzero-<cmd>-<slug>-<ts>.log).\n\nDocs: pipeline-network-loss log naming; anonymize waiting-between-pipeline-steps examples.\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): kzero target --output slug for wrapper log filenames",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-02T01:21:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "92a3127f2efe92f564574fb4bf208d8e08e685df",
          "body": "Wire signal.NotifyContext into pipeline commands so bastion cron/systemd\nSIGTERM cancels the in-flight step. Engine tracks last hook/step and emits\na warning line on user interrupt; API watchdog stall stays separate.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(engine): graceful shutdown on SIGINT/SIGTERM (0.9.x #44)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-07-02T01:18:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "15d5567e44ff7fce11f8c2c36d9de7b93bf48831",
          "body": "Track optional S3/GCS/SFTP upload of run logs off the bastion;\nhooks and selfhosted patterns stay the default path.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(roadmap): optional post-pipeline log upload (#55, 1.0.x)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-30T02:06:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5a18d9f2ae7820e3e7ccd900e70f02e7fd75b3e8",
          "body": "Add operator-facing comparison doc (k0rdent, szero, Helm/GitOps, etc.)\nby primary use case, not feature checklist. Cross-link from README\nand docs index; extend 0.9.x plan with kubectl-kzero plugin (#52)\nand shell completion (#53, groot #80 pattern).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: scope vs alternatives and 0.9.x plan (#48, #52–#53)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-30T01:50:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d86c66612587a4aca34634488fc45eed1e8a455a",
          "body": "- Refine quick decision matrix; shorter decision-flow Mermaid\n- Docker bastion security note (:ro mounts, nonroot)\n- Highlight PR2/#44 as top technical priority; expand non-goals\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: polish deployment-models and plan-0.9.x (Grok review)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-30T01:27:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f93975e2866d542e879466cdf179e200eaa2d08",
          "body": "Document out-of-band control as the recommended production posture;\nin-cluster Job remains supported but not for destructive reset.\n\n- Add docs/deployment-models.md (matrix, warnings, docker bastion, flowchart)\n- Add docs/plan-0.9.x.md with priority tiers and PR order (#44 before #43)\n- Update ROADMAP, SPEC, README, CHANGELOG [Unreleased]\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: bastion-first deployment model and 0.9.x hardening plan",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-30T01:15:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4b45032b7a390047d2bbcd17c82fb9747b8fe445",
          "body": "- Remove incorrect Deferred warning for run.api_watchdog.enabled (engine\n  watchdog ships since v0.8.0); refresh notify.require_delivery message.\n- Sync operator cookbooks for post-v0.8.0 (pipeline-network-loss, docs\n  index, notifications troubleshooting).\n- Add deferred-warning tests (analyze_output, analyze/down integration).\n- VERSION 0.8.1, CHANGELOG, README badge, BSD ports, VHS demo.gif.\n- make release-check green (80.3% coverage).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release v0.8.1 — fix api_watchdog deferred warning and doc sync",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T17:03:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6b3d8387140ce9c9d369ee22b5710aa27a8a8d69",
          "body": "- make port-freebsd-sync: PORTVERSION 0.8.0\n- make port-openbsd-sync: DISTNAME 0.8.0\n- TestAnalyze_apiWatchdogEnabledShowsDeferredWarning: exercises\n  printDeferredSummary with api_watchdog enabled, bumps coverage\n  above 80% gate in CI.",
          "is_bot": false,
          "headline": "chore(release): BSD port sync + coverage bump",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T16:16:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4571355181e19ecf834cc68bd23d7b5a70636218",
          "body": null,
          "is_bot": false,
          "headline": "test: add Slack stalled event coverage",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T16:10:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c55875795a1bbd5e34b9f013e8fab455667406d7",
          "body": "- Repo description now mentions API watchdog, throttled progress logs,\n  pipeline.stalled alerts.\n- \"Planned work: 0.8.x\" replaced with \"Shipped: v0.8.0\" section\n  pointing to CHANGELOG.\n- Feature list on README intro includes API watchdog.",
          "is_bot": false,
          "headline": "docs: update README for v0.8.0 features",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T16:07:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2715281ecbae76442d2412b7416d69af9a7f2190",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): merge develop into main for v0.8.0",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T16:04:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3021542dfb91d9e045b38634e305d9ce6c3a2227",
          "body": "Extract known containerd v2-only false positive GO IDs into a\ndedicated ignore file. The make security rule reads the list from\n.govulncheck-ignore.yaml instead of hardcoding GO IDs in the recipe.",
          "is_bot": false,
          "headline": "ci: govulncheck false positives in .govulncheck-ignore.yaml",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:55:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea3bb2e02b6ffba0c0582d850b2fb9a9e85abaf5",
          "body": "The Security workflow called govulncheck directly, bypassing the\nmake security filter that excludes 3 containerd v2-only false positives.\nSwitch to make security so the filter is applied.",
          "is_bot": false,
          "headline": "ci: use make security in security workflow",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:48:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "890f85f75c0f6fbc2c3f463b6df71f4ec178195f",
          "body": "Provide a dummy kubeconfig in the test so writeKubernetesTarget\nsucceeds and EventStart fires even in environments without a real\nkubeconfig (CI). Without this, the preflight step fails before notify\ndispatch is triggered, and the test cannot verify the [ERR] log line.",
          "is_bot": false,
          "headline": "test: fix TestDown_logsErrOnNotifyDispatchFailure for CI",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:45:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acd14244306f4d46a4a79bb0d90b3764d07ff174",
          "body": "…sitives\n\nBump containerd from v1.7.32 to v1.7.33 to fix two real CVEs:\n- GO-2026-5758 (CRI label to binary:// RCE)\n- GO-2026-5475 (unbounded group parse DoS)\n\nThree remaining advisories (GO-2026-5622, GO-2026-5338, GO-2026-5064)\nare false positives against the v1 module -- they only affect containe\n[…]\n advisory\nmatches the known-false-positive list, exit 0 with a note instead of\nfailing the pipeline. This keeps CI green while remaining alert to any\nnew vulnerabilities that arent in the filter list.",
          "is_bot": false,
          "headline": "chore(deps): bump containerd to v1.7.33 + ci: filter v2-only false po…",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:38:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3573c25dfdd98b3c4281708c139e08cefba87016",
          "body": "API watchdog, notify delivery visibility, reset phase-boundary\npreflight, throttled progress logs, and pipeline.stalled event.\n\nBump VERSION 0.7.4 → 0.8.0. Update ROADMAP (tick #35-#41 Done,\nclose band, Shipped entry), CHANGELOG (v0.8.0 section), SPEC\n(api_watchdog config section, notify.require_delivery,\npipeline.stalled), README badge, plan-0.8.x.md (Status Done).",
          "is_bot": false,
          "headline": "chore(release): v0.8.0 — 0.8.x band close",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:22:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56ef55249e9dbb7862b2f6a6a71abd43d6300e5c",
          "body": "….8.x #41)\n\nPR6: adds a distinct pipeline.stalled notify event for API watchdog\ntrips, separate from general pipeline.error.\n\nChanges:\n- Notify: new EventStalled = \"pipeline.stalled\" constant.\n- Engine: Engine.stalled flag set by watchdog's OnTrip callback.\n  dispatchPipelineError checks eng.Stalled\n[…]\ns and sends pipeline.stalled\n  event with simulated error text.\n- CLI help updated to list pipeline.stalled.\n\nVerified: make test (19 packages green), make cover-check (80.1% >= 80%),\nmake lint clean.",
          "is_bot": false,
          "headline": "feat(notify): pipeline.stalled event + notify test --event stalled (0…",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:09:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97497c151887b6141b66169ecd457ff277897cd4",
          "body": "PR5: during long-running operations (rollout wait, Helm install,\nHelm uninstall, release scripts), emit periodic [INF] progress lines\nevery 30s: \"still waiting rollout <ref> (elapsed <duration>)\",\n\"still installing release <ref> (elapsed <duration>)\", etc.\n\nImplementation: new LiveRunner.withThrottl\n[…]\nl rollout status)\n- Helm SDK Uninstall/UpgradeInstall\n- Shell Helm Uninstall/UpgradeInstall (release script)\n\nVerified: make test (19 packages green), make cover-check (80.2% >= 80%),\nmake lint clean.",
          "is_bot": false,
          "headline": "feat(engine): throttled progress logs on long waits (0.8.x #38)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T15:02:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "89b2fc3f64630ee5bb0472dfdd4a88dd7ce87889",
          "body": "PR4: after down completes and before up begins in RunReset, re-run\nthe API preflight check. This catches scenarios where the down phase\nsucceeded but the API became unreachable before up — previously the\nengine would proceed directly into runUp (which also preflights, but\nat the top of the function)\n[…]\nh a stale API connection.\n\nOne-line addition in RunReset:\n  if err := e.runPreflight(ctx, cfg); err != nil ...\n\nVerified: go test (19 packages green), make cover-check (80.1% >= 80%),\nmake lint clean.",
          "is_bot": false,
          "headline": "feat(engine): reset phase-boundary preflight (0.8.x #37)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T14:56:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "64ff2f04595a4c28454c16330fe46db1d298153a",
          "body": "PR3 of docs/plan-0.8.x.md: implements the API watchdog goroutine that\nperiodically probes the Kubernetes API server during live pipelines and\nfails the running step on cumulative unreachability.\n\nNew package internal/watchdog:\n- Watchdog goroutine with injectable Healthz function, Clock\n  interface \n[…]\neline runner.\n- Tests: 2 new engine tests for disabled and no-config paths.\n\nVerified: make test (19 packages green), make cover-check (80.1% >=\n80% gate), make lint (gofmt -s, go vet, gocyclo clean).",
          "is_bot": false,
          "headline": "feat(engine): api watchdog goroutine for live runs (0.8.x #36)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T14:51:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3b09d7b37e14bdd0d0e834a5b6460997672716c",
          "body": "… (0.8.x #39)\n\nPR2 of docs/plan-0.8.x.md: parse and bind the new schema keys so\noperators can declare intent now, while the engine work lands in PR3\n(#36 watchdog goroutine) and beyond. Both fields are surfaced in\n`kzero analyze`'s Deferred summary until the engine honours them,\nmatching the existin\n[…]\nession\n  coverage), notify.require_delivery, api_watchdog full env binding.\n\nVerified: make test (17 packages green), make cover-check (80.2% >=\n80% gate), make lint (gofmt -s, go vet, gocyclo clean).",
          "is_bot": false,
          "headline": "feat(config): schema for run.api_watchdog and notify.require_delivery…",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T14:11:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44e07b740c54d2ecfbb3a64c916b84b6a9ede45f",
          "body": "Three call sites previously swallowed notify.Dispatch errors with\n`_ = notify.Dispatch(...)`. Operators running a live reset on a bastion\nwith a flaky outbound webhook had no signal that pipeline.start /\npipeline.success / pipeline.error POSTs were failing — the failure\nonly surfaced in wrapper logs\n[…]\ning \"notify dispatch failed\" appear in stderr, plus the\nwebhook URL is redacted.\n\nVerified: make test (17 packages green); make cover-check (80.2% >= 80%);\nmake lint (gofmt -s, go vet, gocyclo clean).",
          "is_bot": false,
          "headline": "feat(notify): log [ERR] on dispatch failure (0.8.x #35)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T14:03:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47d94c6efc923023aaea458ca24853221d38299d",
          "body": "The .gitignore strategy is deny-all + explicit whitelist of files that\nship in the repo. After hoisting ROADMAP.md and SPECIFICATIONS.md to the\nroot in the previous commit, the two files are tracked but their\npresence in the whitelist was implicit (they were already tracked, so\ngitignore did not aff\n[…]\nle at a glance — anyone\nreading the file sees every shipped root-level document declared.\n\nVerified: git ls-files -s keeps both at their prior hashes;\ngit check-ignore reports no rule for either path.",
          "is_bot": false,
          "headline": "docs: whitelist ROADMAP.md and SPECIFICATIONS.md in .gitignore",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T13:01:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "315f939378ee9aa521c8ea989f8d1e44e19c11d0",
          "body": "Both documents were nested under docs/ alongside internal plans and\nexample cookbooks, which diluted their visibility for users landing on\nthe repo. The behavior contract and the planned work are the two main\nartefacts a contributor or operator needs first; hoisting them to the\nroot makes them disco\n[…]\nollapses to 1 at cmd/kzero/main.go:14. The\ntaxonomy itself is deferred to 1.0.0 so existing wrappers keep working;\ncodes beyond config error are emitted only where the failure category\nis unambiguous.",
          "is_bot": false,
          "headline": "docs: hoist ROADMAP and SPECIFICATIONS to repo root",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-29T12:56:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e9d736dff634b59813db541ea96d268a38363b6",
          "body": "fix(release): coverage gate for v0.7.4",
          "is_bot": false,
          "headline": "Merge pull request #2 from hrodrig/develop",
          "author_name": "Hermes Rodriguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-16T01:34:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "922787a22fa0d99597fdc00b373ffcd7dd287697",
          "body": "TestSlackFooter_version mutates package-level AppVersion; do not run\nit in parallel with dispatch tests that read slackFooter().\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "test(notify): fix AppVersion race under -race CI",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-16T01:26:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "02a1c595d0bc77c02f83866ac4a33a0f9adc4f85",
          "body": "Add main and Execute() tests for --print-sample-config so CI\ncover-check stays above 80% (was 79.9% on release runner).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "test: raise coverage above 80% gate for release",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-16T01:21:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c3956eeeddc6fcdb425e9728291d11aeee64f6ba",
          "body": "Release v0.7.4",
          "is_bot": false,
          "headline": "Merge pull request #1 from hrodrig/develop",
          "author_name": "Hermes Rodriguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-16T00:23:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58c5c8dbd16c0c8b308cac69b85a678c1fea6ade",
          "body": "Bump VERSION, README install examples, CHANGELOG, ROADMAP Shipped row,\nand Homebrew cask caveats for --print-sample-config.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(release): prepare v0.7.4",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-16T00:17:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5ae6a1ba065ebeed1ee37c2cb510ca2d16f5669b",
          "body": "--print-sample-config embeds configs/kzero.sample.yml; Docker builds must\ncopy configs/ into the image build stage.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(docker): include configs/ in build context",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-16T00:15:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d54900477091900e1f833bca5c0b94c93fc8a716",
          "body": "Embed configs/kzero.sample.yml so binary-only installs (Homebrew, PATH\nbinaries) can generate kzero.yaml without copying from share/examples.\nDocument in README, SPECIFICATIONS, and CHANGELOG.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): add --print-sample-config flag",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-15T23:49:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "921ce4d3ade39f18e519dc7f2b75ef95cfb74951",
          "body": "Document production incident learnings as the 0.8.x band (#35–#41):\nAPI watchdog, notify delivery visibility, reset phase preflight.\nAdd pipeline-network-loss cookbook, ROADMAP focus shift, README refresh.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Plan 0.8.x pipeline resilience and operator network-loss docs",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-12T17:12:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6077f85465a9c53d885bdb79968332d56a7da301",
          "body": "- Timestamped [DBG|INF|WRN|ERR] text lines with --log-level filter\n- Slack rich attachments, KZERO_NOTIFY_* env binding, AppVersion ldflags\n- Helm SDK private OCI registry login; docs and demo.gif refresh for 0.7.3\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release v0.7.3: log levels, Slack notify, OCI auth hardening",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-12T14:53:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5d4d237668e8fdc262ff0134d474dd48a17bb531",
          "body": "Prefix every text line as YYYY/MM/DD HH:MM:SS: kzero - [LEVEL] - …,\nfilter via --log-level (default info), and document the four-level\ncontract in SPECIFICATIONS (aligned with Microsoft LogLevel subset).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Add timestamped text logs with DBG/INF/WRN/ERR levels",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T20:23:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fd833ccd9883e7128cd4286c801e40f50470ad10",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: ROADMAP shipped row for v0.7.2 release",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T18:43:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3ad484ce1cc3026e2cab9a4ca6656dac7476a6b6",
          "body": "…v0.7.2)\n\n- pods_schedulable verify/probe check for unschedulable Pending pods (#27)\n- helm.registries OCI login for Helm SDK chart pulls\n- release script: override and custom: KZERO_* env parity (#30, #31)\n- VERSION 0.7.2, CHANGELOG, ROADMAP, SPECIFICATIONS, BSD ports\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Close 0.7.x band with PR7 scheduling, OCI auth, and helm ergonomics (…",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T13:51:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1095be3f5219983d5f1cdc59391be29ed50467fc",
          "body": "Add Helm SDK probe-redis chart manifest and native infra_probe sample;\nextend cookbook and SPEC. Probe tests cover native release/pvc pipeline\nand dry-run SDK plans without shell scripts.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Document and test native infra probe path (#26)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T13:25:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8fa565f063e1ba1dca62f4a2417fc7e856fd51bb",
          "body": "Introduce exec.<namespace>/<pod> with required container and command\noptions (optional stdin and timeout). Always uses client-go\nremotecommand regardless of run.execution. Wire analyze, dry-run,\ncluster validation, and SPEC docs.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Add exec pipeline step via pod remotecommand (#23)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T13:19:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a72b6978358faae84f2cee94648af622cb6ae939",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: plan status — PR5 exec next",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T12:57:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "205612825238d3d935bc22e18fa588d80eb2b1ef",
          "body": "Introduce pvc.<namespace>/<claim> steps that delete PersistentVolumeClaims\nvia client-go (background propagation, ignore-not-found) regardless of\nrun.execution. Wire analyze, dry-run, cluster validation, and docs.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Add pvc pipeline step for API-backed PVC delete (#24)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T12:56:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "51c98e65f51cb701de4e08d1fd60d9527800cf1a",
          "body": "Replace shell helm and workspace .sh scripts when run.execution is\nnative or auto: SDK uninstall on down, upgrade --install from chart\nmanifest or step overrides on up. Wire analyze, dry-run, and config\nparsing; document chart manifest contract in SPEC.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Helm SDK executor for release.* steps (#25)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T12:45:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a5c1f22b1a1a85894d870f0715c684040abf6b86",
          "body": "Bump VERSION, CHANGELOG, README badge, SPEC in-cluster note, ROADMAP,\nBSD ports, and plan-0.7.x PR2 closure. make release-check green.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release 0.7.1: in-cluster auth and #17 safety",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T01:59:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "14a1cf027682fec93136319b4acbf08687e6641a",
          "body": "Add internal/redact for logs, notify payloads, and subprocess output;\nrun.no_env_passthrough and --no-env-passthrough limit hook env to KZERO_*.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Close 0.6.x #17: secret redaction and no-env-passthrough",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T01:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "88a2708d9b20c6f2198fc1a6bdc76fbedccad0ce",
          "body": "Plan covers #17 carry-over, 0.7.1 in-cluster release, Helm SDK,\nexec/pvc/probe native, and suggested tag sequencing.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: add 0.7.x implementation plan and refresh ROADMAP",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T01:28:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "67e183bb82b281015774713d5df3628ef17028a6",
          "body": "Add LoadRESTConfig and in-cluster target resolution so kzero Jobs\ncan run with run.kubeconfig unset and no kubeconfig Secret mount.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "InClusterConfig fallback for empty run.kubeconfig",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-11T01:19:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9eed9e8c55a16177747faba3f0ae15f23db3dacd",
          "body": "- Keyless Cosign for checksums.txt and ghcr.io/hrodrig/kzero images\n- SPDX + CycloneDX SBOMs via syft; release workflow OIDC + tool installs\n- README supply chain note; ROADMAP #28 done\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release(0.7.0): Cosign signing and SBOM in GoReleaser pipeline",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-10T13:00:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "79fd72f11e0080884a18f378967e888181f9e9b9",
          "body": "- Move automation guide, hook scripts, and infra-probe assets to kzero-selfhosted\n- Add stubs and README Operator deployment table; update SPEC and cookbooks\n- Bump VERSION to 0.6.2\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: split operator assets to kzero-selfhosted (v0.6.2)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-10T12:53:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1f85d015d2e034fe494df61a72ea86b65a774d01",
          "body": "- Add contrib/man/man1/kzero.1 for BSD ports, packages, and tarballs\n- Publish Homebrew cask to hrodrig/homebrew-kzero via GoReleaser\n- Require HOMEBREW_TAP_TOKEN in release workflow (pgwd pattern)\n- Document brew install hrodrig/kzero/kzero in README\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Release 0.6.1: man page and Homebrew tap",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-08T03:56:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d6d5ab160b27997036da4b72f0eaad57b9b956eb",
          "body": "Align example refs and hook env table with generic placeholder naming.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: use platform namespace in pipeline wait examples",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-07T01:10:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4fdfb5f57177ecbd385d6abe36d871b7f16a5d4e",
          "body": "Stop parallel tests from mutating DefaultClientFactory; probe dry-run\nuses TestKubeconfigPath like other CLI target tests.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "test: fix CI race and kubeconfig in probe/verify tests",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T14:52:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "be2a583359a3f0bf74c299e613b3b6afb3c9d59e",
          "body": "Live engine retry tests mock DefaultClientFactory; verify CLI test\nuses TestKubeconfigPath so target block does not depend on runner env.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "test: stub preflight/kubeconfig for CI without KUBECONFIG",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T14:47:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4735c47ed15b23fa246159977735fe1c2bd25e4a",
          "body": "Bump VERSION, CHANGELOG, README badge, ROADMAP Shipped row, BSD ports,\nand VHS demo after green make release-check.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(release): prepare v0.6.0",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T14:41:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8152eedc12299bdea2c3a4bab2dc2f24441ddeb7",
          "body": "Live down/up/reset fail fast when the Kubernetes API is unreachable;\ndry-run prints a plan line only. analyze warns on stderr when preflight\nwould fail. SPEC documents Helm workspace contract (#22bis).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(preflight): API gate before live mutations (#19)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T14:37:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1992c6a7d45b499b1077fadb083dbccfce2b8a2c",
          "body": "Add declarative mini-pipeline before destructive down/reset with pvc_bound\nand release_ready checks, optional cache TTL, and anonymous Redis reference\ndocs for operator-owned registry/volume validation.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(probe): infra_probe gate and kzero probe command (#22)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T14:34:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5af0d053aff0a1274e0afe4ddb7b8977e880624d",
          "body": "Add kzero verify with workloads_ready and nodes_ready checks, text/JSON\nreports, and run.verify auto-run after live up/reset.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(verify): post-up readiness command (#21)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T14:00:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9e93be118392fbcd905e69e10a480a012cc13c8a",
          "body": "Add internal/log Emitter for live, dry-run, retry, and command summary\nevents. Text mode keeps legacy line format; JSON emits one object per line.\nKubernetes target block stays human-readable in both modes.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(log): --log-format json|text for pipeline output (#16)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T13:55:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "67e9726e9182042fca24e75381d9c84e2f7c2566",
          "body": "Add docs/examples/notifications.md, link from SPEC/README/docs index,\nupdate CHANGELOG [Unreleased], and refresh README notify schema table.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: notify cookbook and changelog for 0.6 PR1-PR2",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T13:50:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "265363fa380a82d946b48e7c15312b1c5acb72a7",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: mark notify (#18) done on develop",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T13:47:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7ddb56387cfe576dada64178aeaec5801e238e38",
          "body": "Implement Slack, Discord, Teams, PagerDuty, and generic webhook dispatch\non pipeline start/success/error in live mode. Add kzero notify test to\nverify channels without running a pipeline.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(notify): multi-channel alerts and notify test (#18)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T13:47:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2bfe0e3ddd894b1424f98c789c17310f22c17c50",
          "body": "Expose operator identity via Kubernetes target os_user/os_uid and\nKZERO_OS_USER/KZERO_OS_UID in subprocess env. Align 0.6 plan merge order\n(notify→slog→verify→probe) and document distroless Helm gap until 0.7.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(audit): OS user/uid in target block and hook env (#20)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T13:39:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "17b5450cb13b61363feb91cc31a6fb5fbb99ba82",
          "body": "Define 0.6.0 success criteria and merge order: audit, preflight,\nnotify, verify, infra probe, and slog before v0.6.0 tag.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: add plan-0.6.0 implementation roadmap (PR1-PR6)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T13:29:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cfc46eb224d2a0067ea04b6ea13e508fbac7cc69",
          "body": "Add infra_probe gate before destructive down/reset; native PVC/Helm\nprobe checks and scheduling sanity deferred to 0.7.x.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: roadmap infra probe (0.6) and affinity checks (0.7)",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T12:45:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fca6ae1fd768ade621c84d659c021ac51e94099e",
          "body": "WrapSubprocess classifies kubectl/helm/hook failures by exit code and\nstderr patterns (ErrNotFound, ErrForbidden, ErrTransient) for retry and\nhooks. Roadmap 0.5.x band complete; BSD ports synced to 0.5.7.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release: v0.5.7 close 0.5.x subprocess error taxonomy",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T12:35:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fa71d869f01965b51429592b4782489982a055b5",
          "body": "Expand strategic direction for a single distroless image, preflight,\nexec/pvc step types, Helm SDK, and multi-channel notifications.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: roadmap 0.6/0.7 native executor and notify channels",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T12:27:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dcd37cc3327dcd836e5ad653fd7d4d9657052c90",
          "body": "Factorize pipeline commands, document LiveRunner cache safety,\nraise cli/cluster/engine tests above 80%, and sync FreeBSD/OpenBSD\nport Makefiles to 0.5.6 for release tarballs.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release: v0.5.6 housekeeping, coverage, BSD ports",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T11:45:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6e40d93b21ecd744d6ebbf8421d5031c8d0946b1",
          "body": "Live action lines, started_at and client_id in Kubernetes target,\nrelease hook env fix, reference wait hooks, and operator docs for\nCI and step readiness (Helm wait, post hooks, master/slave pre).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release: v0.5.5 live logs, audit target, pipeline wait docs",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T03:03:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "912b6a78f171eeb20861cf8af6f51fdabefb42da",
          "body": "Gate releases on statement coverage and verify client.id flows from\nanalyze stdout through down dry-run engine logs.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "test: cover-check in release-check and client.id E2E",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T01:06:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f5ac4deb8f3ecc797e452ec5a3a2d007d1105b08",
          "body": "Align post-0.5.4 documentation with helm uninstall on down and\nKeep a Changelog version anchors through v0.5.4.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: fix CHANGELOG compare links and SPEC release down",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T01:03:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2bc723ec4bc4b5bb253a9ba190bee4d76b65c21e",
          "body": "- Propagate client.id to engine logs, retries, and hook/script env (KZERO_CLIENT_ID)\n- Run helm uninstall for release.* steps on down; up still uses helm.workspace scripts\n- Document sequential down order vs pod termination with sample and examples\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "release: v0.5.4 client.id, helm uninstall on down, integrity docs",
          "author_name": "Hermes Rodríguez",
          "author_login": "hrodrig",
          "committed_at": "2026-06-05T00:58:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 27,
      "commits_last_year": 134,
      "latest_release_at": "2026-07-16T11:25:54Z",
      "latest_release_tag": "v1.0.1",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 6,
      "mean_days_between_releases": 3.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 71,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/hrodrig/kzero",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/hrodrig/kzero",
          "is_deprecated": false,
          "latest_version": "v1.0.1",
          "repository_url": "https://github.com/hrodrig/kzero",
          "versions_count": 28,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T02:39:45Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "GNUmakefile",
        "Makefile",
        "contrib/freebsd/Makefile",
        "contrib/openbsd/port/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 23205,
      "source_files_sampled": 160,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.80.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.33",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5064",
              "GO-2026-5338",
              "GO-2026-5622"
            ],
            "fixed_version": "2.3.2",
            "advisory_count": 3,
            "oldest_advisory_days": 30
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 15
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 8
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 8
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 4,
          "critical": 1
        },
        "advisory_count": 7,
        "affected_count": 5,
        "assessed_count": 120,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/spf13/viper",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "helm.sh/helm/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.21.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.1"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.1"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": true,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "helm.sh/helm/v3",
            "direct": true,
            "version": "v3.21.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20230301143203-a9d515a09cc2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chai2010/gettext-go",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.33",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.9.11+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/exponent-io/jsonpath",
            "direct": false,
            "version": "v0.0.0-20210407135951-1de76d718b3f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-errors/errors",
            "direct": false,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-gorp/gorp/v3",
            "direct": false,
            "version": "v3.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobwas/glob",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.4-0.20250319132907-e064f32e3674",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gosuri/uitable",
            "direct": false,
            "version": "v0.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gregjones/httpcache",
            "direct": false,
            "version": "v0.0.0-20190611155906-901d90724c79",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmoiron/sqlx",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/builder",
            "direct": false,
            "version": "v0.0.0-20180802200727-47ae307949d0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/ps",
            "direct": false,
            "version": "v0.0.0-20150810152359-62de8c46ede0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lib/pq",
            "direct": false,
            "version": "v1.11.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/liggitt/tabwriter",
            "direct": false,
            "version": "v0.0.0-20181228230101-89fcab3d43de",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/makenowjust/heredoc",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/goutils",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig/v3",
            "direct": false,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/squirrel",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": false,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/monochromegane/go-gitignore",
            "direct": false,
            "version": "v0.0.0-20200626010858-205db1a8cc00",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mxk/go-flowrate",
            "direct": false,
            "version": "v0.0.0-20140419014527-cca7078d478f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/peterbourgon/diskv",
            "direct": false,
            "version": "v2.0.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rubenv/sql-migrate",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xlab/treeprint",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260406210006-6f92a3bedf2d",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.80.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": false,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/cli-runtime",
            "direct": false,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260317180543-43fb72c5454a",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kubectl",
            "direct": false,
            "version": "v0.35.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "oras.land/oras-go/v2",
            "direct": false,
            "version": "v2.6.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/api",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/kyaml",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 120,
        "direct_count": 8,
        "indirect_count": 112
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 2,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "hrodrig",
          "commits": 134,
          "avatar_url": "https://avatars.githubusercontent.com/u/105245?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "codeql.yml",
        "release.yml",
        "security.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected: CodeQL",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 3,
            "reason": "7 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "747a261683831cdf6ff7104eb722ec189c104b3c",
        "ran_at": "2026-07-23T06:41:53Z",
        "aggregate_score": 4.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-16T11:26:02Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-06-16T01:34:02Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/hrodrig/kzero",
    "host": "github.com",
    "name": "kzero",
    "owner": "hrodrig"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 54,
        "vitality": 75,
        "community": 35,
        "governance": 56,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "commits_last_year": 134,
              "human_commit_share": 1,
              "days_since_last_push": 3,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "134 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 134
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 27,
              "latest_release_tag": "v1.0.1",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": 3.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "27 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~3.9 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 3.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 35,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 0,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 56,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 2,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "2/2 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 2,
                      "decided": 2
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "followers": 53,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "hrodrig",
              "public_repos": 313,
              "account_age_days": 6216
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "53 followers of hrodrig",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 53,
                      "login": "hrodrig"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "313 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 313
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/hrodrig/kzero"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "28 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "automation",
                "cli",
                "devops",
                "golang",
                "helm",
                "kubernetes",
                "sre",
                "yaml"
              ],
              "has_wiki": true,
              "homepage": "https://kzero.hermesrodriguez.com",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://kzero.hermesrodriguez.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 54,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected: CodeQL",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "7 existing vulnerabilities detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 120 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 120
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 7,
              "affected_packages": 5,
              "assessed_packages": 120,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, unknown 4",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 120,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "GNUmakefile",
                "Makefile",
                "contrib/freebsd/Makefile",
                "contrib/openbsd/port/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.81,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "GNUmakefile, Makefile, contrib/freebsd/Makefile, contrib/openbsd/port/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "GNUmakefile, Makefile, contrib/freebsd/Makefile, contrib/openbsd/port/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "81 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 81,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 23205,
              "source_files_sampled": 160,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/160 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 160,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T06:41:59.048506Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/hrodrig/kzero.svg",
  "full_name": "hrodrig/kzero",
  "license_state": "standard",
  "license_spdx": "MIT"
}