nscaledev / uni-region

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

每个点涵盖 2 天。

来自 GitHub 依赖图的完整解析依赖集合：31 个直接依赖与 107 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 138 个包，其中也包含从不交付的开发与测试版本固定：3 个存在已知公告，1 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "unikorn",
        "uni"
      ],
      "is_fork": false,
      "size_kb": 5503,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1823585,
        "Shell": 43002,
        "Python": 21264,
        "Makefile": 23596,
        "Dockerfile": 1738,
        "Go Template": 2420
      },
      "pushed_at": "2026-07-21T14:04:08Z",
      "created_at": "2024-06-06T08:23:27Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T12:37:44Z",
      "description": "UNI Region Controller",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "nscale.com",
      "name": "Nscale",
      "type": "Organization",
      "login": "nscaledev",
      "company": null,
      "location": "United Kingdom",
      "followers": 67,
      "avatar_url": "https://avatars.githubusercontent.com/u/158275529?v=4",
      "created_at": "2024-01-31T10:08:26Z",
      "is_verified": null,
      "public_repos": 71,
      "account_age_days": 902
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.19.0",
          "kind": "minor",
          "published_at": "2026-07-17T12:45:55Z"
        },
        {
          "tag": "v1.18.7",
          "kind": "patch",
          "published_at": "2026-07-08T14:06:49Z"
        },
        {
          "tag": "v1.18.6",
          "kind": "patch",
          "published_at": "2026-06-29T09:11:51Z"
        },
        {
          "tag": "v1.18.5",
          "kind": "patch",
          "published_at": "2026-06-28T19:18:51Z"
        },
        {
          "tag": "v1.18.4",
          "kind": "patch",
          "published_at": "2026-06-28T19:06:27Z"
        },
        {
          "tag": "v1.18.3",
          "kind": "patch",
          "published_at": "2026-06-28T17:46:37Z"
        },
        {
          "tag": "v1.18.2",
          "kind": "patch",
          "published_at": "2026-06-26T14:22:35Z"
        },
        {
          "tag": "v1.18.1",
          "kind": "patch",
          "published_at": "2026-06-26T12:41:01Z"
        },
        {
          "tag": "v1.18.0",
          "kind": "minor",
          "published_at": "2026-06-26T09:19:09Z"
        },
        {
          "tag": "v1.18.0-rc1",
          "kind": "prerelease",
          "published_at": "2026-06-25T14:11:34Z"
        },
        {
          "tag": "v1.17.6",
          "kind": "patch",
          "published_at": "2026-06-24T11:25:21Z"
        },
        {
          "tag": "v1.17.5",
          "kind": "patch",
          "published_at": "2026-06-24T11:01:17Z"
        },
        {
          "tag": "v1.17.4",
          "kind": "patch",
          "published_at": "2026-06-22T12:12:46Z"
        },
        {
          "tag": "v1.17.3",
          "kind": "patch",
          "published_at": "2026-06-19T14:32:53Z"
        },
        {
          "tag": "v1.17.2",
          "kind": "patch",
          "published_at": "2026-06-16T12:30:25Z"
        },
        {
          "tag": "v1.17.1",
          "kind": "patch",
          "published_at": "2026-06-16T11:06:42Z"
        },
        {
          "tag": "v1.17.0",
          "kind": "minor",
          "published_at": "2026-06-09T09:53:46Z"
        },
        {
          "tag": "v1.16.7",
          "kind": "patch",
          "published_at": "2026-06-01T13:02:33Z"
        },
        {
          "tag": "v1.16.6",
          "kind": "patch",
          "published_at": "2026-05-11T15:03:48Z"
        },
        {
          "tag": "v1.16.5",
          "kind": "patch",
          "published_at": "2026-05-08T13:57:58Z"
        },
        {
          "tag": "v1.16.4",
          "kind": "patch",
          "published_at": "2026-05-06T16:55:12Z"
        },
        {
          "tag": "v1.16.3",
          "kind": "patch",
          "published_at": "2026-04-30T09:49:05Z"
        },
        {
          "tag": "v1.16.2",
          "kind": "patch",
          "published_at": "2026-04-29T13:04:12Z"
        },
        {
          "tag": "v1.16.0",
          "kind": "minor",
          "published_at": "2026-04-27T13:25:44Z"
        },
        {
          "tag": "v1.16.0-rc6",
          "kind": "prerelease",
          "published_at": "2026-04-24T14:03:25Z"
        },
        {
          "tag": "v1.16.0-rc5",
          "kind": "prerelease",
          "published_at": "2026-04-24T11:53:54Z"
        },
        {
          "tag": "v1.16.0-rc4.2",
          "kind": "prerelease",
          "published_at": "2026-04-23T16:21:49Z"
        },
        {
          "tag": "v1.16.0-rc4.1",
          "kind": "prerelease",
          "published_at": "2026-04-23T12:23:48Z"
        },
        {
          "tag": "v1.16.0-rc4",
          "kind": "prerelease",
          "published_at": "2026-04-22T15:49:22Z"
        },
        {
          "tag": "v1.16.0-rc3.2",
          "kind": "prerelease",
          "published_at": "2026-04-20T13:44:24Z"
        },
        {
          "tag": "v1.16.0-rc3.1",
          "kind": "prerelease",
          "published_at": "2026-04-17T13:09:53Z"
        },
        {
          "tag": "v1.16.0-rc3",
          "kind": "prerelease",
          "published_at": "2026-04-16T14:44:38Z"
        },
        {
          "tag": "v1.16.0-rc2",
          "kind": "prerelease",
          "published_at": "2026-04-16T12:35:21Z"
        },
        {
          "tag": "v1.16.0-rc1",
          "kind": "prerelease",
          "published_at": "2026-04-15T14:18:14Z"
        },
        {
          "tag": "v1.15.0",
          "kind": "minor",
          "published_at": "2026-03-11T12:19:06Z"
        },
        {
          "tag": "v1.15.0-rc2",
          "kind": "prerelease",
          "published_at": "2026-03-06T09:54:20Z"
        },
        {
          "tag": "v1.15.0-rc1",
          "kind": "prerelease",
          "published_at": "2026-03-05T12:39:42Z"
        },
        {
          "tag": "v1.14.4",
          "kind": "patch",
          "published_at": "2026-02-28T13:27:25Z"
        },
        {
          "tag": "v1.14.4-rc1",
          "kind": "prerelease",
          "published_at": "2026-02-28T13:05:32Z"
        },
        {
          "tag": "v1.14.4-pre2",
          "kind": "prerelease",
          "published_at": "2026-02-18T11:08:22Z"
        },
        {
          "tag": "v1.14.3",
          "kind": "patch",
          "published_at": "2026-02-16T16:08:03Z"
        },
        {
          "tag": "v1.14.3-rc3",
          "kind": "prerelease",
          "published_at": "2026-02-16T15:21:09Z"
        },
        {
          "tag": "1.14.3-rc2",
          "kind": "prerelease",
          "published_at": "2026-02-16T15:04:08Z"
        },
        {
          "tag": "v1.14.3-rc2",
          "kind": "prerelease",
          "published_at": "2026-02-16T15:04:06Z"
        },
        {
          "tag": "v1.14.3-rc1",
          "kind": "prerelease",
          "published_at": "2026-02-16T12:40:08Z"
        },
        {
          "tag": "1.15.0-pre1",
          "kind": "prerelease",
          "published_at": "2026-02-13T14:13:12Z"
        },
        {
          "tag": "v1.14.2",
          "kind": "patch",
          "published_at": "2026-02-12T14:23:41Z"
        },
        {
          "tag": "v1.14.2-rc1",
          "kind": "prerelease",
          "published_at": "2026-02-12T13:28:58Z"
        },
        {
          "tag": "v1.15.0-pre1",
          "kind": "prerelease",
          "published_at": "2026-02-13T14:13:09Z"
        },
        {
          "tag": "v1.14.1",
          "kind": "patch",
          "published_at": "2026-02-11T17:40:39Z"
        },
        {
          "tag": "v1.14.1-rc2",
          "kind": "prerelease",
          "published_at": "2026-02-11T15:52:11Z"
        },
        {
          "tag": "v1.14.1-rc1",
          "kind": "prerelease",
          "published_at": "2026-02-11T14:32:07Z"
        },
        {
          "tag": "v1.14.0",
          "kind": "minor",
          "published_at": "2026-02-09T11:09:38Z"
        },
        {
          "tag": "v1.14.0-rc4",
          "kind": "prerelease",
          "published_at": "2026-02-06T15:00:57Z"
        },
        {
          "tag": "v1.14.0-rc3",
          "kind": "prerelease",
          "published_at": "2026-02-06T14:10:30Z"
        },
        {
          "tag": "v1.14.0-rc2",
          "kind": "prerelease",
          "published_at": "2026-02-06T11:16:58Z"
        },
        {
          "tag": "v1.14.0-rc1",
          "kind": "prerelease",
          "published_at": "2026-02-05T12:43:44Z"
        },
        {
          "tag": "v1.13.5",
          "kind": "patch",
          "published_at": "2026-01-30T13:26:58Z"
        },
        {
          "tag": "v1.13.5-rc1",
          "kind": "prerelease",
          "published_at": "2026-01-30T12:17:30Z"
        },
        {
          "tag": "v1.13.4",
          "kind": "patch",
          "published_at": "2026-01-29T16:55:34Z"
        },
        {
          "tag": "v1.13.4-rc1",
          "kind": "prerelease",
          "published_at": "2026-01-29T12:49:02Z"
        },
        {
          "tag": "v1.13.3",
          "kind": "patch",
          "published_at": "2026-01-28T20:04:14Z"
        },
        {
          "tag": "v1.13.3-rc1",
          "kind": "prerelease",
          "published_at": "2026-01-28T17:04:20Z"
        },
        {
          "tag": "v1.13.2",
          "kind": "patch",
          "published_at": "2026-01-28T14:16:00Z"
        },
        {
          "tag": "v1.13.2-rc1",
          "kind": "prerelease",
          "published_at": "2026-01-28T11:37:39Z"
        },
        {
          "tag": "v1.13.1",
          "kind": "patch",
          "published_at": "2026-01-26T14:42:23Z"
        },
        {
          "tag": "v1.13.1-rc1",
          "kind": "prerelease",
          "published_at": "2026-01-22T09:19:47Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2026-01-15T10:03:44Z"
        },
        {
          "tag": "v1.13.0-rc4.1",
          "kind": "prerelease",
          "published_at": "2026-01-14T13:51:16Z"
        },
        {
          "tag": "v1.13.0-rc4",
          "kind": "prerelease",
          "published_at": "2026-01-14T10:41:42Z"
        },
        {
          "tag": "v1.13.0-rc3",
          "kind": "prerelease",
          "published_at": "2026-01-12T11:01:56Z"
        },
        {
          "tag": "v1.13.0-rc2",
          "kind": "prerelease",
          "published_at": "2026-01-09T15:44:12Z"
        },
        {
          "tag": "v1.12.1",
          "kind": "patch",
          "published_at": "2026-01-09T09:10:46Z"
        },
        {
          "tag": "v1.12.1-rc1",
          "kind": "prerelease",
          "published_at": "2026-01-08T15:15:06Z"
        },
        {
          "tag": "v1.13.0-rc1",
          "kind": "prerelease",
          "published_at": "2025-12-18T14:56:32Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2025-12-15T15:40:51Z"
        },
        {
          "tag": "v1.12.0-rc2",
          "kind": "prerelease",
          "published_at": "2025-12-15T11:36:46Z"
        },
        {
          "tag": "v1.12.0-rc1.3",
          "kind": "prerelease",
          "published_at": "2025-12-11T13:45:05Z"
        },
        {
          "tag": "v1.12.0-rc1.2",
          "kind": "prerelease",
          "published_at": "2025-12-11T10:26:06Z"
        },
        {
          "tag": "v1.12.0-rc1.1",
          "kind": "prerelease",
          "published_at": "2025-12-10T17:42:04Z"
        },
        {
          "tag": "v1.12.0-rc1",
          "kind": "prerelease",
          "published_at": "2025-12-10T13:33:17Z"
        },
        {
          "tag": "v1.11.2",
          "kind": "patch",
          "published_at": "2025-11-27T11:09:51Z"
        },
        {
          "tag": "v1.11.1",
          "kind": "patch",
          "published_at": "2025-11-25T11:53:28Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2025-11-24T11:02:45Z"
        },
        {
          "tag": "v1.11.0-rc5",
          "kind": "prerelease",
          "published_at": "2025-11-20T14:19:54Z"
        },
        {
          "tag": "v1.11.0-rc4",
          "kind": "prerelease",
          "published_at": "2025-11-19T15:15:33Z"
        },
        {
          "tag": "v1.11.0-rc3",
          "kind": "prerelease",
          "published_at": "2025-11-18T10:51:11Z"
        },
        {
          "tag": "v1.11.0-rc2",
          "kind": "prerelease",
          "published_at": "2025-11-13T17:44:22Z"
        },
        {
          "tag": "v1.11.0-rc1",
          "kind": "prerelease",
          "published_at": "2025-11-13T14:22:52Z"
        },
        {
          "tag": "v1.10.3",
          "kind": "patch",
          "published_at": "2025-11-05T09:18:08Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2025-10-30T10:03:00Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2025-10-28T13:47:21Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2025-10-28T12:07:03Z"
        },
        {
          "tag": "v1.10.0-rc2",
          "kind": "prerelease",
          "published_at": "2025-10-27T14:14:15Z"
        },
        {
          "tag": "v1.10.0-rc1",
          "kind": "prerelease",
          "published_at": "2025-10-24T13:00:34Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2025-10-13T14:04:15Z"
        },
        {
          "tag": "v1.9.0-rc1",
          "kind": "prerelease",
          "published_at": "2025-10-13T11:38:36Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2025-10-02T13:02:10Z"
        },
        {
          "tag": "v1.8.0-rc1",
          "kind": "prerelease",
          "published_at": "2025-10-02T09:51:35Z"
        },
        {
          "tag": "v1.7.1",
          "kind": "patch",
          "published_at": "2025-09-29T15:08:08Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "66d72dc5a63e39dee411fd06bb59f8e8b63565b7",
          "body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.55.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T12:37:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46eb7ff210131cdaadd8c40f32f44aaf892e7a50",
          "body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.49.0 to 0.52.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.49.0...v0.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n  dependency-version: 0.52.0\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T10:14:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c4fa2b1313fd7a41f71e44957caf0c12d20c5f9",
          "body": "* Adds Server.Spec.Volumes for desired attachment intent referencing existing Region Volume resources by ID.\n* Adds Server.Status.Volumes for per-volume observed attachment rows, including provisioning status, optional guest device name, and message.\n* Uses Kubernetes map-list semantics so desired and observed volume rows are keyed by Volume ID.\n* Regenerates Server CRD/deepcopy artifacts.\n* Updates package docs for the stored Server volume attachment shape.",
          "is_bot": false,
          "headline": "Add server volume attachment storage fields (#604)",
          "author_name": "Pablo Crivella",
          "author_login": "pcriv",
          "committed_at": "2026-07-15T14:07:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2daec7789df00cc729257307fc0dbf60ce3bf67",
          "body": "* test(api): report component version metadata\n\n* Use main test results report action",
          "is_bot": false,
          "headline": "test(api): report component version metadata (#595)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-07-15T10:15:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e7c4666af58aa655f5ec4f223aa181c8d77f577",
          "body": "* Add API test resource prefixes\n\n* Fix API test resource naming lint\n\n* Cover API test resource naming edge cases\n\n* Trim API test resource prefix scope",
          "is_bot": false,
          "headline": "test(api): Add API test resource prefixes (#610)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-07-15T08:43:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf792ffacf3cad0f46321874f4b147d13bb6d4d8",
          "body": "* test(api): wait for network fixture teardown\n\n* chart(region): add controller crashloop alert\n\n* Revert \"chart(region): add controller crashloop alert\"\n\nThis reverts commit 71b392f49675cb78894dbbc054b877fa7e19f6f4.\n\n* Cover network fixture cleanup helper",
          "is_bot": false,
          "headline": "test(api): wait for network fixture teardown (#599)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-07-15T08:34:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d40e8cb1205ec3c9bc9967bbcaf8dc54fd989a83",
          "body": "The compute image interaction requests images from an OpenStack region.\nThe provider serves those from Glance via a live-authenticated client, so\nwith no cloud behind it the handler returned 500 and the pending pact\npublished a failure, blocking uni-compute's can-i-deploy.\n\nAdd a mock OpenStack serv\n[…]\n\nversion discovery -> image list) and returns a ready image, so the\ninteraction verifies.\n\nVerified locally against a kind cluster with `make\ntest-contracts-provider-local` for the images interaction.",
          "is_bot": false,
          "headline": "test(contracts): verify OpenStack image listing with a mock cloud (#609)",
          "author_name": "peterj-ns",
          "author_login": "peterj-ns",
          "committed_at": "2026-07-14T11:16:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9be20cffae370210126d74d32bc20be2137ace4",
          "body": "Add the internal Region Volume CRD/storage model, generated artifacts, typed VolumeID helpers, Volume claim reference shape, and package documentation.\n\nThis intentionally leaves public HTTP APIs, provider calls, controller reconciliation, and Region OpenStack VolumeClass configuration out of scope.",
          "is_bot": false,
          "headline": "Add volume storage model (#602)",
          "author_name": "Pablo Crivella",
          "author_login": "pcriv",
          "committed_at": "2026-07-14T10:12:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bea9ab2b4c0865c088658511e9583fc386b3a099",
          "body": "The compute contract verifier built the region handler with a nil\nProviders registry. uni-compute's new images interaction is the first\ncompute->region contract to hit an endpoint that reaches the cloud\nprovider (ListImages -> Providers.LookupCloud), so verification panicked\nwith a nil pointer deref\n[…]\nublished a failure result, blocking uni-compute's\ncan-i-deploy.\n\nConstruct providers.New(...) and inject it into the handler's ClientArgs,\nmirroring the kubernetes verifier which has always done this.",
          "is_bot": false,
          "headline": "test(contracts): wire provider registry into compute verifier (#608)",
          "author_name": "peterj-ns",
          "author_login": "peterj-ns",
          "committed_at": "2026-07-14T09:32:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b56b35e60bd97a9c22a1e4cad94c1fc6b9af361",
          "body": "Implements Linear STO-119 by adding Region-level OpenStack block storage configuration for VolumeClass inventory.\n\n- Add openstack.blockStorage.volumeClasses to the Region CRD storage model.\n- Support provider volume class ID selection and user-facing metadata for media, maximum performance caps, an\n[…]\nplating.\n- Document VolumeClass as Region-scoped inventory and explain why metadata is operator-authored.\n- Address review feedback by omitting replication and making performance fields explicit caps.",
          "is_bot": false,
          "headline": "Add Region VolumeClass configuration (#603)",
          "author_name": "Pablo Crivella",
          "author_login": "pcriv",
          "committed_at": "2026-07-14T09:14:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1015e8111da0b9630c0a30e1f02bcc22febb0a73",
          "body": "…r (#606)\n\nThe uni-compute consumer contract now exercises the region v2 images\nquery (GET /api/v2/regions/{id}/images?scope=available&status=ready)\nunder the \"region has images\" provider state, but the compute provider\nverifier only registered the organization state handlers. Provider\nverification \n[…]\non therefore failed, blocking uni-compute's\ncan-i-deploy check.\n\nRegister the existing StateRegionHasImages handler for the compute\nverifier, mirroring the kubernetes verifier which has always had it.",
          "is_bot": false,
          "headline": "test(contracts): register region-has-images state for compute verifie…",
          "author_name": "peterj-ns",
          "author_login": "peterj-ns",
          "committed_at": "2026-07-14T08:34:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1dd323573fe73ae0ae9974791448ca4519b04cce",
          "body": "The previous pass threaded typed, UUID-backed IDs from the router to the edge of\nthe handler layer, converting to strings at the sinks: Kubernetes object names\nand labels, CRD spec fields, and provider/region calls. That commit called those\nsinks a boundary, not a dead end. This is the later pass it\n[…]\ns and unit tests use UUID identifiers throughout, replacing non-UUID\nshorthands (metal, vm, org-1, image1, flavor-a, test-region).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Push typed resource IDs into CRD specs and the provider layer",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-07-13T14:17:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b4b5ab77b6946a2c89d56dabf04b4e1411b8a7ef",
          "body": "Validate user-data on every v2 server create, not only when an SSH\ncertificate authority is referenced, so malformed cloud-init is rejected\nwith HTTP 422 at the API boundary instead of failing mid-provision (when\nmanaged augmentation parses it) or silently inside the guest at boot.\n\nA new pkg/userda\n[…]\nage headers, and the unrecognized-format error now\nstates what a valid first line looks like instead of blaming managed\naugmentation.\n\nINST-1075\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fail fast on malformed cloud-init at server create",
          "author_name": "alex",
          "author_login": "alex-emery",
          "committed_at": "2026-07-08T14:00:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e6d23cde86ed867ea8e68fa7ffbf96e2078a3873",
          "body": "The MAC address was populated early by the reconciler from the freshly\ncreated Neutron port. That value is correct for VMs but wrong for baremetal:\nIronic rebinds the port to the physical NIC's MAC asynchronously during\nprovisioning, so the Neutron-generated MAC captured at port-create time is\nstale\n[…]\nonfirmed gophercloud's servers.Server.Addresses map\n  preserves the OS-EXT-IPS-MAC:mac_addr key so the value is reachable in code.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Make the monitor the sole owner of the server MAC address",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-07-08T12:34:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3645b65a7376affcbcbac35b0fc7e0418076f59a",
          "body": "The new server API behavior depends on legacy default resolution and\nprovider-specific handling in OpenStack. Capture those rules in the\npackage docs so future handler and provider changes do not accidentally\nreintroduce identity keypair injection for pinned or CA-backed servers.",
          "is_bot": false,
          "headline": "Document SSH injection modes",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-07-08T12:12:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef300a27f84e7b5254e953f52df5c8ecd82a9c12",
          "body": "The SSH key endpoint should only return a private key when Region\nactually requested identityKeypair injection for the server. CA-backed\nand no-SSH servers do not have a downloadable identity key, so report\nthem as not found instead of implying one exists.",
          "is_bot": false,
          "headline": "Hide non-identity server SSH keys",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-07-08T12:12:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5ddfe27367d2f0d5f9265e451d33440c101845d",
          "body": "Pinned server creates use privileged provider credentials, so the\nlegacy identity keypair is not valid for that path. Add an explicit\ncreate-time SSH injection mode with legacy resolution for old clients:\nCA requests resolve to ca, and non-CA requests resolve to\nidentityKeypair.",
          "is_bot": false,
          "headline": "Add SSH injection mode",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-07-08T12:12:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27c82a9c00d3bca328c8f7d904765d2f1d549bf1",
          "body": "* Add Filesystem snapshot e2e test\n\nPut it in a \"slow\" test category and run it nightly\n\n* Rename test/workflow",
          "is_bot": false,
          "headline": "Add Filesystem snapshot e2e test (#593)",
          "author_name": "Vinícius do Carmo",
          "author_login": "vinimdocarmo",
          "committed_at": "2026-07-07T12:48:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4866c2bed218f143d63562c600245ced0f9c7012",
          "body": "* test(fuzz): add Schemathesis API fuzzing harness for the Region service\n\nLayer-1 input-robustness fuzzing of the 26 non-hidden oauth2 /api/v2\noperations, run against the simulated provider (no OpenStack involved).\n\n- test/fuzz/: Python Schemathesis harness with a session scaffold\n  (network + secu\n[…]\n, uses a\ndistinct uni-region-fuzz history suite, and adds a skip_slack_notifications\ndispatch input. Grafana/unikorn-CR enrichment is omitted since the fuzz job\nruns against an ephemeral kind cluster.",
          "is_bot": false,
          "headline": "Add Schemathesis API fuzzing harness for the Region service (#557)",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-07-01T11:45:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "96bdd87afd23f1a48501f156c8308b95e0b5dd92",
          "body": "The workaround assertions (BeNumerically(\">=\", http.StatusBadRequest))\nwere placed because the server returned 500 for empty/malformed request\nbodies rather than 400. That root cause is fixed in unikorn-cloud/core\nby mapping json.Unmarshal failures in ReadJSONBody to OAuth2InvalidRequest.\n\nUpdate th\n[…]\nw that the server behaviour is correct.\n\nRequires a go.mod bump to the core version containing the ReadJSONBody\nfix before these integration tests will pass against a deployed server.\n\nFixes INST-939.",
          "is_bot": false,
          "headline": "test(api): tighten empty-body rejection assertions to exact 400 (#536)",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-07-01T10:40:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0d4f73d8af8537188a0a3ab2bfcdf2b4b6f0be12",
          "body": null,
          "is_bot": false,
          "headline": "fix: Wait longer on file storage deletion test (#592)",
          "author_name": "Pablo Crivella",
          "author_login": "pcriv",
          "committed_at": "2026-06-29T12:11:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4b554ae48f8f3416572b18c9a102fb054396b7f",
          "body": "The server controller records Kubernetes events through client-go's event\nrecorder. That path creates the initial event and patches repeated events\nafter correlation, but it does not update Event objects directly.",
          "is_bot": false,
          "headline": "Drop unused event update verb",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-29T08:48:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61981b1823aaa24dfd53b0e6f62708f0f68d8d1c",
          "body": "Provider create retries now emit Kubernetes events for the Server under\nreconciliation. Servers are namespaced resources watched across\nnamespaces, so the controller needs event write access at cluster scope\nrather than only in the release namespace.",
          "is_bot": false,
          "headline": "Allow server controller events",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-29T08:48:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbac1962b6c8f10a2dc351917cd1506df584c857",
          "body": "Check flavour traits in preflight",
          "is_bot": false,
          "headline": "Merge pull request #591 from nscaledev/placement-flavor-traits",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-28T22:29:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3da72724208591dfb50759db02d0985c84de0936",
          "body": "Nova flavor extra specs are the scheduling contract that Placement\nenforces, but Region only checked the flavor resource class before\na pinned create.\n\nInclude required and forbidden flavor traits in the pre-flight query\nso a pinned host that is missing or carrying the wrong trait yields\nbefore Nova create.\n\nPlacement's forbidden trait filter needs microversion 1.22, so bump\nthe client version alongside the parser.",
          "is_bot": false,
          "headline": "Check flavor traits in preflight",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-28T20:45:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87f993e1587c3b332835f05cfb0b527becd2cd5f",
          "body": "The trunk quota is gated behind the Neutron trunk extension, which is not\nloaded on every deployment. Setting it makes Neutron reject the whole\nquota update with \"Unrecognized attribute(s) 'trunk'\". Drop it and keep\nonly the core networking quotas.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Drop the trunk quota from the Neutron quota update",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-28T19:10:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "29c8ba30521430570e8e90e7b9f4452a05f1462c",
          "body": "Commit ef75543 set every gophercloud-exposed compute quota field to -1,\nbut Nova rejects the networking quotas (fixed_ips, floating_ips,\nsecurity_groups, security_group_rules) that moved to Neutron and the\nfile-injection quotas (injected_files, injected_file_content_bytes,\ninjected_file_path_bytes) \n[…]\nte.\n\nKeep only the quotas Nova still owns. The networking quotas are already\nunlimited via the Neutron quota update in network.go.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Drop Neutron and file-injection quotas from the Nova quota update",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-28T18:58:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a406cea5f9abf377ebeea4ebca3e84dd0e7e2663",
          "body": "A server could reference a security group belonging to a different network —\nand therefore a different identity and underlying OpenStack project — than the\nserver itself. The RBAC read check performed when a reference is fetched only\nproves the caller may see the resource, which a caller authorized \n[…]\nhe compute service consumes, so the identical rule applies\nacross services. Mismatches are rejected at the API edge with HTTP 422.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Deny cross-network security group references on server create and update",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-28T17:39:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ef75543336e05f6d0179580311023eba8d9ea98e",
          "body": "Expand the quota override in the OpenStack provisioner so that every quota\nfield the gophercloud compute (nova), networking (neutron) and block storage\n(cinder) clients expose is set to -1 (unlimited), rather than just the subset\nwe previously overrode.\n\nQuotas are handled globally, not on a per-region basis, so unconditionally\nremoving all per-project limits in the region provisioner is safe.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Set all OpenStack compute, network and block storage quotas to unlimited",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-28T16:49:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "372bf2ea69fbac8ca44adfe4d84f39f1b373f5c9",
          "body": "The bounded provider-create retry was meant to stop after a small cap (default\n3), but the exhausted state ran away: the ProviderCreateFailures counter was\nseen climbing into the hundreds across ~19 dev servers at a steady ~10s cadence.\nTwo independent defects combined to cause it.\n\n1. No terminal p\n[…]\next reconcile. The disposition is Terminal (not\nUserActionRequired) precisely because there is no automatic, spec-driven\nrecovery.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Abort server provider create terminally after retry exhaustion",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-28T16:34:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5bcb696992b78f7bc9cf102f2eeffe7d031e43b6",
          "body": "A killed CI runner (timeout/OOM/SIGKILL) never executes in-process\ncleanup, so the networks it created — and their scarce per-region VLANs —\nleak until deleted by hand. A region with a small VLAN range was\nexhausted this way. No in-process mechanism (AfterAll/DeferCleanup)\nsurvives a hard kill, so c\n[…]\nnot drift. Route the filestorage attachment network through the\nsame generator so every test network carries the canonical prefix.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Reclaim leaked test networks before the suite runs",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-27T17:56:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "85c8b88c46c9bec4e4ec586b69b77e314e634919",
          "body": "The configure example used a region name as the prefix, but the prefix becomes\nthe Keystone domain and a single domain hosts every region for a deployment on a\ncloud. On shared clouds each cohabiting deployment must use a distinct prefix or\nthey collide in one domain. Document this and switch the example to a\ndeployment-style prefix.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: clarify configure --prefix is the deployment name, not a region",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-27T12:21:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "95d32e06890b45b7d713ceb82696b339734d27fc",
          "body": "They've been convered already by unit tests.",
          "is_bot": false,
          "headline": "Remove unnecessary snapshot policy integration tests",
          "author_name": "Vinícius do Carmo",
          "author_login": "vinimdocarmo",
          "committed_at": "2026-06-27T10:05:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "378a09531ce927904e7f3ea8a9993fc7fc9bfcde",
          "body": "The monitor triggers a bounded delete-and-retry (\"rebuild\") when it\nobserves a pre-launch provider server in Healthy/Errored, to ride out\nflaky Ironic provisioning. Rebuilding a server that has already booted\nwould destroy data and foreclose debugging or recovery, so the trigger\nmust be restricted t\n[…]\n\nProviderCreateFailure used by both the provisioner and the controller\nwatch predicate so the trigger and the action cannot drift.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Guard server rebuild behind a durable provisioned latch",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-26T14:16:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "812b12e58d0ce3d0dc95c4edecd26cf65fee8f20",
          "body": "defaultSnapshotProtectionEnabled (*bool) and the spec snapshotPolicies\n(*StorageSnapshotPolicyListV2Spec) response fields are generated as\npointers, so asserting BeTrue()/BeEmpty() directly on them fails\n(\"Expected a boolean. Got: <*bool>\", \"BeEmpty matcher expects a\nstring/array/...\") even when the\n[…]\n specs (retrieve/update/clear policies) it was masking.\nStatus.SnapshotPolicies is left as-is: it is a plain slice, not a pointer.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Dereference pointer-typed snapshot fields in filestorage assertions",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-26T11:45:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9f8c5efaf86b6260d0a37001d51d7df2812152ed",
          "body": "The security group create handler resolves its network reference through\nthe controller-runtime cache (CreateV2 -> network.GetV2Raw), the same\neventually-consistent path as the load balancer create. A security group\ncreated immediately after its network fixture can therefore hit the same\ntransient 404. Reuse WaitForNetworkVisible in the security group BeforeAll\nbefore referencing the network.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Await network visibility before security group create in API tests",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-26T11:14:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "39f6ca259a48c7801309656b9fa4dc3e4bed7eec",
          "body": "The region API is eventually consistent on reads: writes are synchronous\nbut GETs are served from the controller-runtime cache. The load balancer\ncreate handler resolves its network reference through that cache, so a\nload balancer created immediately after its network fixture can fail with\na transie\n[…]\nalancer BeforeAll before referencing it, matching the existing\nread-after-write Eventually convention used elsewhere in the suite.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Await network visibility before load balancer create in API tests",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-26T11:14:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fc05c9bda29f611549c68c17b57cb93c0652dc8b",
          "body": "The canonicalheader linter (now enforced after a golangci-lint dependency\nbump) flags the non-canonical \"OpenStack-API-Version\" literal in the\nplacement test, failing `make lint` on every PR. http.Header.Get\ncanonicalizes its key, so \"Openstack-Api-Version\" reads the identical value\n— behaviour is unchanged; this only satisfies the linter.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Use canonical header key in placement microversion test",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-25T16:20:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "124dd4e6c2449e85e839acc68f595d20c33fb784",
          "body": "The suite's default client is built from API_BASE_URL, which points at the\ncompute service — a consumer of region, not the service under test. The\nregion/flavor/image discovery reads went through that client, so they\nexercised compute's proxy and silently depended on compute being deployed,\nrather t\n[…]\nthe region service.\n\nGetRegionDetail is left as-is: it is untested and region:regions/detail is\nnot granted to organization roles.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Route region discovery reads at the region service, not compute",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-25T16:20:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dfaaa10746ba4478d507cf4b7068abaadb6e5620",
          "body": "region:externalnetworks is RBAC-restricted to the platform-administrator\n(global) and kubernetes-service (global) roles only — no organization-scoped\nrole (administrator/auditor/user/reader) grants it. The integration suite\nruns as an organization principal, so external networks is unreachable in\nth\n[…]\ner API.\n\nDrop the External Network Discovery specs and the now-unused\nListExternalNetworks test client method and endpoint helper.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Remove external networks integration tests",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-25T16:20:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3ccb6f64889b34b4a19599ee9a2594ded44589e8",
          "body": "* Pass deployed version to API test reports\n\n* Temporarily route API test Slack to testing webhook\n\n* Revert \"Temporarily route API test Slack to testing webhook\"\n\nThis reverts commit 28bba66c8f7e971caf71f23c27154d672deff46d.",
          "is_bot": false,
          "headline": "[codex] Pass deployed version to API test Slack reports (#577)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-25T16:09:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42b04dfe30917a8980ef82dbd20c0af8b8029276",
          "body": "* Test UAT ref resolution via version API\n\n* ci: checkout deployed refs for API tests\n\n* ci: test version resolver branch\n\n* ci: summarize resolved test versions\n\n* ci: move test ref summaries into resolver action\n\n* ci: use main staging constellation resolver\n\n* test: wait for network update reads\n\n* Revert \"test: wait for network update reads\"\n\nThis reverts commit ccfbb99e2d901e2bc688512ca8e1160bac907810.\n\n---------\n\nCo-authored-by: Simon Murray <spjmurray@yahoo.co.uk>",
          "is_bot": false,
          "headline": "Checkout deployed refs for dev and UAT API tests (#573)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-25T14:19:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bdb70e0155fdd38874d42ef96677473650f8713",
          "body": "* Use update authorization for file storage updates\n\nFile Storage updates mutate the existing resource, so the existing-resource authorization check must require the update operation. Previously this path checked the delete operation, which allowed update behavior to depend on the wrong ACL bit.\n\n* \n[…]\nplatform-managed baseline and cover the create, update, read, null-input, and protected-name semantics with unit and integration tests.\n\n---------\n\nCo-authored-by: Simon Murray <spjmurray@yahoo.co.uk>",
          "is_bot": false,
          "headline": "Add  snapshot policy to API (#567)",
          "author_name": "Vinícius do Carmo",
          "author_login": "vinimdocarmo",
          "committed_at": "2026-06-25T12:59:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6e27b56c8232d98529c670d2fa950dbf5154cce0",
          "body": "The region API server serves single-resource GETs and Lists from the\ncontroller-runtime cache, which is repopulated asynchronously by a watch.\nWrites are synchronous to the apiserver, so an immediate read-back after a\ncreate or update races the cache and can observe the pre-write object (a\nstale nam\n[…]\n suites. The PUT/POST response\nassertions remain immediate and authoritative; only the cache-backed\nre-reads tolerate convergence.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Poll read-after-write assertions against the informer cache",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-25T12:42:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "68a1983d6e53535a70913b4e580471e1f0dd1ec9",
          "body": "Pull in the identity CI infrastructure fix: v1.17.8 pins cloud-provider-kind\nto v0.10.0 in the shared hack/ci/setup-infra script. v1.17.7 installed it via\n@latest, which floated to v0.11.0 (Go >= 1.26) and broke the Integration job's\ninfrastructure setup on Go 1.25 runners. region delegates to that script, so\nthe bump restores green Integration CI.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump unikorn-identity to v1.17.8",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-25T10:39:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "517a48e78688ea507b64831e0aaae0ad4a78f43c",
          "body": "The version assertion only accepted \"0.0.0\" or a strict \"vX.Y.Z\" tag, so\nnightly builds stamped with a Go pseudo-version\n(e.g. v0.0.0-20260624115013-59dc5a97ce0b) failed the check even though a\npseudo-version is valid semver.\n\nParse the reported version with the Masterminds semver library instead of\n[…]\nx. This accepts release tags, pseudo-versions and the\n0.0.0 local-build default while still rejecting genuinely malformed strings.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Validate service version as semver in integration test",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-24T14:59:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "59dc5a97ce0b0a338c016cc53456593f083eeb78",
          "body": "In particular, call out that provider-specific preflights can yield\nwithout lifecycle progress, and that OpenStack trait filters are\nconfigured explicitly.",
          "is_bot": false,
          "headline": "Document transient create preflights",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-24T11:16:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef564b0a4dce50dc72061c623b615b4852cebbae",
          "body": "Host readiness from OpenStack Placement is transient. Run a readiness\ncheck inside the OpenStack provider immediately before the create\nrequest to Nova, to revalidate the host at the moment it will be\nbooted.\n\nThe check only applies to pinned servers when placementPreflight is\nenabled. Existing Nova servers skip the check, and a failed preflight\nyields, so the server controller can retry instead of (likely) ending\nup in an error state.",
          "is_bot": false,
          "headline": "Run Placement pre-flight before pinned create",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-24T11:16:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbce5087bca902dad0575716d18822da26d12118",
          "body": "Add a `placementPreflight` configuration to the Region type, along\nwith provider-local Placement query helpers that can check inventory\nand configured traits for a pinned host.\n\nThe helpers derive the Placement resource class from Nova flavor extra\nspecs so the query follows OpenStack's authoritativ\n[…]\nlicating flavor policy in Region config.\n\nThis will let us have a pre-flight check, and yield (for retry) rather\nthan go into an error state, when a pinned node is unavailable at the\ntime of creation.",
          "is_bot": false,
          "headline": "Add Placement preflight query config",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-24T11:16:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "604a6dbc11e8667b34776b979053abae51a64e53",
          "body": "Status records the retry state, but operators need a timeline for\nwhy a server is being deleted and recreated without digging through\nresource versions.\n\nEmit Kubernetes events and matching structured logs when a provider\ncreate retry starts, when the failed provider server has disappeared,\nand when the retry budget is exhausted. Keep the in-progress delete\nloop quiet so each reconcile does not produce another event.",
          "is_bot": false,
          "headline": "Emit provider create retry events",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-23T12:52:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71b436592fc96bcaa35d2e861922bd5817c6e726",
          "body": "Provider-side create failures can leave pinned servers stuck after\nNova has accepted the request but before Region observes a launched\ninstance. Reporting that terminally on the first failure leaves users\nwith a Server that needs manual cleanup.\n\nDelete the failed provider server, yield until it dis\n[…]\nconfigured limit. The manager also requeues on the monitor's first\npre-launch health error so the retry path runs without waiting for a\nspec change, and Helm can pass the retry limit flag when needed.",
          "is_bot": false,
          "headline": "Retry errored provider server creates",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-23T12:52:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0ac8ae31baa80788fc89a069601fe855e81519d2",
          "body": "Provider-side create failures are observed after the create\nrequest has already been accepted, so retries need durable state\nrather than in-memory controller bookkeeping.\n\nStore the retry count and in-flight delete marker on Server status\nso later controller changes can survive reconcile restarts and the\ngenerated CRD advertises the status contract.",
          "is_bot": false,
          "headline": "Track provider create retry state",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-23T12:52:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "014ea7edd56202cde2b3c66c2117c7f9fe98b688",
          "body": "Region's user-facing resource identifiers (region, identity, network, security\ngroup, load balancer, server, SSH certificate authority, file storage, image,\nflavor) are UUIDs, but they were passed around as bare strings: a malformed ID\nwas only caught — if at all — deep in a handler or at the Kubern\n[…]\nccessed by a non-owner -> 404).\n\nBuilt against the identity v1.17.7 release, which ships the scope-reader surface\nthis depends on.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Use typed resource IDs across the region API",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-22T08:56:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9f6f19de8bbe014ee0611904258c2be128e7ad6e",
          "body": "The provision/scheduling duration histograms were gated on\nPending → Running, but Phase now goes Pending → Building → Running for\nVMs and Pending → Queued → Building → Running for baremetal. With the\nstrict predicate both histograms silently stopped firing once the\nintermediate phases landed. Widen \n[…]\noll\n  lands inside the transient stop window. Pre-existing, follow-up work.\n- Complete the truncated //nolint:cyclop comment on setServerPhase.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(monitor): record provision histograms on any transition into Running",
          "author_name": "alex",
          "author_login": "alex-emery",
          "committed_at": "2026-06-19T09:12:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8ec9e34c309bd1069b5ed969eaab484945ebbb33",
          "body": "Wires the new Queued and Building lifecycle values into the live server\nmonitor. For an OpenStack baremetal server in Nova BUILD, the monitor\nnow looks up the bound Ironic node by instance_uuid and uses the node's\nprovision_state to refine Phase:\n\n  pre-deploy (Available / Cleaning / Inspecting / Ad\n[…]\nnever error on a missing or\n  unreachable Ironic.\n\nTests cover the full state-mapping table, the lookup gate\n(VM-skip / non-BUILD-skip), and the end-to-end wiring through\nupdateServerStateWithClients.",
          "is_bot": false,
          "headline": "feat(monitor): derive baremetal Phase from Nova and Ironic state",
          "author_name": "alex",
          "author_login": "alex-emery",
          "committed_at": "2026-06-19T09:12:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b5ab1c6458b674623070bbf058cebbe6eab5625",
          "body": "Extends the existing InstanceLifecyclePhase enum\n(Pending/Running/Stopping/Stopped) with two new values to express\ndistinctions that the live monitor can observe but a single combined\nPhase value cannot:\n\n- Queued — the provider has accepted the create but has not yet started\n  the underlying work. \n[…]\nt the bundled schema drifting from core's enum surface —\nthe response validator panics on a mismatched value at serving time,\nwhich a unit failure here turns into a clean test signal at generate\ntime.",
          "is_bot": false,
          "headline": "feat: add Queued and Building instance lifecycle phases",
          "author_name": "alex",
          "author_login": "alex-emery",
          "committed_at": "2026-06-19T09:12:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "83af22ade19e08b43c72e49d11d30ee631f66e44",
          "body": "Commit a618471 (\"Fix network allocation leak\") fixed a real symptom the\nwrong way. A v2 network can be deleted while its hidden service-principal\nidentity is still provisioning (OpenstackIdentity has no ProjectID yet).\nDeleteNetwork then failed building its project-scoped client, the error\npropagate\n[…]\nes, including the security group\n  panic regression, and update the network provisioner test to expect the\n  unconditional delete.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Make provider deletes idempotent and identity-tolerant",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-16T12:22:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "23e874c8d000017dbeeaa4f40ab909987903d4e0",
          "body": "* Add GET /api/v2/version endpoint\n\nReturns the service name and release version stamped into the binary at\nbuild time via ldflags, so clients and CI release gates can verify\nexactly which release is deployed (the same way the console health\ncheck exposes its commit). Requires bearer authentication;\n[…]\nlint\n\n* Add version endpoint integration test\n\n* Align version endpoint contract\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>\nCo-authored-by: Simon Murray <spjmurray@yahoo.co.uk>",
          "is_bot": false,
          "headline": "feat: Add GET /api/version endpoint (#560)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-16T10:38:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "593e454e4a963b5ec791762a6cbcab02e8fdb488",
          "body": null,
          "is_bot": false,
          "headline": "test: tolerate load balancer update cache lag",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-16T09:05:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f87435350b2bf0fcd8aa7746454bc032e540776",
          "body": null,
          "is_bot": false,
          "headline": "Preserve VLAN allocation on create failure",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-15T15:30:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "775d891d9cf28dbb0f2bea3527cd8eda2be3400d",
          "body": "Add four tests filling gaps left by the existing coverage:\n\n- delete with existing network + successful DeleteNetwork frees the VLAN\n  (pins the delete-first, free-second ordering)\n- delete on a non-provider-network region skips the VLAN free entirely\n- create failure with no allocated VLAN short-ci\n[…]\nailure with an ambiguous confirmation GetNetwork error preserves\n  the VLAN (the conservative branch guarding against VlanIdInUse)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: cover VLAN free/preserve corner cases on network create/delete",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-15T15:30:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "032ab949d0e06707397931a4da20bad749b0316b",
          "body": "- Extract tryFreeVLANOnCreateFailure helper to reduce reconcileNetwork\n  cyclomatic complexity from 11 to 9 and eliminate the 4-level nested\n  if block flagged by nestif\n- Remove //nolint:gochecknoglobals directive — gochecknoglobals does not\n  apply to test-file package-level vars (excluded by comm\n[…]\npositives\n  preset), so the directive was flagged as unused by nolintlint\n- Remove extra alignment spaces from var block to satisfy gci/gofmt\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix cyclop/nestif/gci/nolintlint lint failures",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-15T15:30:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "478682f9a1a138fff41114c15eda41e4f473802b",
          "body": "Bug 1: DeleteNetwork freed the VLAN allocation before calling\nNeutron's DeleteNetwork. If DeleteNetwork failed the allocator\nbelieved VLAN was free; the next provision would allocate the same\nVLAN ID and Neutron would reject it with VlanIdInUse.\nFixed by swapping order: delete the Neutron network fi\n[…]\nthe network does not exist.\n\nTests added for each case, including the edge case where\nCreateNetwork fails but Neutron did create the network.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix VLAN leak: free VLAN only after confirmed network deletion",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-15T15:30:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9d40a743403d30d11e46733406db959c1ea3ba32",
          "body": "Cover the two error paths that were silent for 21 days:\n\n- TestDeleteNetworkPreservesVLANWhenDeleteNetworkFails: verifies that\n  when Neutron's DeleteNetwork returns an error, the VLAN allocation is\n  NOT freed from the allocator. The network is still alive on OpenStack\n  so the VLAN must remain res\n[…]\nails, the VLAN that was already allocated for it\n  is released before returning the error, preventing pool exhaustion on\n  repeated failures.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add unit tests for VLAN leak bug fixes",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-15T15:30:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbdab7fe3d5a4523cb886e83675bb96257275f40",
          "body": "Two bugs in the OpenStack provider could leave VLAN IDs permanently\nallocated in the internal allocator while the corresponding Neutron\nnetwork no longer exists (or never existed), causing VlanIdInUse errors\non subsequent allocations.\n\nBug 1 — deleteNetwork freed the VLAN from the allocator before c\n[…]\nld VLAN\n1101 on physnet1 for 21 days, causing both LoadBalancer suite tests to\ntime out in the 2026-06-09 dev run (actions/runs/27212683885).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: prevent VLAN leak on network create/delete failure",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-15T15:30:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5b447dd3b2ea22ed8e13fbe502828c3ec2afa543",
          "body": "helm v4.2.1 regressed --wait: chart installs (cert-manager, ingress-nginx)\nstall for ~40 minutes before completing, hanging the integration job. The\nsame charts install in seconds on v4.2.0, which all green runs used. Pin to\nv4.2.0 until a fixed helm release ships.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Pin helm to v4.2.0 in integration workflow",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-15T11:52:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "10b15dc85c69234ccdfff3ce2761076e3144a055",
          "body": "Previously the $ref URLs in server.spec.yaml and the import mapping in\nconfig.yaml pointed at the main branch of unikorn-cloud/core, and the\ngo.mod dependency was pinned to a pseudo-version (timestamp/commit-hash).\nThis caused schema.go (which embeds the resolved spec) to change whenever\ncore's main\n[…]\n/hash and makes it obvious exactly what's been included, and keeps\ngenerated output stable until we deliberately bump the version.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Pin core schema reference to v1.17.0",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-15T11:52:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fc09ece95e82568868afaaef802728b287324c2a",
          "body": "Add unit coverage for the security-group, identity and load-balancer\nprovisioner managers, following the network provisioner test pattern\n(NewForTest factory, gomock Provider/Providers, coreclient.NewContext,\nfake.NewClientBuilder).\n\n- security-group (0% -> 68.8%): provision/deprovision lifecycle, u\n[…]\n.0%): provider create error propagation,\n  allocation cleanup on deprovision, idempotent cleanup when the allocation\n  is already gone.\n\nINST-950\n\nCo-authored-by: Sravan M <sravan.medarapu@nscale.com>",
          "is_bot": false,
          "headline": "test(provisioners): unit test uplift for manager provisioners (#551)",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-06-12T08:55:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "26139f65191a7964bed6d7d70fa39094d388bf40",
          "body": "Guard for flavours that require a host ID",
          "is_bot": false,
          "headline": "Merge pull request #491 from nscaledev/pinned-only-guard",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T12:06:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f84ab9761cabd71a385cabf88db377fbeba4442",
          "body": "The success and failure coverage both exercise the HTTP handler now,\nso the tests document the API behavior in one place instead of\nsplitting paired cases across layers.",
          "is_bot": false,
          "headline": "Keep pinnedOnly tests with handler",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T11:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fff3cd1b8473121846bf392a086dc8e1f58ca62",
          "body": "Reduces repetition across seven tests by pulling the five-line\nidentity project-lookup mock setup into expectProjectFound, and\nthe four-line provider/flavor mock setup into\nnewMockProvidersWithNoFlavors.",
          "is_bot": false,
          "headline": "Extract shared test helpers in server client_v2 tests",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T11:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d57a4b8c7cb650e89be2336ececc380530a1370",
          "body": "Verify that attempting to create a server with a pinnedOnly flavor\nbut no infrastructureRef is rejected with 422 Unprocessable Entity.\n\nAlso adds addProjectEndpoint to the aclBuilder helper so tests can\nset project-scoped ACL entries without needing the identity API client.",
          "is_bot": false,
          "headline": "Test pinnedOnly flavor requires infrastructureRef",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T11:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddbfaad7a639c48ccc4c758d67008f6de9b43f72",
          "body": "Adds pinnedOnly to the provider Flavor type and populates it from\nthe region FlavorMetadata. Exposes it in flavor API responses.\n\nOn server create, rejects with 422 if the selected flavor is\npinnedOnly and no infrastructureRef is provided.",
          "is_bot": false,
          "headline": "Enforce pinnedOnly flavors require an infrastructureRef",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T11:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d39e6f97b39ddb2073051f6a0e47c4950489176f",
          "body": "Exposes the flag in API responses so callers can determine whether\na flavor requires an infrastructureRef before creating a server.",
          "is_bot": false,
          "headline": "Add pinnedOnly to flavor OpenAPI spec",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T11:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9267e02d9ef5fc52eeecac5903d20bf8a69c7e7f",
          "body": "Marks a flavor as requiring an InfrastructureRef on server creation.\nEnforcement logic follows in a subsequent commit.",
          "is_bot": false,
          "headline": "Add pinnedOnly to FlavorMetadata CRD type",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-11T11:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce38ea52cb848fc378802a92271b58995549ec05",
          "body": "* ci: ship API test history via OTLP\n\n* Keep test history spool for OTLP validation\n\n* Allow infra API test focus dispatch\n\n* Use run-scoped test history Grafana link\n\n* Restore Grafana enrichment for API reports\n\n* Enable Unikorn CR enrichment for API reports\n\n* Use temp Slack webhook for API report retest\n\n* Narrow test history Grafana link query\n\n* ci: rely on test history action defaults\n\n* ci: remove combined API test focus option\n\n* ci: use main test results report action",
          "is_bot": false,
          "headline": "ci: ship API test history via OTLP (#554)",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-10T09:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0aa9b7dcf91349d8332a16521d665a1be913842f",
          "body": "- Add nightly.yaml: daily 2am UTC build publishing Docker images to\n  ghcr.io/nscaledev/nightly/ and Helm charts to\n  oci://ghcr.io/nscaledev/charts-nightly, tagged v0.0.0-<timestamp>-<sha>\n- Add cleanup.yaml: daily 4am UTC job deleting nightly builds older than\n  TTL_DAYS (default 7); reads CONTROL\n[…]\nhart release\n  action\n- Set Chart.yaml version/appVersion to 0.0.0 sentinel; real versions are\n  injected at build time rather than committed\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add nightly builds, cleanup, and release workflow improvements",
          "author_name": "Simon Murray",
          "author_login": "spjmurray",
          "committed_at": "2026-06-09T08:40:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bf5b1ff3991ab4db7b314adca1db03d2b8df8950",
          "body": "Pin the server host with infrastructureRef",
          "is_bot": false,
          "headline": "Merge pull request #488 from nscaledev/pin-infrastructure-ref",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T13:58:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6ba1ebf0e7ed1f73bd443128153d08cebd303cd",
          "body": "Server infrastructureRef coverage needs a prepared provider target, but\ninferring or hiding that setup inside integration-fixtures makes OpenStack\nmutation look like ordinary API fixture generation.\n\nMove fake baremetal preparation into an OpenStack server helper and keep\nintegration-fixtures limited to preserving the emitted test reference.",
          "is_bot": false,
          "headline": "Make infra ref setup explicit",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T13:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "babc5d13a70c69e121a55f13f006dbc7075cac1e",
          "body": "PR feedback called out missing handler coverage for the new\ninfrastructureRef path. The test locks down why the field is exposed\nfrom status: create must persist it on the Server CRD and return it in\nthe v2 response.",
          "is_bot": false,
          "headline": "Cover infrastructureRef server create flow",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T13:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "083c29a85a8a4ba284eaf12dc3e26839d8da742a",
          "body": "Passes the field from the create request into the CRD spec via\ngenerateV2, and exposes it in the read response status so callers\ncan confirm which host the server was pinned to.\n\nAlso adds infrastructureRef to the server status schema so it\nis visible in read responses.",
          "is_bot": false,
          "headline": "Wire infrastructureRef through handler into server CRD",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T13:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7c214c311c75b073303b8e4dffcef3236b212ed",
          "body": "Exposes the host-pinning field in the API so callers can request\nprovisioning onto a specific physical host.",
          "is_bot": false,
          "headline": "Add infrastructureRef to server v2 create spec",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T13:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7163e8e3ee015f6a3255302029618e09514bf393",
          "body": "Hypervisor pinning is a create-time constraint; allowing it to be\npatched on a running server has no defined semantics and could lead\nto inconsistent state. The CEL rule is enforced by the API server\nwithout requiring a webhook.",
          "is_bot": false,
          "headline": "Enforce immutability of InfrastructureRef via CEL",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T13:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11144f9847497e48ab7d7902f78527ea5e56bffc",
          "body": "When InfrastructureRef is set on a server, include it as\nhypervisor_hostname in the Nova create request. This asks Nova to place\nthe instance on the named host instead of leaving placement entirely to\nthe scheduler.\n\nNova protects requested destinations with a project-scoped policy check.\nThe per-id\n[…]\nect for pinned creates, while\nleaving unpinned creates on the per-identity client.\n\nAdd unit coverage for both the pinned and unpinned create paths so the\nwire format and client choice do not regress.",
          "is_bot": false,
          "headline": "Pass InfrastructureRef as Nova destination",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T10:24:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3765b37ca63765f446c605dceed7922972d43ce5",
          "body": "Allows a server to be pinned to a specific physical host by supplying\na provider-level host identifier at creation time. The provider uses\nthis to bypass its scheduler and provision directly onto the named host.",
          "is_bot": false,
          "headline": "Add InfrastructureRef to ServerSpec",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T10:24:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2339bcb7fa96d8234d652281b2736bcaca2acdd",
          "body": "Deflake securitygroup PUT/GET test",
          "is_bot": false,
          "headline": "Merge pull request #555 from nscaledev/fix-securitygroup-update-readback",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-08T10:03:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec56d6764294e6fa45141c23ea9ac3e41aa96884",
          "body": "The API handler reads through the controller-runtime cache, so a GET\nimmediately after a successful PUT can still observe the previous\nsecurity group spec. Poll the integration assertion until the cache has\nseen the patched object while keeping the update response check\nsynchronous.",
          "is_bot": false,
          "headline": "Wait for security group readback",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-07T14:17:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f54b9deba87a506f1622c12cddc0c7f568ad8d2d",
          "body": null,
          "is_bot": false,
          "headline": "Clarify VLAN duplicate allocation docs",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-05T11:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0798569dd62729a840a73f74a6517be6b3b88a8",
          "body": null,
          "is_bot": false,
          "headline": "docs: update VLAN allocation behavior",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-05T11:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5aa0dde0a5891405beaf1a6a1e5b94b44e986178",
          "body": null,
          "is_bot": false,
          "headline": "fix: free VLAN allocations by network ID",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-05T11:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7c7511a6b09a63b89b057293880c6062daf26e3",
          "body": null,
          "is_bot": false,
          "headline": "chore: log OpenStack network creation failures",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-05T11:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4d151eb47adc984325ad001be9651a594d58901",
          "body": null,
          "is_bot": false,
          "headline": "chore: log VLAN allocation failures",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-05T11:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "553c05a15609efa7aa80c1418cbb519a223f51cb",
          "body": null,
          "is_bot": false,
          "headline": "fix: free recorded VLAN allocation on network delete",
          "author_name": "Sravan Medarapu",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-05T11:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4135109cfa5734e8201477145ae714422fef76d",
          "body": "…ritygroup) (#552)\n\nCover the previously untested read/CRUD client-layer paths in the region,\nserver and securitygroup handlers, using a fake Kubernetes client seeded with\ntyped resources and project/global-scoped RBAC contexts.\n\n- region: List (visibility filtering) and GetDetail (simulated, Kubern\n[…]\nPI-version guard),\n  DeleteV2 (in-use, already-deleting, perms), UpdateV2 (not-found, perms,\n  being-deleted)\n\nCoverage: region 19.1%->55.1%, server 27.8%->32.3%, securitygroup 14.5%->45.1%.\n\nINST-951",
          "is_bot": false,
          "headline": "test: uplift handler client-layer unit coverage (region, server, secu…",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-06-05T09:59:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0de2c169daa9253befd39c5b92ed502f2ca06a97",
          "body": "Add unit tests for the untested logic helpers flagged in INST-949:\n\n- providers/types: Flavor.GPUCount (no GPU -> 0, GPU -> LogicalCount)\n- apis/unikorn/v1alpha1: UseProviderNetworks predicate (all nil-guard\n  branches plus the all-set true path), StaticName format string per\n  provider, and VLANSpe\n[…]\nto 100% statement coverage. Tests are\nblack-box, parallel, and use testify/require, matching the existing\nhelpers_test.go in the v1alpha1 package.\n\nCo-authored-by: peterj-ns <peter.johnson@nscale.com>",
          "is_bot": false,
          "headline": "test: unit cover provider type and CRD helpers (INST-949) (#549)",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-06-05T09:45:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "776da71ff09e837e9e76dd0ad44626aa59885bc9",
          "body": "Add black-box unit tests for the util helper packages (INST-948).\n\nproviders/util: GenerateSSHKeyPair was at 0% coverage. Verify the public\nkey is a valid ssh-ed25519 authorized_keys line, the private key is a\nvalid OPENSSH PRIVATE KEY PEM block, the keypair round-trips, and each\ncall yields a disti\n[…]\nwhen OrganizationID is empty, no-overwrite when set),\nthe OrganizationIDQuery/ProjectIDQuery nil and unwrap paths, the\nAddRegionIDQuery/AddNetworkIDQuery selector helpers, and\nForegroundDeleteOptions.",
          "is_bot": false,
          "headline": "test: unit cover providers/util and handler/util (#548)",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-06-05T09:37:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27fa989e39ebca5d67bea34249ac8342d61d8235",
          "body": "* test(handler): unit test uplift for conversion functions (INST-947)\n\nAdd black-box unit tests covering all pure conversion functions across\nhandler/conversion, handler/server, handler/region, and handler/image.\nIncludes export_test.go shims for unexported functions.\n\nAlso fix a latent nil derefere\n[…]\npec.Openstack; a test for that shape\ntriggered the panic.\n\n* fix(lint): apply gofmt formatting to conversion test files\n\n* test(region): cover convertDetail Openstack nil guard for full patch coverage",
          "is_bot": false,
          "headline": "Unit test uplift for conversion functions (INST-947) (#540)",
          "author_name": "Jake",
          "author_login": "JakeNScale",
          "committed_at": "2026-06-05T09:29:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6527cc5930fcf9eabae4cbce946c4dca92d8547c",
          "body": "* Add snapshot policies to file storage CRD\n\n* Remove unnecessary test file\n\n* Add some test cases for CRD validation",
          "is_bot": false,
          "headline": "Add snapshot policies to file storage CRD (#546)",
          "author_name": "Vinícius do Carmo",
          "author_login": "vinimdocarmo",
          "committed_at": "2026-06-03T11:52:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50a88621342cc8a6026777844ca6984343f8334d",
          "body": "…547)\n\n* ci: enable Grafana test report enrichment\n\n* ci: address Grafana report review feedback\n\n* ci: keep Grafana enrichment always enabled",
          "is_bot": false,
          "headline": "ci: enable Grafana/Loki enrichment for Region test report analysis (#…",
          "author_name": "Sravan M",
          "author_login": "sravanmedarapu-work",
          "committed_at": "2026-06-03T11:28:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07d634293d8fd4fc57a7166b3ff2eb90d2665132",
          "body": "Test Server API (minimally)",
          "is_bot": false,
          "headline": "Merge pull request #542 from nscaledev/test-server-api",
          "author_name": "Michael Bridgen",
          "author_login": "squaremo",
          "committed_at": "2026-06-03T10:36:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 452,
      "latest_release_at": "2026-07-17T12:45:55Z",
      "latest_release_tag": "v1.19.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 50,
      "days_since_latest_release": 4,
      "mean_days_between_releases": 2.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/unikorn-cloud/region",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": false,
          "registry_url": "https://pkg.go.dev/github.com/unikorn-cloud/region",
          "is_deprecated": false,
          "latest_version": "v1.19.0",
          "repository_url": "https://github.com/unikorn-cloud/region",
          "versions_count": 194,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T12:37:54Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 6,
      "stars": 1,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2024-07-29",
            "count": 1
          },
          {
            "date": "2024-10-16",
            "count": 1
          },
          {
            "date": "2024-10-30",
            "count": 1
          },
          {
            "date": "2024-11-19",
            "count": 1
          },
          {
            "date": "2025-03-27",
            "count": 1
          },
          {
            "date": "2026-05-27",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 6,
        "total_forks": 6
      },
      "star_history": {
        "days": [
          {
            "date": "2026-07-13",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_stars": 1
      },
      "open_issues_and_prs": 16
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 480354,
      "source_files_sampled": 202,
      "oversized_source_files": 9,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 3493
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 13
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          }
        ],
        "collected": true,
        "truncated": false,
        "by_severity": {
          "unknown": 3
        },
        "advisory_count": 3,
        "affected_count": 3,
        "assessed_count": 138,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/getkin/kin-openapi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.132.0"
        },
        {
          "name": "github.com/go-chi/chi/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.2.4"
        },
        {
          "name": "github.com/gophercloud/gophercloud/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.10.0"
        },
        {
          "name": "github.com/gophercloud/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20231010081019-80377eca5d56"
        },
        {
          "name": "github.com/kaptinlin/jsonschema",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.3"
        },
        {
          "name": "github.com/oapi-codegen/runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.22.0"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.1"
        },
        {
          "name": "github.com/pact-foundation/pact-go/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.2"
        },
        {
          "name": "github.com/spf13/pflag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.10"
        },
        {
          "name": "github.com/spjmurray/go-util",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.3"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/unikorn-cloud/core",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.18.0"
        },
        {
          "name": "github.com/unikorn-cloud/identity",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.17.8"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.2"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.33.1"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.33.1"
        },
        {
          "name": "k8s.io/apiserver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.32.1"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.33.1"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250502105355-0f33e8f1c979"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.4"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "github.com/Masterminds/semver/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.3.1"
        },
        {
          "name": "github.com/go-logr/logr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.3"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "go.opentelemetry.io/otel/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "k8s.io/apiextensions-apiserver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.32.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/getkin/kin-openapi",
            "direct": true,
            "version": "v0.132.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-chi/chi/v5",
            "direct": true,
            "version": "v5.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": true,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gophercloud/gophercloud/v2",
            "direct": true,
            "version": "v2.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gophercloud/utils",
            "direct": true,
            "version": "v0.0.0-20231010081019-80377eca5d56",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kaptinlin/jsonschema",
            "direct": true,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": true,
            "version": "v3.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oapi-codegen/runtime",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.36.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pact-foundation/pact-go/v2",
            "direct": true,
            "version": "v2.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": true,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spjmurray/go-util",
            "direct": true,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/unikorn-cloud/core",
            "direct": true,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/unikorn-cloud/identity",
            "direct": true,
            "version": "v1.17.8",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": true,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.33.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": true,
            "version": "v0.32.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.33.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": true,
            "version": "v0.32.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.33.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20250502105355-0f33e8f1c979",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.20.4",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": true,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antlr4-go/antlr/v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apapsch/go-jsonmerge/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20190424111038-f61b66f89f4a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/brunoga/deep",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-oidc/v3",
            "direct": false,
            "version": "v3.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.9.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-yaml",
            "direct": false,
            "version": "v1.17.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/cel-go",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.6.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20241029153458-d1b30febd7db",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gophercloud/gophercloud",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gotnospirit/makeplural",
            "direct": false,
            "version": "v0.0.0-20180622080156-a5f48d94d976",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gotnospirit/messageformat",
            "direct": false,
            "version": "v0.0.0-20221001023931-dfe49f1eb092",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.28.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-uuid",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/logutils",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kaptinlin/go-i18n",
            "direct": false,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mohae/deepcopy",
            "direct": false,
            "version": "v0.0.0-20170929034955-c48cc78d4826",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml",
            "direct": false,
            "version": "v0.0.0-20250309154309-f31be36b4037",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml3",
            "direct": false,
            "version": "v0.0.0-20250309153720-d2182401db90",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/perimeterx/marshmallow",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": false,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stoewer/go-strcase",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/prometheus",
            "direct": false,
            "version": "v0.68.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20240719175910-8a7402abbf56",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260401024825-9d38bb4040a9",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260401024825-9d38bb4040a9",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.80.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.12.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.32.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.130.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20250318190949-c8a335a9a2ff",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20241014173422-cfa47c3a1cc8",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v4",
            "direct": false,
            "version": "v4.7.0",
            "ecosystem": "go"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "9.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": false,
            "version": "2.34.2",
            "ecosystem": "pypi"
          },
          {
            "name": "schemathesis",
            "direct": false,
            "version": "4.21.1",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 138,
        "direct_count": 31,
        "indirect_count": 107
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 15,
        "merged_prs": 535,
        "open_issues": 1,
        "closed_ratio": 0.929,
        "closed_issues": 13,
        "closed_unmerged_prs": 50
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "spjmurray",
          "commits": 316,
          "avatar_url": "https://avatars.githubusercontent.com/u/5549946?v=4"
        },
        {
          "type": "User",
          "login": "squaremo",
          "commits": 74,
          "avatar_url": "https://avatars.githubusercontent.com/u/62033?v=4"
        },
        {
          "type": "User",
          "login": "nsricardor",
          "commits": 45,
          "avatar_url": "https://avatars.githubusercontent.com/u/167014746?v=4"
        },
        {
          "type": "User",
          "login": "peterj-ns",
          "commits": 37,
          "avatar_url": "https://avatars.githubusercontent.com/u/243098101?v=4"
        },
        {
          "type": "User",
          "login": "JakeNScale",
          "commits": 27,
          "avatar_url": "https://avatars.githubusercontent.com/u/212280375?v=4"
        },
        {
          "type": "User",
          "login": "sravanmedarapu-work",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/247156257?v=4"
        },
        {
          "type": "User",
          "login": "alansy-nscale",
          "commits": 16,
          "avatar_url": "https://avatars.githubusercontent.com/u/206472817?v=4"
        },
        {
          "type": "User",
          "login": "mkjpryor",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/642657?v=4"
        },
        {
          "type": "User",
          "login": "schristoff",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/28318173?v=4"
        },
        {
          "type": "User",
          "login": "alex-emery",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/89853151?v=4"
        }
      ],
      "contributors_sampled": 14,
      "top_contributor_share": 0.539
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "claude-code-review.yaml",
        "cleanup.yaml",
        "fuzz.yaml",
        "integration.yaml",
        "merge.yaml",
        "nightly.yaml",
        "pact-verification.yaml",
        "pull-request.yaml",
        "release.yaml",
        "slow-e2e-uat-test.yaml",
        "test-api.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 9,
            "reason": "Found 22/24 approved changesets -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 10 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "66d72dc5a63e39dee411fd06bb59f8e8b63565b7",
        "ran_at": "2026-07-21T21:27:44Z",
        "aggregate_score": 6.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/nscaledev/uni-region",
    "host": "github.com",
    "name": "uni-region",
    "owner": "nscaledev"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 67,
      "inputs": {
        "security": 67,
        "vitality": 95,
        "community": 27,
        "governance": 64,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 95,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "commits_last_year": 452,
              "human_commit_share": 0.98,
              "days_since_last_push": 0,
              "active_weeks_last_year": 50
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "50/52 weeks with commits",
                "points": 34.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 50
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "452 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 452
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v1.19.0",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": 2.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 6,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 6 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 27,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 6,
            "inputs": {
              "forks": 6,
              "stars": 1,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "below_threshold"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "6 forks",
                "points": 5.8,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 43,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 14,
              "top_contributor_share": 0.539
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 54% of commits",
                "points": 10.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 54
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "14 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "merged_prs": 535,
              "open_issues": 1,
              "closed_issues": 13,
              "issue_closed_ratio": 0.929,
              "closed_unmerged_prs": 50
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "93% of issues closed",
                "points": 43.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 93
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "535/585 decided PRs merged",
                "points": 35,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 535,
                      "decided": 585
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 22/24 approved changesets -- score normalized to 9",
                "points": 13.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "followers": 67,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "nscaledev",
              "public_repos": 71,
              "account_age_days": 902
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "67 followers of nscaledev",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 67,
                      "login": "nscaledev"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "71 public repos, account ~2 yr old",
                "points": 17.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 71
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "11 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "unikorn",
                "uni"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "2 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 67,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 22/24 approved changesets -- score normalized to 9",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 138 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 138
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 3,
              "assessed_packages": 138,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 3",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.52.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.52.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 138,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 5
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 90,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.969,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 3493
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "95 of 98 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 95,
                      "sampled": 98
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.32,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "32 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 32,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 480354,
              "source_files_sampled": 202,
              "oversized_source_files": 9
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "9/202 source files over 60KB",
                "points": 52.5,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 202,
                      "oversized": 9
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "go package 'github.com/unikorn-cloud/region' points at a different repository (https://github.com/unikorn-cloud/region); excluded from ecosystem scoring"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-21T21:28:07.130616Z",
  "schema_version": "0.23.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/nscaledev/uni-region.svg",
  "full_name": "nscaledev/uni-region",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}