公开记录存在风险
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-25 22:22 UTC
junczhu / oras
ORAS CLI
junczhu/oras 的健康指数为 100 分中的 33 分，处于「存在风险」区间。 其得分最高的类别是AI Readiness（64/100），最低的是Community & Adoption（12/100）。 最近一次更新在 747 天前。 近期的大部分工作由 2 位贡献者完成。
33
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
33
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
Abandonment Policy applies a 85% multiplier to weighted overall health.
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | oras.land/oras | v1.3.3 | - | 48 | 15 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
17
开发活跃度
1危急
疑似弃置
有工作送达，却无人处理
751 天内没有人类提交不计自动化提交发布停滞OpenSSF Scorecard 判定其缺乏维护
仅有沉默从不构成判定——一个小而完备的库可能多年无需提交。此提示需同时满足两点：长期没有人类提交，且项目明显未履行应尽的义务。自动化提交不计作维护。
弃置状态如何评估评分方式
| 0/36 | 推送新近度 — 最近一次推送于 747 天前 |
| 0/36 | 提交节奏 — 52 周中有 0 周有提交 |
| 0/18 | 提交量 — 最近一年 0 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
所用输入
| commits_last_year | 0 |
| human_commit_share | 0.8 |
| days_since_last_push | 747 |
| active_weeks_last_year | 0 |
发布纪律
40存在风险
评分方式
| 16.2/27 | 有发布版本 — 19 个版本标签（无 GitHub 发布版本） |
| 0/36 | 发布时效 — 最近一次发布版本于 1,879 天前 |
| 19.8/27 | 发布节奏 — 约每 83.7 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 19 |
| latest_release_tag | v0.12.0 |
| releases_from_tags | 是 |
| days_since_latest_release | 1,879 |
| mean_days_between_releases | 83.7 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
12
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 0 个星标 |
| 0/25 | 复刻 — 1 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 1 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
25危急
评分方式
| 0/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（Apache-2.0） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 否 |
| has_license | 否 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
62
维护者韧性（巴士系数）
60中等
评分方式
| 25.2/54 | 巴士系数 — 2 位贡献者贡献了半数提交 |
| 11.6/22.5 | 提交分布 — 头号贡献者编写了 48% 的提交 |
| 13.5/13.5 | 贡献者广度 — 55 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 15 contributing companies or organizations |
所用输入
| bus_factor | 2 |
| contributors_sampled | 55 |
| top_contributor_share | 0.484 |
议题与 PR 响应能力
50中等
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 26.8/38.3 | PR 接受 — 已裁定的 PR 中 7/10 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 7 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 3 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
47存在风险
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 6.9/25 | 所有者影响力 — junczhu 有 8 位关注者 |
| 20.6/25 | 既往记录 — 18 个公开仓库，账户约 5 年 |
所用输入
| followers | 8 |
| owner_type | User |
| is_verified | — |
| owner_login | junczhu |
| public_repos | 18 |
| account_age_days | 2,070 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 15 天前 |
| 20/20 | 版本历史 — 48 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | oras.land/oras |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 15 |
工程质量
基础的工程与文档实践是否到位？
56
工程实践
60中等
评分方式
| 24/24 | CI 工作流 — 8 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard：CI-Tests — 无数据 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。
文档
50中等
评分方式
| 0/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://oras.land/cli |
| 0/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | https://oras.land/cli |
| has_readme | 否 |
| has_docs_dir | 是 |
| has_description | 否 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
44
安全态势
44存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 无数据 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 15 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 39 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 4.4 |
已排除计分（无数据或不适用）：ci_tests, packaging, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
64
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 80 次人类提交中有 80 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 20 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 是 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod, test/e2e/go.mod |
| dependency_bot_commit_share | 0.2 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 205 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 36,725 |
| source_files_sampled | 205 |
| oversized_source_files | 0 |
关键数据
0GitHub 星标
55贡献者
0最近 12 个月提交数
747距最近推送天数
19发布版本数
2巴士系数（bus factor）
0开放议题
Go软件包生态系统数
数据采集警告
- Community profile unavailable
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 4.4 / 10
4.4综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 不适用 | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 15 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected: CodeQL |
| 9 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 39 existing vulnerabilities detected |
直接依赖 12
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/Masterminds/sprig/v3 | v3.2.3 | go.mod |
| Go | github.com/containerd/console | v1.0.4 | go.mod |
| Go | github.com/morikuni/aec | v1.0.0 | go.mod |
| Go | github.com/opencontainers/go-digest | v1.0.0 | go.mod |
| Go | github.com/opencontainers/image-spec | v1.1.0 | go.mod |
| Go | github.com/sirupsen/logrus | v1.9.3 | go.mod |
| Go | github.com/spf13/cobra | v1.8.1 | go.mod |
| Go | github.com/spf13/pflag | v1.0.5 | go.mod |
| Go | golang.org/x/sync | v0.7.0 | go.mod |
| Go | golang.org/x/term | v0.22.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | oras.land/oras-go/v2 | v2.5.0 | go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 6665,
"has_wiki": true,
"homepage": "https://oras.land/cli",
"languages": {
"Go": 696493,
"Shell": 6319,
"Makefile": 6163,
"Dockerfile": 1038
},
"pushed_at": "2024-07-08T05:08:48Z",
"created_at": "2022-06-21T07:28:49Z",
"owner_type": "User",
"updated_at": "2024-07-08T05:09:10Z",
"description": "ORAS CLI",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Juncheng Zhu",
"type": "User",
"login": "junczhu",
"company": "@microsoft",
"location": null,
"followers": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/74894646?v=4",
"created_at": "2020-11-23T06:37:05Z",
"is_verified": null,
"public_repos": 18,
"account_age_days": 2070
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2021-06-02T01:40:09Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2021-03-18T17:47:26Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2021-03-16T19:40:45Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2021-02-04T17:08:47Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2021-01-22T15:26:41Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2020-02-03T20:13:30Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2019-10-29T19:36:46Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2019-08-26T12:45:13Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2019-08-09T14:58:02Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2019-05-10T16:29:34Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2019-04-19T17:37:00Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2019-01-25T21:02:23Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2019-01-10T06:50:57Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2019-01-09T09:07:17Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2019-01-07T04:35:42Z"
},
{
"tag": "v0.2.1-alpha.1",
"kind": "prerelease",
"published_at": "2021-11-11T05:18:10Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2018-12-28T10:20:15Z"
},
{
"tag": "v0.2.0-alpha.1",
"kind": "prerelease",
"published_at": "2021-09-14T22:34:06Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2018-12-27T08:33:07Z"
}
],
"recent_commits": [
{
"oid": "d06bb819ba8abe5593947d1fdc857ea7d3541b45",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 (#1440)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-07-06T11:38:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a4b331f903efa89772e1ac5d45bec9b07a4b4f",
"body": "…act (#1430)\n\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "chore(ux): improve error message when attaching without subject artif…",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-07-04T16:13:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7ffb6597c423c4797ede129e7c7f49f467bc2f7",
"body": "…439)\n\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: add display handler for `cp`, `tag` and `manifest push` (#1…",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-07-04T11:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f64964319489e88e4842d20b28428d1ffd065206",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Remove last deprecated method (#1438)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-07-03T00:36:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "374a1e3687b327a785fb1290f41b4902223d81e6",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>\r\nCo-authored-by: Billy Zha <qweeah@gmail.com>",
"is_bot": false,
"headline": "refactor: Create tag handlers (#1437)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-07-01T15:21:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecb787808717a53b2a2fb4efe91a9ab548c60b30",
"body": "…(#1435)\n\nSigned-off-by: njucjc <njucjc@gmail.com>\r\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>\r\nCo-authored-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "fix: disable oras tag fallback to tag schema when tagging a referrer …",
"author_name": "Jim Chen",
"author_login": "njucjc",
"committed_at": "2024-07-01T08:45:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce758bc6561685503b080064fe3682f2194ea6b9",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "build(ci): unset codecov CLI version (#1434)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-06-28T09:07:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f84d5729fb1f03d1653b18ea2e5e2de8288bcdb5",
"body": "…1433)\n\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: reduce printer instantiation & unify stdout/stderr usage (#…",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-06-27T03:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46de891e5938820fabb9dfcd4f1217df6b4d3891",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Handle stderr similar to stdout (#1427)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-26T01:31:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8519a90f98cb2a20fdaf21b9406cb19dbe5dc20",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: assembles printer in the common output option (#1428)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-06-24T00:21:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cca272c8760be02559e799e07dcced2532b369b9",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "fix: Minor spelling error in test (#1429)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-24T00:13:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13d28163d5bb9139f7db39aea2d09d5f536f29a6",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Add json test coverage (#1425)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-22T11:16:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "780c7da24665ecb9a91011367474f0be4f9caaac",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Use printer object for output (#1426)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-22T10:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "145ea7a53727675a40e8befcf8f59ba30fafbad3",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>\r\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>\r\nCo-authored-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: Pass printer to text handler (#1420)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-21T11:47:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37941a0d479138b3da72a56d85b8bfc881ea08d9",
"body": "…(#1421)\n\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "build(ci): set codecov CLI version to avoid tokenless upload failure …",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-06-21T07:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55ca84afb50b1e7e56ef6fe1dad22d4d5e49db24",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "fix(doc): resolve example error for `oras tag` (#1419)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-06-20T02:26:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bbd88104e2c0110c6b372c3ef7fdc29f6df3587",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Move two output functions to the output package (#1417)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-20T00:58:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "854ccc2f304e49d51c0c58b0613b06533815d9e3",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>\r\nCo-authored-by: Billy Zha <qweeah@gmail.com>",
"is_bot": false,
"headline": "refactor: Move generate content key method to descriptor (#1415)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-19T12:06:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6440c3454ae84744c61083a54c02371726b61f2",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Ignore e2e test go sum file (#1416)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-19T01:05:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "294abbc75637beb5ff07276af6f09cc631264815",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>\r\nCo-authored-by: Billy Zha <qweeah@gmail.com>",
"is_bot": false,
"headline": "refactor: Move descriptor logic to descriptor (#1413)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-18T19:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a84af2f7dcd7bb59def32ac2e9b60fcd1f7c30de",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Increase print test coverage (#1411)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-18T14:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4440be19e052e8d48af8cef2244ff92bf93f2ca6",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>\r\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>\r\nCo-authored-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "chore: Add format type text (#1397)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-18T11:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aa005cff5265b2480f0bccb52e35b2affc41a8d",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: clean status prompts (#1409)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-06-17T14:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0b7cddf3b9ae32c758db2de2782669a0eddd9d3",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Move verbose into printer object (#1406)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-17T14:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24796981c5f771c789cad7c80c4d441471fc7c70",
"body": "Signed-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#1410)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-06-17T08:10:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f29af2c1ea96d9c88cdab1b7fa7aac7dae9c1a7",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Clean up pull handlers (#1407)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-17T02:54:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "187131d2e129f02e79149451c02459f0f057ffd2",
"body": "Signed-off-by: hbc <bahe@microsoft.com>",
"is_bot": false,
"headline": "Update links in README.md (#1408)",
"author_name": "hbc",
"author_login": "bcho",
"committed_at": "2024-06-15T12:22:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3291d3255ccf25f23f26381ac576aa3dcbfaf7de",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Move printer to output package (#1394)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-12T02:25:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8027e16786eb2faf1197b9e4abce9da47cde07f3",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Update goreleaser to v6 and configuration to v2 (#1402)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-11T13:32:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4be252f8baed173a8aca2fd4a07222fc1aeca1b0",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Remove unused file (#1395)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-07T12:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4eb7a8ea2f4d6cc4dd1fe01e47bc7a089b68bec",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Remove deprecated Print method (#1398)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-06-07T08:04:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "554c10385f68bc558f8e17aba59ae85e202c90e5",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 (#1399)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-06-07T07:57:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8da1b3f9058e84d316d81c7c21f123b03bad428",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "Merge pull request #1393 from qweeah/bump-1.2.0",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-30T07:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcef719e208a9b226b15bc6512ad729a7dd93270",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "bump: tag and release ORAS CLI v1.2.0",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-28T07:33:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ff316cdab05c645278d8cd82eda93f5d9ae1842",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "fix: remove call to deprecated print (#1392)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-28T03:47:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4525398c2c6c1503eb78ab0ac33d374741465727",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "doc: verify local files (#1386)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-27T05:55:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc07c247cb7e37a03cc8b54aa904928453fc71d4",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "chore: Remove deprecated PrintStatus method (#1389)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-27T05:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ec54649bf9971d6f8917242728174066058af63",
"body": "…/test/e2e (#1390)\n\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/onsi/ginkgo/v2 from 2.18.0 to 2.19.0 in …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-27T04:50:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4193bbb05bea0764f00246f7c36408ff634ca590",
"body": "…/test/e2e (#1388)\n\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.18.0 in …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-22T12:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e24ce35214bec070956f26f3ddeff6123f66228c",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Get rid of deprecated PrintStatus method (#1378)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-20T13:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e255afaa6d2f8d7b360d3c9a6ad7726ba4c4e853",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Terry Howe <tlhowe@amazon.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 3 to 4 (#1385)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-20T12:47:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67b218250d84d16ac59230ff71b3de269942b173",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "fix: oras cp documentation (#1384)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-20T10:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b04847cbb2bbb1c80b2e0a30a5e06082aa2aa0",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "fix: remove non-classic snap plugins (#1383)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-20T07:35:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6f0ed8b39bbd1e95a1df629dd0f30fd6e235541",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "Merge pull request #1381 from qweeah/bump-v1.2.0-rc.1",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-17T02:38:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed8d791300647bf5c5e4325af4e4280227640387",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "bump: tag and release ORAS CLI v1.2.0-rc.1",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-14T13:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1cb8eae93bf62d989abd902260fa30fb7bcb4fe",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "ci(release): add dispatch GHA for snapcraft classic release (#1256)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-14T13:22:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d0431db83f518b279552f58977bd36b8f091680",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "bump: update Golang to v1.22.3 (#1380)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-14T07:54:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "674b16eb1c31cca28778bf8a8e59f64ea6333cbd",
"body": "…perience (#1377)\n\nSigned-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: add `--template` and support `--format go-template=TEMPLATE` ex…",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-14T01:48:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96d64da3c1f648e1b4f8951eeb100344614e7dee",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump golangci/golangci-lint-action from 5 to 6 (#1379)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-13T08:51:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd38272170f050974a14c0ebd27dd821df730db8",
"body": "Signed-off-by: Feynman Zhou <feynmanzhou@microsoft.com>",
"is_bot": false,
"headline": "doc(spec): formatted ORAS CLI output (#1199)",
"author_name": "Feynman Zhou",
"author_login": "FeynmanZhou",
"committed_at": "2024-05-13T01:14:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c179d0a5ef6bd082318c2fc50856309c520e6031",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: add pushed tags to metadata (#1346)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-08T06:24:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ab9e56542309b3a2de3f4a74982ab2715dffc87",
"body": "…/test/e2e (#1376)\n\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 in …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-08T03:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a758bdb79f2e35e8f2f1fa2587ffb0efcab0f80b",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: No error return for print (#1375)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-07T14:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "101cf1749e4955a9775c6e81eac7a507d8de0c9c",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "chore: project selected fields from OCI descriptor (#1362)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-05-07T08:52:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3812a2d23523af40e0dc479596bcc20be8458998",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "fix: Replace obsolete html element (#1372)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-06T11:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33a28e737595bbb90669f9e0ee76348da43e32f9",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 (#1374)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-06T05:17:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e525ce95238d01b6959dd3b498fa33daefe3c90",
"body": "Signed-off-by: Terry Howe <terrylhowe@gmail.com>",
"is_bot": false,
"headline": "refactor: Move ShortDigest out of display package (#1373)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-06T02:52:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "979dbd777349d37268ecf1f4295405f4bc881665",
"body": "Signed-off-by: Terry Howe <tlhowe@amazon.com>\r\nCo-authored-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: move logger method to command (#1355)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-05-03T15:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db85734bc0916930a451b5fb9dbf980f8730c171",
"body": "…st/e2e (#1371)\n\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 in /te…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-03T15:34:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c1500532778487e6ec943c1727a61050bcb28c7",
"body": "… together (#1358)\n\nSigned-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "feat: improve error message of when a set of flags is required to use…",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-30T02:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "639d4b75d3d20a6f3b769316d1c5379bc162b714",
"body": "…/test/e2e (#1369)\n\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 in …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-29T07:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cac17ebacdabc5fdf647a2ff96fa6f539deb6d1",
"body": "Signed-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golangci/golangci-lint-action from 4 to 5 (#1370)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-29T06:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "207e20308bccdbadf6877b547234ebd549ec02c8",
"body": "…st/e2e (#1364)\n\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 in /te…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-23T06:40:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db870546c90a7efe63664121b44809ccd2202665",
"body": "…1363)\n\nSigned-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "fix: ignore --pretty when --output is used for oras manifest fetch (#…",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-19T03:41:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22bbd58f369a1cb77ee1d58782316e207e543305",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "fix: return error when --format and --pretty are both used (#1359)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-19T02:32:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23e243b38213f28d1978c02d9c0044181bd5dc09",
"body": "…cover (#1354)\n\nSigned-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "fix: fix error message when output is used before format for oras dis…",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-18T07:17:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2edebad6a91eed27fac639d0b51f3e8c5f1aba3c",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "chore(ux): optimize progress bar (#1349)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-17T10:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ffe63ea6df9007b0ed67fc23d92033e74bcc315",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "fix: fix failed Windows unit test (#1352)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-17T07:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28c85149df705cc28e7130cfe04f8289b10a066c",
"body": "Signed-off-by: Amulyam24 <amulmek1@in.ibm.com>",
"is_bot": false,
"headline": "set go version to 1.22.0 in go.mod (#1351)",
"author_name": "Amulya Meka",
"author_login": "Amulyam24",
"committed_at": "2024-04-16T12:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b5c576bc8e45208a26c73053ac2da653679ddfa",
"body": "Signed-off-by: Andrew Block <andy.block@gmail.com>",
"is_bot": false,
"headline": "feat: add mTLS options (#1319)",
"author_name": "Andrew Block",
"author_login": "sabre1041",
"committed_at": "2024-04-16T12:46:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67ee1004e85df739efd8b5921aafdb0f79efe76c",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "feat: improve error message when detecting conflicting flags (#1345)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-16T08:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa65f61c86fa75b23b8f2afffe1ba77a5fbf44b7",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: make all go-template key lower-cased (#1343)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-15T05:25:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc74e50a3d181ad57db897475de068355cca401f",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: add color to progress mark and bar (#1344)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-15T05:21:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "202bcf44e210ff51a1b2acf4383f80420ddaa485",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "fix: discard tagging output when pushing with formatted output (#1302)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-12T23:28:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61557e0923800b2b517a550ff504bd2e5713627a",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "feat: make --identity-token an alias of --password (#1294)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-12T08:51:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb3443d9160c81fca84426f0135cfcee031d7b4e",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "feat: make image spec preview (#1338)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-12T08:24:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9732d14eb5d12283ff999d58290c909646b2bc00",
"body": "… not presented (#1336)\n\nSigned-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "feat: oras discover should show a placeholder of artifactType if it's…",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-12T01:57:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91268a246ef67875abbfc4c88ca59622306c718e",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "chore: add preview feature mark to platform-specific attaching (#1337)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-12T00:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc9b2b63f1ec480b58b881b7c49aa5f8f86fa7fe",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: support `--format` in `oras discover` (#1299)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-11T07:47:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5217efe08851d443027079786f49a2b9a8ed9d9",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "ux: improve the usage doc of --image-spec (#1334)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-11T06:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14944756eca47cbaf8a38501077adccccda58acb",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: support `--format` in `manifest fetch` command (#1295)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-10T10:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85fbdab2075325633f66d13c28492e657be68770",
"body": null,
"is_bot": true,
"headline": "build(deps): bump github/codeql-action from 2 to 3 (#1332)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T02:08:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c77a775321ead996aca598b327b898ac71ba5d48",
"body": null,
"is_bot": true,
"headline": "build(deps): bump actions/stale from 8 to 9 (#1330)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T02:05:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7c8bf9c5a7f7563ffab42a36b1e47ea826f6ca4",
"body": null,
"is_bot": true,
"headline": "build(deps): bump actions/setup-go from 4 to 5 (#1331)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T02:03:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8698f1259e97ca2431865d85f36b6161dda53d8",
"body": null,
"is_bot": true,
"headline": "build(deps): bump goreleaser/goreleaser-action from 2 to 5 (#1329)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T02:00:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "829b2c9fd1c1a16a3a58eb4c665ec56b526cf9ae",
"body": null,
"is_bot": true,
"headline": "build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 (#1328)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T01:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c553e74da770a8e4383b2f5fdd04d390ede9fbb1",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "build(ci): add dependabot to update ci version automatically (#1326)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-08T13:03:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ef6dc064161e996e782211352ecaa31f9da2282",
"body": "…c 1.1 (#1317)\n\nSigned-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "fix: oras push should return error when artifacttype is empty for spe…",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-08T11:30:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "122f01b38945144fbefe9d549b97d77da93444bf",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "feat: show artifact type when pushing files (#1320)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-08T06:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de4cb156d2afedd2668be0fe8d625a34a2ac235d",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: support --platform for oras attach (#1309)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-07T12:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d808ac52a8bf981c217c3df562ab20a052ee86e",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "feat: support `--format` for `oras pull` (#1293)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-07T10:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7ecf5ccb86e1f3b4a822d5dccacc5f7acbbc82f",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "bump(ci): update golangci-lint to v4 (#1325)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-07T09:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb3adabb9e96e50d13aaa3290a946d063f8d7b8e",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "bump(ci): update codecov gha to v4 (#1324)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-04-07T08:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1aa07de9f2e91b56d9af31a9a619b795fb7cfe94",
"body": null,
"is_bot": true,
"headline": "build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 (#1322)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-07T02:29:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39a78b63193399089f3c012b435aeea7ae53168d",
"body": null,
"is_bot": true,
"headline": "build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 (#1323)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-07T02:21:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6dca8771f6c3b0762444e78cfafe8cfe03c2f68",
"body": "Signed-off-by: Terry Howe <tlhowe@amazon.com>\r\nCo-authored-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "bump: update golang to 1.22 (#1282)",
"author_name": "Terry Howe",
"author_login": null,
"committed_at": "2024-04-02T13:25:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d00ae9e4853b7bde64f2a8d81760aa1d6d8b3bb6",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "refactor: make command accessible in option parser (#1315)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-04-01T04:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c24ac156a605be910e6bc10c3c081b6cf5237bab",
"body": "Signed-off-by: rick <LinuxSuRen@users.noreply.github.com>\r\nCo-authored-by: rick <LinuxSuRen@users.noreply.github.com>\r\nCo-authored-by: Terry Howe <tlhowe@amazon.com>",
"is_bot": false,
"headline": "chore: using const to replace string (#1316)",
"author_name": "Rick",
"author_login": "LinuxSuRen",
"committed_at": "2024-04-01T00:45:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf187750df6f6f9ca810a6db9f351241f200905e",
"body": "Signed-off-by: Billy Zha <jinzha1@microsoft.com>",
"is_bot": false,
"headline": "refactor: use command output in status output (#1314)",
"author_name": "Billy Zha",
"author_login": "qweeah",
"committed_at": "2024-03-29T00:16:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "093ed143b381105cf7242665caf30b31a9270fb3",
"body": "Signed-off-by: Xiaoxuan Wang <wangxiaoxuan119@gmail.com>",
"is_bot": false,
"headline": "bump: bump `oras-go` to 2.5.0 (#1303)",
"author_name": "Xiaoxuan Wang",
"author_login": "wangxiaoxuan273",
"committed_at": "2024-03-28T07:51:25Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 19,
"commits_last_year": 0,
"latest_release_at": "2021-06-02T01:40:09Z",
"latest_release_tag": "v0.12.0",
"releases_from_tags": true,
"days_since_last_push": 747,
"active_weeks_last_year": 0,
"days_since_latest_release": 1879,
"mean_days_between_releases": 83.7
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "oras.land/oras",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": null,
"registry_url": "https://pkg.go.dev/oras.land/oras",
"is_deprecated": false,
"latest_version": "v1.3.3",
"repository_url": null,
"versions_count": 48,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-10T18:27:45Z",
"latest_version_yanked": null,
"days_since_latest_publish": 15
}
]
},
"popularity": {
"forks": 1,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2022-07-19",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"test/e2e/go.mod"
],
"largest_source_bytes": 36725,
"source_files_sampled": 205,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/Masterminds/sprig/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.2.3"
},
{
"name": "github.com/containerd/console",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/morikuni/aec",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/opencontainers/go-digest",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/opencontainers/image-spec",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.3"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.1"
},
{
"name": "github.com/spf13/pflag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.5"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "oras.land/oras-go/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 7,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 3
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "qweeah",
"commits": 284,
"avatar_url": "https://avatars.githubusercontent.com/u/4254263?v=4"
},
{
"type": "User",
"login": "jdolitsky",
"commits": 65,
"avatar_url": "https://avatars.githubusercontent.com/u/393494?v=4"
},
{
"type": "User",
"login": "shizhMSFT",
"commits": 60,
"avatar_url": "https://avatars.githubusercontent.com/u/32161882?v=4"
},
{
"type": "User",
"login": "wangxiaoxuan273",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/103478229?v=4"
},
{
"type": "User",
"login": "deitch",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/282526?v=4"
},
{
"type": "User",
"login": "lizMSFT",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/108315938?v=4"
},
{
"type": "User",
"login": "junczhu",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/74894646?v=4"
},
{
"type": "User",
"login": "sajayantony",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/1821104?v=4"
},
{
"type": "User",
"login": "yuehaoliang",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/109199020?v=4"
},
{
"type": "User",
"login": "SteveLasker",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/7647382?v=4"
}
],
"contributors_sampled": 55,
"top_contributor_share": 0.484
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"codeql-analysis.yml",
"golangci-lint.yml",
"license-checker.yml",
"release-ghcr.yml",
"release-github.yml",
"release-snap.yml",
"stale.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 15 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "39 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d06bb819ba8abe5593947d1fdc857ea7d3541b45",
"ran_at": "2026-07-25T22:21:57Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2022-07-26T06:03:40Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/junczhu/oras",
"host": "github.com",
"name": "oras",
"owner": "junczhu"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 0,
"pct": 85
}
}
],
"value": 33,
"inputs": {
"security": 44,
"vitality": 17,
"community": 12,
"governance": 62,
"engineering": 56,
"abandonment_cap": null,
"abandonment_state": "at_risk",
"abandonment_multiplier": 85,
"weighted_overall_before_abandonment": 39,
"overall_after_abandonment_multiplier": 33
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 17,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 0.8,
"days_since_last_push": 747,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 747 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "push_recency",
"params": {
"days": 747
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"releases_count": 19,
"latest_release_tag": "v0.12.0",
"releases_from_tags": true,
"days_since_latest_release": 1879,
"mean_days_between_releases": 83.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "19 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 19
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1879 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1879
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~83.7 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 83.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"cap": null,
"state": "at_risk",
"guards": [
"no_open_demand"
],
"signals": [
"release_stall",
"scorecard_unmaintained"
],
"red_flag": true,
"multiplier_pct": 85,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": 1460,
"days_since_last_human_commit": 751,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 751 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
"points": 85,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 751,
"count": 2,
"signals": "releases stalled, Scorecard reports it unmaintained"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 1,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 62,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 55,
"top_contributor_share": 0.484
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 48% of commits",
"points": 11.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 48
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "55 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 55
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 15 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"merged_prs": 7,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "7/10 decided PRs merged",
"points": 26.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 7,
"decided": 10
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"followers": 8,
"owner_type": "User",
"is_verified": null,
"owner_login": "junczhu",
"public_repos": 18,
"account_age_days": 2070
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "8 followers of junczhu",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 8,
"login": "junczhu"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "18 public repos, account ~5 yr old",
"points": 20.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 18
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"oras.land/oras"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 15
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 15 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 15
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "48 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 48
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 56,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://oras.land/cli",
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://oras.land/cli",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 44,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 15 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "39 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 64,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "80 of 80 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 80,
"sampled": 80
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod",
"test/e2e/go.mod"
],
"dependency_bot_commit_share": 0.2
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "20 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 20,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 36725,
"source_files_sampled": 205,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/205 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 205,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T22:22:14.386836Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/junczhu/oras.svg",
"full_name": "junczhu/oras",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}