公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 04:45 UTC

open-constructs / cdk-terrain

Define infrastructure resources using programming constructs and provision them using OpenTofu/Terraform

TypeScriptMPL-2.0★ 234 星标⑂ 23 复刻始于 2026年1月在 GitHub 上查看 ↗

open-constructs/cdk-terrain 的健康指数为 100 分中的 77 分,处于「良好」区间。 其得分最高的类别是Vitality(90/100),最低的是Security(58/100)。 最近一次更新在今天。 近期的大部分工作由 2 位贡献者完成。

77
总分 / 100
良好

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 49(有风险)的上限。AI 就绪度不计入总体分。

77
优秀85-100堪称典范;基本满足所有检验标准
良好70-84健康;仅有轻微不足
中等50-69可接受,但存在明显不足;建议进行审查
存在风险30-49存在重大薄弱环节;采用时应保持审慎
危急1-29问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

55 关注者12 个公开仓库始于 2024年1月

该仓库由组织支持——共同承担、可问责的托管责任,可延续于任何单一维护者之后。

软件包生态系统

注册表软件包版本月下载量版本数最近发布标签
npmcdktn0.23.498,12710320 天前cdkcdktfcdktnterraform
npmcdktn-cli0.23.474,89610320 天前cdkcdktfcdktnterraform

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

90优秀 · 占总体的 22%
评分方式
36/36推送新近度 — 最近一次推送于 0 天前
20.1/36提交节奏 — 52 周中有 29 周有提交
18/18提交量 — 最近一年 212 次提交
10/10OpenSSF Scorecard:Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year212
human_commit_share0.96
days_since_last_push0
active_weeks_last_year29

发布纪律

100优秀
评分方式
27/27有发布版本 — 已发布 7 个发布版本
36/36发布时效 — 最近一次发布版本于 20 天前
27/27发布节奏 — 约每 22.5 天发布一次
0/10OpenSSF Scorecard:Signed-Releases — 无数据
所用输入
releases_count7
latest_release_tagv0.23.4
releases_from_tags
days_since_latest_release20
mean_days_between_releases22.5
已排除计分(无数据或不适用):OpenSSF Scorecard:Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

76良好 · 占总体的 18%
评分方式
38.4/60星标 — 234 个星标
11.2/25复刻 — 23 个复刻
3.9/15关注者 — 6 位关注者
所用输入
forks23
stars234
watchers6
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

92优秀
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(MPL-2.0)
18/18CONTRIBUTING 指南
13.5/13.5行为准则
0/7.2议题模板
6.3/6.3PR 模板
所用输入
has_readme
has_license
has_contributing
has_issue_template
has_code_of_conduct
has_pull_request_template
评分方式
69.8/80月度下载量 — npm 合计每月 173,023 次下载
0/20注册表被依赖数 — 该生态系统不报告此项
所用输入
packagescdktn, cdktn-cli
dependents
ecosystemsnpm
total_downloads
monthly_downloads173,023
已排除计分(无数据或不适用):注册表被依赖数。 其余权重已重新归一化。

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

70良好 · 占总体的 24%
评分方式
25.2/54巴士系数 — 2 位贡献者贡献了半数提交
15.1/22.5提交分布 — 头号贡献者编写了 33% 的提交
13.5/13.5贡献者广度 — 95 位贡献者
10/10OpenSSF Scorecard:Contributors — project has 19 contributing companies or organizations
所用输入
bus_factor2
contributors_sampled95
top_contributor_share0.331
评分方式
21.6/46.8议题解决 — 46% 的议题已关闭
32.6/38.3PR 接受 — 已裁定的 PR 中 191/224 已合并
15/15OpenSSF Scorecard:Code-Review — all changesets reviewed
所用输入
merged_prs191
open_issues58
closed_issues50
issue_closed_ratio0.463
closed_unmerged_prs33
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
12.6/25所有者影响力 — open-constructs 有 55 位关注者
13.2/25既往记录 — 12 个公开仓库,账户约 2 年
所用输入
followers55
owner_typeOrganization
is_verified
owner_loginopen-constructs
public_repos12
account_age_days925
评分方式
25/25已发布且可解析 — npm 上有 2 个软件包
35/35发布时效 — 最近一次发布于 20 天前
20/20版本历史 — 103 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packagescdktn, cdktn-cli
ecosystemsnpm
any_deprecated
min_days_since_publish20

工程质量

基础的工程与文档实践是否到位?

86优秀 · 占总体的 20%

工程实践

84良好
评分方式
24/24CI 工作流 — 21 个工作流
24/24存在测试
16/16Linter 配置 — eslint.config.mjs
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard:CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config

文档

90优秀
评分方式
30/30README
25/25文档目录
15/15文档 / 主页站点 — http://cdktn.io
10/10仓库描述
10/10主题标签 — 8 个主题标签
0/10Wiki
所用输入
topicscdk, cdktf, infrastructure-as-code, terraform, opentofu, terraform-cdk, cdk-terrain, cdktn
has_wiki
homepagehttp://cdktn.io
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

58中等 · 占总体的 16%

安全态势

47存在风险
评分方式
2.2/7.5Binary-Artifacts — binaries present in source code
0/7.5Branch-Protection — 无数据
2.5/2.5CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 19 contributing companies or organizations
0/10Dangerous-Workflow — dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
4/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
1.5/5SAST — SAST tool is not run on all commits -- score normalized to 3
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — 无数据
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 42 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate4.8
已排除计分(无数据或不适用):branch_protection, signed_releases。 其余权重已重新归一化。
评分方式
35/35直接依赖不含已知公告 — 没有直接依赖携带已知公告
25/25间接依赖不含已知公告 — 没有间接依赖携带已知公告
0/40没有长期未处理的公告 — 没有公告带有发布日期
所用输入
sourceosv
advisories0
affected_packages0
assessed_packages3
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
已排除计分(无数据或不适用):没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:cdktn@0.23.4 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 3 个软件包。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?这是一枚独立的实验性徽章——权重为 0.0,因此单独呈现,不影响总体健康评分。

86优秀 · 占总体的 0%
评分方式
45/45代理指令 — CLAUDE.md
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 96 次人类提交中有 96 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share1
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes6,104
评分方式
18/18一条命令的引导启动 — mise.toml
22/22自动化测试
11/11Lint / 格式化配置 — eslint.config.mjs
11/11静态类型检查 — examples/typescript/aws-cloudfront-proxy/tsconfig.json, examples/typescript/aws-import/tsconfig.json, examples/typescript/aws-kubernetes/tsconfig.json, examples/typescript/aws-move/tsconfig.json, examples/typescript/aws-multiple-stacks/tsconfig.json, examples/typescript/aws-prebuilt/tsconfig.json, examples/typescript/azure-app-service/tsconfig.json, examples/typescript/azure-service-bus-queue-trigger/tsconfig.json, examples/typescript/azure/tsconfig.json, examples/typescript/backends/azurerm/tsconfig.json, examples/typescript/backends/cloud/tsconfig.json, examples/typescript/backends/gcs/tsconfig.json, examples/typescript/backends/remote/tsconfig.json, examples/typescript/backends/s3/tsconfig.json, examples/typescript/docker/tsconfig.json, examples/typescript/documentation/tsconfig.json, examples/typescript/google-cloudrun/tsconfig.json, examples/typescript/google/tsconfig.json, examples/typescript/kubernetes/tsconfig.json, examples/typescript/provisioner/tsconfig.json, examples/typescript/ucloud/tsconfig.json, examples/typescript/vault/tsconfig.json, packages/@cdktn/cli-core/templates/typescript/tsconfig.json, packages/@cdktn/cli-core/tsconfig.json, packages/@cdktn/commons/tsconfig.json, packages/@cdktn/hcl-tools/tsconfig.json, packages/@cdktn/hcl2cdk/tsconfig.json, packages/@cdktn/hcl2json/tsconfig.json, packages/@cdktn/provider-generator/tsconfig.json, packages/@cdktn/provider-schema/tsconfig.json, packages/cdktn-cli/tsconfig.json, test/tsconfig.json, tools/generate-function-bindings/tsconfig.json
10/10可复现环境 — Dockerfile, lockfile
10/10已体现的代理实践 — 最近 100 次提交中有 14 次由代理编写或署名代理
8/8自动化维护 — 最近 100 次提交中有 3 次为自动依赖更新
8/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
所用输入
has_nix
has_tests
lockfilesPipfile.lock, go.sum, pnpm-lock.yaml
has_dockerfile
typed_language
bootstrap_filesmise.toml
has_devcontainer
has_linter_config
typecheck_configsexamples/typescript/aws-cloudfront-proxy/tsconfig.json, examples/typescript/aws-import/tsconfig.json, examples/typescript/aws-kubernetes/tsconfig.json, examples/typescript/aws-move/tsconfig.json, examples/typescript/aws-multiple-stacks/tsconfig.json, examples/typescript/aws-prebuilt/tsconfig.json, examples/typescript/azure-app-service/tsconfig.json, examples/typescript/azure-service-bus-queue-trigger/tsconfig.json, examples/typescript/azure/tsconfig.json, examples/typescript/backends/azurerm/tsconfig.json, examples/typescript/backends/cloud/tsconfig.json, examples/typescript/backends/gcs/tsconfig.json, examples/typescript/backends/remote/tsconfig.json, examples/typescript/backends/s3/tsconfig.json, examples/typescript/docker/tsconfig.json, examples/typescript/documentation/tsconfig.json, examples/typescript/google-cloudrun/tsconfig.json, examples/typescript/google/tsconfig.json, examples/typescript/kubernetes/tsconfig.json, examples/typescript/provisioner/tsconfig.json, examples/typescript/ucloud/tsconfig.json, examples/typescript/vault/tsconfig.json, packages/@cdktn/cli-core/templates/typescript/tsconfig.json, packages/@cdktn/cli-core/tsconfig.json, packages/@cdktn/commons/tsconfig.json, packages/@cdktn/hcl-tools/tsconfig.json, packages/@cdktn/hcl2cdk/tsconfig.json, packages/@cdktn/hcl2json/tsconfig.json, packages/@cdktn/provider-generator/tsconfig.json, packages/@cdktn/provider-schema/tsconfig.json, packages/cdktn-cli/tsconfig.json, test/tsconfig.json, tools/generate-function-bindings/tsconfig.json
agent_commit_share0.14
toolchain_manifestsexamples/csharp/aws/MyTerraformStack.csproj, examples/csharp/azure/MyTerraformStack.csproj, examples/csharp/documentation/MyTerraformStack.csproj, examples/csharp/google/MyTerraformStack.csproj, examples/csharp/ucloud/MyTerraformStack.csproj, examples/go/aws/go.mod, examples/go/azure/go.mod, examples/go/docker/go.mod, examples/go/documentation/go.mod, examples/go/google-cloudrun/go.mod, examples/go/google/go.mod, examples/go/scaleway/go.mod, examples/go/ucloud/go.mod, examples/java/aws-gradle/build.gradle, examples/java/aws/pom.xml, examples/java/azure-gradle/build.gradle, examples/java/azure/pom.xml, examples/java/documentation-gradle/build.gradle, examples/java/documentation/pom.xml, examples/java/google-gradle/build.gradle, examples/java/google/pom.xml, examples/java/gradle-shared-module/build.gradle, examples/java/gradle-shared-module/common/build.gradle, examples/java/gradle-shared-module/module-a/build.gradle, examples/java/gradle-shared-module/module-b/build.gradle, examples/java/kubernetes-gradle/build.gradle, examples/java/kubernetes/pom.xml, examples/java/ucloud-gradle/build.gradle, examples/java/ucloud/pom.xml, packages/@cdktn/cli-core/templates/csharp/MyTerraformStack.csproj, packages/@cdktn/cli-core/templates/go/go.mod, packages/@cdktn/cli-core/templates/java/build.gradle, packages/@cdktn/hcl-tools/go.mod, packages/@cdktn/hcl2json/go.mod
dependency_bot_commit_share0.03
评分方式
45/45可类型检查的代码 — TypeScript(静态类型)
55/55可控的文件大小 — 采样的 897 个源文件中有 0 个超过 60KB
所用输入
primary_languageTypeScript
largest_source_bytes47,439
source_files_sampled897
oversized_source_files0

机器可读接口

40存在风险
评分方式
0/40API 模式(OpenAPI/GraphQL/proto)
0/20MCP 服务器
40/40可运行示例 — example, examples
所用输入
example_dirsexample, examples
has_mcp_signal
api_schema_files

关键数据

234GitHub 星标
95贡献者
212最近 12 个月提交数
0距最近推送天数
7发布版本数
2巴士系数(bus factor)
58开放议题
npm软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch npm package '@tools/documentation-generation' from its registry
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

Star 与 Fork 历史 0 ★ / 23 ⇿
0Star
23Fork
7发布

每颗 star 和每个 fork 的添加时间,来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方,二者可相互对照:稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时,它会作为增长真实性予以报告。

048121620242312026-012026-042026-07
主版本 0次版本 2修订 5
OpenSSF Scorecard 4.8 / 10
4.8综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-23 04:45 UTC

3Binary-Artifactsbinaries present in source code
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 19 contributing companies or organizations
0Dangerous-Workflowdangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
3SASTSAST tool is not run on all commits -- score normalized to 3
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities42 existing vulnerabilities detected
直接依赖 19
注册表软件包版本约束清单文件
npm@types/node22.20.1packages/cdktn-cli/package.json
npm@cdktn/hcl-toolsworkspace:*packages/cdktn-cli/package.json
npm@cdktn/hcl2cdkworkspace:*packages/cdktn-cli/package.json
npm@cdktn/hcl2jsonworkspace:*packages/cdktn-cli/package.json
npm@inquirer/prompts6.0.0packages/cdktn-cli/package.json
npmansi-escapes4.3.2packages/cdktn-cli/package.json
npmcli-cursor3.1.0packages/cdktn-cli/package.json
npmcli-spinners2.9.2packages/cdktn-cli/package.json
npmcli-table30.6.5packages/cdktn-cli/package.json
npmconstructs10.6.0packages/cdktn-cli/package.json
npmis-ci^4.1.0packages/cdktn-cli/package.json
npmpunycode2.3.1packages/cdktn-cli/package.json
npmyargs17.7.2packages/cdktn-cli/package.json
npmfflate0.8.2packages/cdktn/package.json
npmsafe-stable-stringify2.5.0packages/cdktn/package.json
npmsemver7.7.4packages/cdktn/package.json
npmcdktnworkspace:*tools/documentation-generation/package.json
npm@babel/parser7.27.2tools/generate-function-bindings/package.json
npm@cdktn/commonsworkspace:*tools/generate-function-bindings/package.json
全部依赖 未采集

本报告未能采集到解析后的依赖集合:GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

依赖安全公告 0

安装 npm:cdktn@0.23.4 会引入 3 个包(直接与传递):其中 0 个存在已知公告,0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "cdk",
        "cdktf",
        "infrastructure-as-code",
        "terraform",
        "opentofu",
        "terraform-cdk",
        "cdk-terrain",
        "cdktn"
      ],
      "is_fork": false,
      "size_kb": 135059,
      "has_wiki": false,
      "homepage": "http://cdktn.io",
      "languages": {
        "C#": 22856,
        "Go": 39853,
        "HCL": 4962,
        "Java": 24994,
        "Shell": 7506,
        "Python": 35960,
        "Batchfile": 230,
        "Dockerfile": 2624,
        "JavaScript": 93411,
        "TypeScript": 2585269
      },
      "pushed_at": "2026-07-23T04:27:04Z",
      "created_at": "2026-01-12T09:13:18Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T04:19:23Z",
      "description": "Define infrastructure resources using programming constructs and provision them using OpenTofu/Terraform",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MPL-2.0",
      "default_branch": "main",
      "license_spdx_raw": "MPL-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://the-ocf.org/",
      "name": "Open Constructs Foundation",
      "type": "Organization",
      "login": "open-constructs",
      "company": null,
      "location": "United States of America",
      "followers": 55,
      "avatar_url": "https://avatars.githubusercontent.com/u/156111141?v=4",
      "created_at": "2024-01-09T16:20:51Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 925
    },
    "license": {
      "state": "standard",
      "spdx_id": "MPL-2.0",
      "raw_spdx": "MPL-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.23.4",
          "kind": "patch",
          "published_at": "2026-07-03T00:40:12Z"
        },
        {
          "tag": "v0.23.3",
          "kind": "patch",
          "published_at": "2026-06-05T08:52:02Z"
        },
        {
          "tag": "v0.23.2",
          "kind": "patch",
          "published_at": "2026-05-26T05:21:37Z"
        },
        {
          "tag": "v0.23.1",
          "kind": "patch",
          "published_at": "2026-05-16T04:21:47Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2026-05-06T11:54:43Z"
        },
        {
          "tag": "v0.22.1",
          "kind": "patch",
          "published_at": "2026-03-28T16:29:43Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2026-02-18T00:53:36Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "90322f97388207362ad6a0a19a312353df213a73",
          "body": "…ons (RFC-04) (#296)\n\nImplements RFC-04 — **provider feature availability**: support the newer\nprovider plugin-protocol capability families with `targetVersions`-aware\ncodegen and synth-time validation. Proposal, dataset, sweep tooling and\ninteractive report live in **open-constructs/cdktn-planning*\n[…]\n/issues/3886\n- https://github.com/hashicorp/terraform-cdk/issues/3686\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: support newer provider plugin-protocol features via targetVersi…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-07-23T04:19:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2bf315d763cae0efbc5497d4c8e6630943cd5053",
          "body": "### Description\n\nOfficially set the minimum node version to 22.x as 20.x is EoL.\nUpdates @types/node to 22.x and restores minor updates.\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requ\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(deps)!: Require Node 22 minimum (#345)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-07-23T02:13:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dc9a8e9ee91dbcd8a8cb1ecc8d3cb5f06ee7c743",
          "body": "<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md\n\n-->\n\n### R\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: remove cdktf from tests (#277)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-07-19T20:10:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e1a69fc40410e45d7d686095419e67b60bb8d590",
          "body": "### Description\n\nAttempting to fix failures seen in pnpm upgrade job:\nhttps://github.com/open-constructs/cdk-terrain/actions/runs/29232337176/job/86759126716\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONT\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix(gha): Fix pnpm upgrade workflow (#335)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-07-18T22:22:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76dd4ff80a26df3ac2202ce299e416ea430d9685",
          "body": "…ture flag (#323)\n\n### Description\n\nCloses #322. ~~Stacked on #321~~ — #321 has merged and this branch is\nrebased onto current `main`; the diff is now the single canonical-hash\ncommit.\n\nAdds the canonical entry-framed asset hash as a `canonicalAssetHashes`\nfeature flag (`FUTURE_FLAGS`: enabled for n\n[…]\nth my changes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>\nCo-authored-by: vincent de smet <vincent.drl@gmail.com>",
          "is_bot": false,
          "headline": "feat(lib): canonical asset hashes behind the canonicalAssetHashes fea…",
          "author_name": "vincenthsh",
          "author_login": "vincenthsh",
          "committed_at": "2026-07-18T10:21:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "95753a93c7edc0b667f0e7e9696ffb86142e25dd",
          "body": "### Description\n\nBumps `fs-extra` to `11.3.6` (and `@types/fs-extra` to `11.0.4`) in\nevery package that depends on it, so the whole monorepo resolves a\nsingle copy of each.\n\nBefore this change the versions were inconsistent: five packages were\nalready on the `11.x` line (`11.3.4` / `^11.3.0`), while\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): update fs-extra to 11.3.6 across all packages (#328)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-17T01:38:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "557a16315aa1e118b530e709db85459c7d60b6c7",
          "body": "### Description\n\nBumps `ci-info` from `3.9.0` to `4.4.0` (latest) in the two packages\nthat declare it as a dependency:\n\n- `@cdktn/commons`\n- `@cdktn/cli-core`\n\nThis is a major version bump (3.x → 4.x). The only API used in the\ncodebase is `ciInfo.isCI` and `ciInfo.name` (in\n[`commons/src/checkpoint.\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): update ci-info to 4.4.0 across all packages (#329)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-17T01:34:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c10ee352831d11d6a8d26bcc093c238b475ffd18",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): Update zod to v4.4.3 (#332)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-14T23:36:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1c1c53c747a53dbfbcfdfbbe2bf02ca0b2c6668",
          "body": "### Description\n\nBumps `minimatch` from `5.1.9` to `10.2.5` (latest) in\n`@cdktn/cli-core`.\n\nThis is a major version bump (5.x → 10.x) and required two follow-on\nchanges beyond the version number:\n\n- **Removed the `@types/minimatch` devDependency.** `minimatch@10` ships\nits own type definitions, so t\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): update minimatch to 10.2.5 (#330)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-14T04:10:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38ea0ba85ad6ae6fd4c7207747239478abea2edd",
          "body": "### Description\n\nBumps `sscaff` from `1.2.274` to `2.0.388` (latest) in\n`@cdktn/cli-core`.\n\nThis is a major version bump (1.x → 2.x) but required no code changes on\nour side.\n\nThe [v2.0.0 breaking\nchange](https://github.com/cdklabs/node-sscaff/releases/tag/v2.0.0) is a\nsingle item: sscaff now requir\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): Update sscaff to v2.0.388 (#331)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-14T03:16:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6360e202c5bd04e81e5d08e4a0511554c46fcb4a",
          "body": "### Description\n\nCloses #320.\n\n`TerraformAsset` walked source trees with `fs.statSync`, which follows\nsymlinks. On symlinked trees (e.g. pnpm's `node_modules`) this meant:\n\n- **Archive bloat**: a target reachable through N symlink paths was\ncopied N times into the zip (15 MB → 34 MB on a real Lambda\n[…]\nicable\n- [x] New and existing unit tests pass locally with my changes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(lib)!: preserve symlinks in TerraformAsset walkers (#321)",
          "author_name": "vincenthsh",
          "author_login": "vincenthsh",
          "committed_at": "2026-07-12T23:43:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a899b7c86edefce60803facd9299827a1fffde46",
          "body": "### Description\n\nThe pnpm upgrade job has been failing as in ci environments pnpm is by\ndefault not allowed to update the lockfile, but that is explicitly what\nwe want to do here.\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix(gha): Allow pnpm to update the lockfile after package updates (#318)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-07-12T20:04:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1317141b81c37a4c1f260050cf2bb6d4781c529a",
          "body": null,
          "is_bot": false,
          "headline": "chore(cli)!: replace node-fetch with undici (#306)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-10T14:30:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "605cf639c4c021048ee84f8f44daf78d037f4ded",
          "body": "## Summary\n\n- `tools/documentation-generation` pinned `constructs@10.3.0`, while\nevery other package in the repo (`packages/cdktn`, `@cdktn/cli-core`,\n`@cdktn/provider-generator`, `cdktn-cli`, all examples) uses `10.6.0`.\nThe pin dates back to the `cdktf` era (2024-05-06) and was never bumped\nsince.\n[…]\nhe pin) and confirming detection\ntooling behaves correctly both ways\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docs): fix stale constructs pin breaking with()/IMixin docs (#305)",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-07-09T04:29:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eab2a016d08481bec04d83e3d70c7b9dcda5d414",
          "body": "… updates (#295)\n\nBumps the github-actions-backward-compatible group with 2 updates:\n[docker/build-push-action](https://github.com/docker/build-push-action)\nand [actions/setup-go](https://github.com/actions/setup-go).\n\nUpdates `docker/build-push-action` from 7.2.0 to 7.3.0\n<details>\n<summary>Release\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions-backward-compatible group with 2…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T02:01:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94999fc2de2093bdf733adc41f2877bdb38bc126",
          "body": "### Description\n\nThe repo already uses nx as its task runner for `test`, `lint`, and the\naffected-graph, but still depends on lerna for a handful of\norchestration and release chores. This PR removes lerna entirely and\nroutes those chores through nx, then converts the touched shell scripts\nto ESM Nod\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): replace lerna with nx (#315)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-09T01:56:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d555b828f6c3c6093758886661a164e4a4553ece",
          "body": "…earest Any wrapper (#300)\n\nFixes #11\n\n### Problem\n\nRunning `cdktn get` for the `awscc` provider generates bindings that\nfail to compile:\n\n```\n.gen/providers/awscc/data-awscc-appintegrations-data-integration/index.ts(327,44): error TS2551: Property 'StringListMapMap' does not exist on type\n```\n\nThe \n[…]\nor the existing `StringMapMap` lookup tests\nfor the three new classes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(provider-generator): collapse unsupported nested collections to n…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-07-07T16:08:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47ee2bb36112ce2c80d1d3dc87a4d14cd23de34f",
          "body": "### Description\n\nBumps the direct `glob` dependency from `10.5.0` to `13.0.6` in the\nthree packages that declare it:\n\n| Package                    | Before   | After    |\n| -------------------------- | -------- | -------- |\n| `@cdktn/hcl2cdk`           | `10.5.0` | `13.0.6` |\n| `@cdktn/provider-gene\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): bump glob to 13.0.6 (#307)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-07T00:32:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a960c5c69e8046481460c8061448dc48567ee1ee",
          "body": "…failure (#298)",
          "is_bot": false,
          "headline": "fix(cli): don't downgrade prebuilt providers on a transient registry …",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-06T01:41:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d64f6c1194c58d5e06e3b6f69a6fe9562b4e49e",
          "body": null,
          "is_bot": false,
          "headline": "fix(gha): flip merged release PR label to autorelease: tagged (#302)",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-07-05T12:24:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "955204a9d7913aede55b86710a80624ac567ca5f",
          "body": "## Summary\n\n- Include dev dependencies when npm is used to detect the installed\n`cdktn` / `cdktf` package version.\n- Add regression coverage for the npm package-version lookup arguments.\n\nFixes: #278\n\n## Testing\n\n- `pnpm nx test @cdktn/commons --runInBand --testFile=src/debug.test.ts`\n- `pnpm nx build cdktn-cli`\n- Validated the linked repro with the locally built CLI:\n  - `cdktn debug`\n  - `cdktn provider list`\n  - `cdktn provider add random`",
          "is_bot": false,
          "headline": "fix(cli): include dev dependencies in npm version lookup (#280)",
          "author_name": "sakul-learning",
          "author_login": "sakul-learning",
          "committed_at": "2026-07-03T15:46:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6aff7e6cbb9eeca173af898ea1b48b322cc7c16",
          "body": "### Related issue\n\nFixes #263\n\n### Description\n\nImplements the Ink + React replacement proposed in the linked issue:\nswaps the Ink/React UI layer for `@inquirer/prompts` + `cli-spinners` +\n`cli-table3` + `ansi-escapes` + `cli-cursor`. Same commands, flags,\napproval prompts, and `--auto-approve` sema\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(cli): replace Ink + React with smaller-tree CLI libraries (#264)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-03T15:18:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bf3131c7a3ce846fbe0d284ab304a4fc1f829ef9",
          "body": ":robot: Release PR — merge to cut a new release. Kept open and rebased\nas commits land on `main`.\n---\n\n\n<details><summary>0.23.4</summary>\n\n##\n[0.23.4](https://github.com/open-constructs/cdk-terrain/compare/v0.23.3...v0.23.4)\n(2026-07-02)\n\n\n### Features\n\n* **cli:** validate Terraform CLI feature ver\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: open-constructs-cdktn[bot] <291052431+open-constructs-cdktn[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(release): release v0.23.4 (#254)",
          "author_name": "open-constructs-cdktn[bot]",
          "author_login": "open-constructs-cdktn[bot]",
          "committed_at": "2026-07-03T00:02:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "562d4c7b90ba37c1b1e1385f552c86e4f1ee7879",
          "body": "…mpile bundle (#292)\n\n### Description\n\nThe `@cdktn/provider-generator:build` step (its `postbuild` runs the\nedge-provider-schema CLI, which generates bindings for all languages)\nintermittently fails in CI with:\n\n```\n[Error: ENOENT: no such file or directory, stat\n '/__w/cdk-terrain/cdk-terrain/packa\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "fix(provider-generator): copy only publishable files into the jsii co…",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-02T12:52:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d5af07dd8679b5b6746b7b790d2558341f0fea26",
          "body": "… (#285)\n\n### Description\n\nThe Java integration tests (`provider-add`, `provider-list`,\n`provider-upgrade`) have been intermittently failing, resolving a\nprebuilt provider package version one or two below the expected maximum\n(e.g. `0.2.55` → `0.2.53`/`0.2.54`).\n\n#### Example Failed jobs\n\n-\nhttps://\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "fix(cli): resolve prebuilt Java provider versions via repo1.maven.org…",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-02T12:49:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "de617dbb5e26a606e611f9a5477a12245f0650f4",
          "body": "…(#284)\n\n### Related issue\n\nFixes #283\n\n### Description\n\nInterrupting `cdktn diff` or `cdktn deploy` (Ctrl-C) left terraform's\nstate lock held, so the next run failed with `Error acquiring the state\nlock`.\n\nThe cause was that the CLI's abort handler tore terraform down instead\nof letting it exit on \n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "fix(cli): release terraform state lock when interrupting diff/deploy …",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-07-01T20:58:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d3657af14fe6abb598689999b5756bec672fa4c",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): replace uuid dependency with node:crypto.randomUUID (#291)",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-07-01T11:28:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fda0103de7d65956f8172af0055e6c880d7065cf",
          "body": "…nTofu schema keys (#293)",
          "is_bot": false,
          "headline": "fix(provider-generator): match shorthand provider sources against Ope…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-07-01T10:53:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7de65e965a4575c5359b6923dde2f467e1855ee",
          "body": null,
          "is_bot": false,
          "headline": "chore: Remove unused dependencies (#281)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-29T15:32:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cdf811544b7c8327f219f9668f30a574bfbec87b",
          "body": "## Summary\n\n> Stacked on #269 (declared `targetVersions` foundation). \n\nTerraform and OpenTofu have diverged in their built-in function sets,\nand the checked-in function metadata predated Terraform 1.8 — so `Fn`\nwas missing every function added since, and using a function your\ntargeted runtimes don'\n[…]\nistic across the version matrix — no binary is executed\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(lib): validate Fn usage against Terraform/OpenTofu versions (#268)",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-26T02:23:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0aa234399933be88c55c8c82b03fce4f9ddf600a",
          "body": "…ion) (#269)\n\n## Summary\n\n> Reworks unreleased\nhttps://github.com/open-constructs/cdk-terrain/issues/237 to not run\nterraform binary during synth\n\nPrerequisite for #268. Instead of probing whichever Terraform/OpenTofu\nbinary happens to be installed during synth, projects declare the\nruntimes they in\n[…]\nisting init tests exercise the new template field\nin CI\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: declared Terraform/OpenTofu target versions (validation foundat…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-25T02:15:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32a408fd8040afab63080d9c096f355d45fe2e98",
          "body": "…able` deprecated JSDoc (#234)\n\n**☝️ Could I get some help with this please ☝️**\nHi, I couldn't get all the tests to pass locally, but I think it's a\nsetup issue, not due to my changes.\nCould someone help me out by either running it locally themselves or\nrunning it through GH Actions?\n\n---\n\nUpdated \n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "feat(lib): S3-backend - Add `useLockfile` field and update `dynamodbT…",
          "author_name": "Richard J",
          "author_login": "rj-au",
          "committed_at": "2026-06-24T02:36:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0ea946f21025f3894215b2c58a829189539a9416",
          "body": "… prompt (#267)\n\nFixes #265\n\n## Problem\n\n`cdktn deploy` (and `destroy`) transformed real terraform errors into a\nmisleading `Missing variable` error, swallowing the actual failure.\n\nIn `packages/@cdktn/cli-core/src/lib/models/deploy-machine.ts`,\n`handleLineReceived` detected terraform's interactive \n[…]\n it.\n\nhttps://claude.ai/code/session_01HYP7w7BmQM9F8xZTc9qoHD\n\n---\n_Generated by [Claude\nCode](https://claude.ai/code/session_01HYP7w7BmQM9F8xZTc9qoHD)_\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): don't mistake terraform error output for a missing-variable…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-13T13:29:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ef508a659e52bb8f5cd0d827e4cad8ff70e0809d",
          "body": "PR #266 added a devEngines.packageManager block requiring pnpm with\nonFail: download. The publish jobs run npm/npx (publib -> npm publish,\nwhich is required for npm OIDC trusted publishing on npm >= 11.5), and\nnpm 11.15.0 reads devEngines from the root package.json and hard-fails\nwith EBADDEVENGINES\n[…]\nad was a corepack auto-download mechanism, redundant now\nthat pnpm is provisioned via mise/corepack from the packageManager field.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(release): drop devEngines.packageManager that broke npm publish",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-13T09:04:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "48ab91f7fa268a9c15daa2d041fe30e31b6015bc",
          "body": "We switched to pnpm in #170. Adding it to mise means devs don't have to\nmanually install it.\n\nMise could also eventually take over from corepack/nvm in CI. But that\nis not implemented here.\n\nEDIT: this change also required updating lerna, nx, and knip to support\npnpm v11's multi-doc lock file format\n[…]\n--------\n\nCo-authored-by: so0k <vincent.drl@gmail.com>\nCo-authored-by: Simon Heather <32168619+X-Guardian@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: add pnpm to mise (#266)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-06-13T08:01:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1578270b57ef6eebc75df74e96d5329f9603b277",
          "body": "### Description\n\nGradle is missing from the `mise.toml` config and is required for the\nproject so should be added, pinned to the same version used in the\n`Dockerfile`\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Add Gradle to Mise config (#271)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-13T07:04:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba407bbe4742ab2c6126114341b928d729347114",
          "body": "### Description\n\nThe `test/edge-provider-bindings` directory needs adding to the test\npackage ESLint `ignores` config so that it is not linted, as these files\nare dynamically generated. This is an issue when running eslint on the\n`test` package locally, when the `edge-provider-bindings` have been\nge\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: ESLint ignore test edge-provider-bindings (#270)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-13T07:04:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "968c358b2c82f2ff5aa4cdb18b12fe9467129d6f",
          "body": "Move SpecLedger specs, .agents commands/skills, .specledger steering, RFCs and planning docs to open-constructs/cdktn-planning. Drop the SpecLedger CLI from mise.toml (now provided locally via mise.local.toml).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: migrate planning artifacts to cdktn-planning [skip ci]",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-13T05:48:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "821e1cffcc1fa3973267a20b7af73197b7a3190b",
          "body": "## Summary\n- Supersedes #262 by carrying forward the existing X-Guardian\n`generate-function-bindings` fix history and adding a minimal follow-up\nfix.\n- Preserves the original X-Guardian contribution commits in this branch\nhistory for author attribution, including `3e3741298 chore: fix\ngenerate-funct\n[…]\ndes #262.\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>\nCo-authored-by: Simon Heather <32168619+X-Guardian@users.noreply.github.com>\nCo-authored-by: so0k <vincent.drl@gmail.com>",
          "is_bot": false,
          "headline": "fix(tools): repair generate-function-bindings tool (#273)",
          "author_name": "sakul-learning",
          "author_login": "sakul-learning",
          "committed_at": "2026-06-13T03:48:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aded64b0e28e1056bf8b9b818a0daa728be1cb94",
          "body": null,
          "is_bot": false,
          "headline": "chore: Fix Verdaccio logging config (#272)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-13T00:26:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f19d34b4d64d09571b4789fd4a45b520da2827e2",
          "body": "…b (#261)\n\nRefs #206 (GHCR-for-CI half; OCF Public ECR for the devcontainer is a\nfollow-up).\n\n## Why\n\nDocker Hub's anonymous pull throttling on GitHub's shared runner IP pool\nis causing intermittent container-init failures across CI (see the audit\nin #206). All ~27 `container:` references across 12 \n[…]\nb publishing and the `DOCKERHUB_*` secrets once\nconsumers have moved.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gha): pull jsii-terraform CI image from GHCR instead of Docker Hu…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-11T02:41:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "163cf3df117170c74a01598668b2e56e618a2e19",
          "body": "We currently have `pipx:pipenv` in our mise tools. But that fails to\ninstall unless uv or pipx are already installed. The solution is to add\nuv to our mise tools so that dev environments without any existing\npython tooling can be bootstrapped.\n\n<!--\n\nUnless this is a very simple 1-line-of-code chang\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: add uv to mise (#260)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-06-10T13:36:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "516046999da85ae5b158ba1d23ab1a1c7c81b586",
          "body": "It's now generated by release-please so the formatting checks aren't\nrelevant.\nFixed failed checks on the generated release PRs",
          "is_bot": false,
          "headline": "fix(gha): Adding CHANGELOG.md to prettier ignore list (#258)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-06-10T03:46:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32d434c1f47453f8648b9ea5dfc481e07fce360d",
          "body": "## Summary\n\nIntroduce a Terraform-compatible CLI feature/version validator that can\nbe reused by feature PRs whose support depends on both the selected CLI\nproduct and its version.\n\nThis adds:\n\n- `parseTerraformCliVersion()` to detect Terraform vs OpenTofu from the\nfirst line of plain `version` outp\n[…]\n `yarn lerna run --scope cdktn build`\n- [x] `yarn nx test cdktn --runInBand`\n\n---------\n\nCo-authored-by: Ubuntu <ubuntu@ip-172-31-46-48.ec2.internal>\nCo-authored-by: Jon Steinich <jsteinich@gmail.com>",
          "is_bot": false,
          "headline": "feat(cli): validate Terraform CLI feature versions (#237)",
          "author_name": "sakul-learning",
          "author_login": "sakul-learning",
          "committed_at": "2026-06-10T03:30:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c17677dc27706a626dcf5f88baa2e323787a2cf6",
          "body": "We currently run verdaccio by spawning an `npm run` process. But since\n`local-registry` is a JS file now (#202), we can just call verdaccio's\nJS API directly.\n\nSee\nhttps://github.com/open-constructs/cdk-terrain/pull/202#discussion_r3300645026\n\n<!--\n\nUnless this is a very simple 1-line-of-code change\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(tests): run verdaccio in-process (#248)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-06-10T03:21:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d23da4e11bc93aa387abf35fbba1b628724190f0",
          "body": "### Description\n\nMigrates the monorepo's package manager from Yarn (Classic / v1) to\npnpm. The version is pinned via `package.json#packageManager` and\nactivated through corepack, so there is no separately installed pnpm to\nkeep in sync. No runtime/library behaviour changes — this is build-,\nCI-, and\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Migrate package manager from yarn to pnpm (#170)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-10T01:43:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42c27d5b65c8473236c0cf784668e62a13c0559b",
          "body": "### Description\n\nThe `dependency-pinner` tool is no longer used and should be deleted.\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [ ] I have run the linter on my code loc\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Remove dependency-pinner tool (#250)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-08T14:50:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba408cf1623ed4e5cbd9df3fb4607c7e67754dd8",
          "body": "…terrain (#256)\n\n### Description\n\nCurrently, the scheduled GitHub workflows run on all forked copies of\nthe repo and fail. This PR adds a condition so that they only run on the\n`open-constructs/cdk-terrain` repo.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https:\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Update scheduled workflows to only run on open-constructs/cdk-…",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-08T13:03:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "004818a5ee554f0276ea8f0718ce6ffb0e5037fe",
          "body": "…n (#255)\n\n### Description\n\nFixes the changelog insertion position in release-please's standing\nrelease PR (observed in #254, where `## [0.23.4]` was injected **below**\n`## 0.23.3` instead of at the top).\n\n#### Root cause\n\nrelease-please's changelog updater finds where to insert a new entry\nwith thi\n[…]\nable\n\nhttps://claude.ai/code/session_0168ykjbd1W96iSBoQUEkSLE\n\n---\n_Generated by [Claude\nCode](https://claude.ai/code/session_0168ykjbd1W96iSBoQUEkSLE)_\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(release): add Changelog title for correct release-please insertio…",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-08T13:01:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0a9c9554f3936e95c1291a911d4b1cc59bf66644",
          "body": "… examples (#244)\n\n### Description\n\nThe C#, Java, Java-gradle, and Python `*-documentation` examples are the\ncritical-path tail of the examples CI matrix — they finish at ~25–29 min\nwhile every other example is long done. Almost all of that time is\n`cdktn get` generating provider bindings, and it ru\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(gha): parallelize provider binding generation for documentation…",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-08T01:40:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d89558f568eff134969586a5cd572869d3910955",
          "body": "### Description\n\nChange all `jsii` and `jsii-rosetta` pins from exact versions to\nfloating patch ranges (`~5.9.0`). This matches the same pattern that\n`jsii-rosetta` itself uses internally, ensuring our constraints are\nsatisfied by whatever `5.9.x` patch lands in the dependency tree.\n\nThis avoids ge\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Update JSII version constraint (#245)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-08T01:33:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c759eec921d164ce171878ed50eeaee5b5c59749",
          "body": "### Description\n\nThis PR adds\n[release-please](https://github.com/googleapis/release-please)\nautomation to manage versioning, changelog generation, git tags, and\nGitHub releases from [Conventional\nCommits](https://www.conventionalcommits.org/).\n\nThe setup is **additive** — release-please owns versio\n[…]\nMAINTAINERS_APP_PRIVATE_KEY`\nrepository secrets before this workflow can function. ✅\n\nhttps://claude.ai/code/session_0168ykjbd1W96iSBoQUEkSLE\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): add release-please automation for versioning (#243)",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-06-08T01:28:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "de67d9f3ec59f99d6e736e5c01fe365581a01c79",
          "body": "… 1 directory with 7 updates (#235)\n\nBumps the github-actions-backward-compatible group with 7 updates in the\n/ directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` |\n`6.0.3` |\n|\n[docker/setup-buildx-action](https://github.com/do\n[…]\n3dd1ae542a27a899\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions-backward-compatible group across…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T10:53:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b5ac018a03b6195d12da7631076b41e5b36ebaeb",
          "body": "…480748a1af4 to afb73a62d26e41464e9254689e1fd6122ee683c1 (#236)\n\nBumps [nrwl/nx-set-shas](https://github.com/nrwl/nx-set-shas) from\n38457b511e60ee4e1da09255b658e480748a1af4 to\nafb73a62d26e41464e9254689e1fd6122ee683c1.\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a\nhref=\"https://gi\n[…]\nnless you reopen the\nPR or upgrade to it yourself)\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump nrwl/nx-set-shas from 38457b511e60ee4e1da09255b658e…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T10:52:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c27aa7f3f58213669b85f0e71ae4173d8fe625ef",
          "body": "## 0.23.3\n\n### chore\n\n- chore(gha): run integration tests on Depot runners\n[\\#238](https://github.com/open-constructs/cdk-terrain/pull/238)\n- chore(deps): bump typescript to 5.9.3 across the repo\n[\\#231](https://github.com/open-constructs/cdk-terrain/pull/231)\n- chore: Upgrade jsii\n[\\#223](https://g\n[…]\nc() failures via toString()\n[\\#207](https://github.com/open-constructs/cdk-terrain/pull/207)\n\n---------\n\nCo-authored-by: so0k <vincent.drl@gmail.com>\nCo-authored-by: sakul-learning <lucas@sheesh.host>",
          "is_bot": false,
          "headline": "chore: prepare v0.23.3 release (#240)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-06-05T08:28:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54dcd480d1c54d09f378fadd648af6b429b5f855",
          "body": "## Summary\n\n- Add `max-parallel` to the integration-test matrix jobs that did not\nhave it yet.\n- Leave the existing regular integration-test `max-parallel: 30`\nunchanged.\n- This is intentionally limited to missing matrix throttles; it does not\nchange the existing integration workflow cap pending mai\n[…]\n 10, 'windows_provider': 10}\ninitial_wave_after_change= {'examples': 20, 'linux_integration': 30, 'linux_provider': 10, 'windows_provider': 10} total= 70\n```\n\nAlso ran `git diff --check` successfully.",
          "is_bot": false,
          "headline": "chore(gha): cap missing integration matrix parallelism (#239)",
          "author_name": "sakul-learning",
          "author_login": "sakul-learning",
          "committed_at": "2026-06-05T04:03:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "82c587cb35d25cd1b07c73d5bd7bd41a0c171e50",
          "body": "## Summary\n- remove the failing `Export CI/CD Traces to Scout` workflow and\n`otel-export` job",
          "is_bot": false,
          "headline": "chore(gha): remove Scout trace export workflow (#241)",
          "author_name": "sakul-learning",
          "author_login": "sakul-learning",
          "committed_at": "2026-06-05T04:01:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0af528c41027ba198031bf1f3d7e9b68acb6bb84",
          "body": "Releases broke in #212. The Python release job was trying to use .nvmrc,\nbut we never checked out the repo. The npm release job was failing due\nto https://github.com/actions/runner-images/issues/13883. Upgrading Node\nfixes that.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please creat\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: fix releases (#242)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-06-05T03:02:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f1a6742526811167930cb3eaeddf5ccb51371e6",
          "body": null,
          "is_bot": false,
          "headline": "chore(gha): run integration tests on Depot runners (#238)",
          "author_name": "sakul-learning",
          "author_login": "sakul-learning",
          "committed_at": "2026-06-04T17:04:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb65834d3f70b9925ff42efe44169d05f3ee8d19",
          "body": "### Description\n\nAligns every workspace package and example on TypeScript 5.9.3, and\nfixes the two `WebAssembly.instantiate` call sites (`@cdktn/hcl-tools`\nand `@cdktn/hcl2json`) that fail to compile under newer TS.\n\n#### Why \n\nThe version was drifting. `@cdktn/hcl-tools` declared `^5.7.3` while the\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(deps): bump typescript to 5.9.3 across the repo (#231)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-04T13:25:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a77d3cbfcb5ff8fa781771c126d679f0e4c6ea2",
          "body": "### Description\n\nPin the CI/dev Node.js version to a single source of truth (`.nvmrc`),\nso we stop relying on whatever Node ships in the\n`terraconstructs/jsii-terraform` container or the GitHub-hosted runner\nimage of the week.\n\n**What changed:**\n\n- Added `.nvmrc` containing `22.22.2` (matches the co\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Pin node version to 22.22.2 via .nvmrc (#212)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-06-02T13:35:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42613ceb873ef87b84659c7cef473719ded1284e",
          "body": "We were installing it via npx, which means its dependencies weren't\npinned. In the age of supply chain attacks, that's not great.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead mor\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(tests): add verdaccio to package.json (#202)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-06-02T13:33:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f7d29f3f00e5d92181e7644a2c3135f2f1f31eb",
          "body": "Allow setting `CDKTN_DISABLE_CREATION_STACK` environment variable to\ndisable capturing stack traces when constructing IResolvables.\n\nCapturing stack traces is fairly slow in Node, so disabling them saves a\nlot of time when synthing large stacks.\n\n<!--\n\nUnless this is a very simple 1-line-of-code cha\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "feat(lib): allow disabling creation stacks (#215)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-06-01T13:11:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8c65a093b4d7695223072f89d5b2f825d670b142",
          "body": "Replace `json-stable-stringify` with `safe-stable-stringify`. The latter\nis ~2x faster in benchmarks.\n\nBenchmark (Node 20, realistic TF-JSON payloads):\n| payload                | json-stable | safe-stable | speedup |\n|------------------------|-------------|-------------|---------|\n| 100 resources (1\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "feat: faster JSON stringify (#224)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-30T01:54:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "79958518fe6c88f7a1d9771a1f0f86601e6178f3",
          "body": "The latest version of jsii adds provenance back to their releases.\nPinning to an older version breaks installs for any client that expects\nthe provenance to be present.\n\nSee https://github.com/aws/jsii-compiler/issues/2651\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a ne\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: Upgrade jsii (#223)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-28T15:54:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f238e3346b1c121556941c3956da0de5b72eb79",
          "body": "Updated README to reflect new language support and migration guides.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [ ] I have run the linter on my code locally\n- [x] I have \n[…]\n- [x] My changes generate no new warnings\n- [] ~I have added tests that prove my fix is effective or that my\nfeature works if applicable~\n- [x] New and existing unit tests pass locally with my changes",
          "is_bot": false,
          "headline": "chore: Revise README links to documentation and language support (#221)",
          "author_name": "so0k",
          "author_login": "so0k",
          "committed_at": "2026-05-28T11:32:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "de77d18cbac0a159a7145bbd8fe4d3bc10be3567",
          "body": null,
          "is_bot": false,
          "headline": "chore: rewrite https://cdk.tf links (#197)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-28T01:51:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "178ea7fce602f66bdc94fb90221b7ff9a8ec55da",
          "body": "### Description\n\nUpdated the example `help` files to match the current `cdktn init`\ntemplates. This removes some of the diff from #170 (yarn references)\n\nAlso:\n- Updated the nuget link to\nhttps://www.nuget.org/packages?q=Io.Cdktn.Providers and on the template\n- Updated the Maven link to https://mvnr\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Update examples help files (#194)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-27T13:58:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8c3b75737d15dd06c1213218e060746baa0120f8",
          "body": "Verdaccio was introduced in 548aa63 so that tests could install the CLI\nfrom an npm registry, similar to how real users install it.\nUnfortunately, we didn't always kill it after we were done.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change y\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(tests): Ensure we terminate Verdaccio (#199)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-26T17:13:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f312c9bcac8a4c6781d92c8b65c668b6174cd923",
          "body": "…(#211)\n\n### Description\n\nThe CI is intermittently failing with 502 errors downloading Gradle for\nthe Java tests. Example:\nhttps://github.com/open-constructs/cdk-terrain/actions/runs/26368817116/job/77619233680#step:12:1157.\n\nTo reduce the occurrences of this, this PR adds gradle caching to the\nexam\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Add gradle cache to the examples and integration CI workflows …",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-26T17:12:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bf9902ec6cfad8a3d178b58c62b331aa953b68d",
          "body": "### Description\n\nCurrently, if a label is added to a PR, i.e. `ci/skip-unit`,\n`ci/skip-examples` etc, the GitHub Actions check run will re-trigger,\nbut the current run will not be cancelled.\n\n### Fix\n\n- Adds a top-level `concurrency` block to `pr.yml` so adding or removing\na `ci/*` label on a PR can\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Add PR workflow concurrency group and CI Label Filter job (#204)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-26T17:12:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8e907fb7bf5cfae7b098f1dfcb021bef971ab63",
          "body": "### Description\n\n`exec()` and `shell()` in `@cdktn/commons` already attach `.stderr` to a\nthrown Error on non-zero exit, but the message was a generic `non-zero\nexit code N` and the captured output was hard to surface at call sites.\nThis PR makes process failures self-describing without changing the\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "fix(lib): surface stderr/stdout on exec() failures via toString() (#207)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-26T17:12:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ddadf889d0c6530a2e85567a2761368b90a7b055",
          "body": "Allow running Typescript integration tests without having to build Java,\nPython, Go, and .NET packages.\n\nFixes #200\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our pr\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(tests): don't require other language builds (#201)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-26T17:12:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3937e625993b9eaa1459a007c5fb3e4c8864200",
          "body": "## 0.23.2\n\n### chore\n- chore: Update npm version to support OIDC trusted publishing\n[\\#205](https://github.com/open-constructs/cdk-terrain/pull/205)\n- chore: Fix publib running to use npx rather than yarn\n[\\#203](https://github.com/open-constructs/cdk-terrain/pull/203)\n- chore(tests): Add test for N\n[…]\n\n[\\#177](https://github.com/open-constructs/cdk-terrain/pull/177)\n\n### feat\n\n- feat(provider-generator): configurable import extensions\n[\\#151](https://github.com/open-constructs/cdk-terrain/pull/151)",
          "is_bot": false,
          "headline": "chore: prepare v0.23.2 release (#213)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-26T02:03:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4e35845f1e0efcf64c88fde335ac17e2227a1e2",
          "body": "Add a test that runs synth in Node without ts-node or any other\ntranspilation. This exercises both\nhttps://nodejs.org/api/typescript.html#type-stripping and ESM support.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first,\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(tests): Add test for Node type stripping (#198)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-25T03:24:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "58e3a11f8d82f3b7673f7af4c9be652f4ef3cbdc",
          "body": "### Description\n\nThe current version of npm that is bundled with Node version 22.22.0\nthat is included in the `terraconstructs/jsii-terraform` image does not\nsupport OIDC trusted publishing. We need to update the npm version in\nthe `release-npm` workflow job to version 11.5.0+.\n\n### References\n\n- ht\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Update npm version to support OIDC trusted publishing (#205)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-24T12:13:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4dbd3010b06a843b9345d6fd29d06c21c270391b",
          "body": "### Description\n\nThe `yarn publib-npm` command is failing with:\n\n```\nnpm error need auth This command requires you to be logged in to https://registry.yarnpkg.com\n```\n\nThis is because when `npm publish` runs inside `yarn run`, `yarn` sets\n`npm_config_registry=https://registry.yarnpkg.com` in the env\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Fix publib running to use npx rather than yarn (#203)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-24T09:36:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "78652380ca9e7fd44778306767d1b9abe6ed649b",
          "body": "### Description\n\nThe previous setup had the jest configuration duplicated across every\npackage, with `ts-jest` doing TypeScript transforms on every test run\nand `lerna run` orchestrating package-level scripts that didn't\nunderstand the dependency graph. That meant slow tests, repeated\nboilerplate wh\n[…]\nen a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>\nCo-authored-by: Jon Steinich <jsteinich@gmail.com>",
          "is_bot": false,
          "headline": "chore: migrate jest to @nx/jest plugin with swc-jest (#160)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-24T00:47:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9355bf54097825c70f47a4903eedd1388f6c1cf1",
          "body": "### Description\n\nRemove mention of Enterprise Hashicorp support.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [x] I have run the linter on my code locally\n- [x] I have perf\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: remove mention of Hashicorp support (#193)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-23T15:57:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fcf739255377150977ba72c99c28de25c993fe61",
          "body": "<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md\n\n-->\n\n### R\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix(cli): Fix input getting split between cdktn and Terraform (#191)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-23T15:57:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bf7afd97e48e584a9e3cc89158e5e7ebdbff3eea",
          "body": "### Description\n\nNew release workflow failing as the permissions for id-token also need\nto exist on the calling job.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [x] I have\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix(gha): Need to grant permission on workflow call job (#196)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-23T14:59:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c9cb9764adcfd743f824bf66b60b358b1fad99d",
          "body": "### Description\n\nEnables NPM OIDC publishing (already configured) so that we no longer\nneed to use a token.\n\nAlso fixes an issue introduced in #192 by making the edge provider\nbinding artifact name configurable.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https:/\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore(gha): Enable NPM OIDC Publishing (#195)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-23T14:12:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c5855e688f0ad04ec697abef3455d4758393910",
          "body": "### Description\n\nWe can't use npm OIDC trusted publishing today because the same packages\npublish from two different workflow files, and npm's trusted-publisher\nconfig matches on a single workflow filename. Consolidating into one\nfile unblocks OIDC and removes `NPM_TOKEN` from the loop.\n\n## Summary\n\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: consolidate release workflows for npm OIDC (#192)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-23T12:16:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "18311a2e4b301fdb734c3269c92f557cc27cc7fd",
          "body": "### Description\n\nhttps://github.com/open-constructs/cdk-terrain/pull/158 introduced a bug\nas not all dependencies are bundled. See:\nhttps://github.com/open-constructs/cdk-terrain/blob/c86b27a58bbbf790a43c87067fa79638d2f01bd7/packages/cdktn-cli/build.ts#L65-L74\n\nThis manifests when not installing the\n[…]\n able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <32168619+X-Guardian@users.noreply.github.com>\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "fix(cli): restore non-bundled dependencies (#190)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-21T17:49:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0fec49804d9d81fdabc4eb364ab789f70dc7224b",
          "body": "### Description\n\nCurrent release@next and release workflows are failing due to not\nfinding the `dist` artifact.\nAn example error:\n```Unable to download artifact(s): Artifact not found for name: dist-integration``` from https://github.com/open-constructs/cdk-terrain/actions/runs/26048945491/job/76581\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR until you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix: Configurable dist artifact name to fix release workflows (#189)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-20T09:58:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c86b27a58bbbf790a43c87067fa79638d2f01bd7",
          "body": "### Description\n\n## Summary\n\nMigrates the `cdktn` package to the standard `src/` (sources) + `lib/`\n(build output) layout used by every other workspace package. Sources and\ncompile output were previously co-located in `lib/`, which caused stale\n`.js`/`.d.ts` artifacts to confuse knip after every loc\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(lib): Move cdktn package to src/ and lib/ layout (#145)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-19T19:23:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da67ea9e4395813cade9cd5316deaa0cfb2f963b",
          "body": "### Description\n\n`pip install -r requirements.txt` in the `provider-add` and\n`provider-upgrade` Python integration tests has been flaking with\n`AssertionError: assert os.path.exists(pyc_path)` from pip's wheel\ninstaller, mid-install of the JSII-generated `cdktn` /\n`cdktn-provider-local` wheels.\nThe \n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "fix(tests): pass --no-compile to pip in python integration tests (#188)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-18T17:18:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3dd711270eba35efdceda73f2b1190d64978194c",
          "body": "…(#178)\n\n### Description\n\nFollow-on to `chore(gha): optimise examples CI pipeline` (fabb452ff).\nApplies the same patterns to `integration.yml` and\n`provider-integration.yml`, plus a couple of waste-reduction wins\nspecific to those workflows.\n\n**Integration tests (`integration.yml`)**\n\n- Matrix shape\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(gha): optimise integration & provider-integration CI pipelines …",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-18T14:13:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "044e68090d12ddc8854e9f65809361e5e28d6966",
          "body": "We added this as an option in #151 but neglected to pass it through\neverywhere in the CLI. The result is that `cdktn get` was not respecting\n`languageOptions.importExtension`.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing \n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix(cli): pass languageOptions to `get` (#179)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-18T14:12:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "772fbdc9eb9da5c54ce285be5c4fb67369735a8c",
          "body": "Fixes #182\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: fix references to cdktf in TS examples (#183)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-18T14:04:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10cbb628d15d7b96a3b58b9e3fd69706a1e63e3f",
          "body": "### Description\n\nThe `examples.yml` workflow runs 98 matrix jobs (49 examples × 2\nhclOutput values) and each one was independently doing `yarn install &&\nyarn build && yarn package` — identical, deterministic work duplicated\n98×.\n\nThis PR restructures the workflow so the heavy build happens once in \n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore(gha): optimise examples CI pipeline (#175)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-18T00:43:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4aff6cafa9d7bef1108b49cd6c23cedf4d8b506e",
          "body": "https://github.com/open-constructs/cdk-terrain-docs is where the\ndocumentation lives now.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing \n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: point to correct docs repo (#181)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-17T14:49:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0e6d754d69095d791904d120149e1a719fe3dd9e",
          "body": "Don't use the cdktf keyword when searching npm. Use cdktn instead.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.c\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: tell users to search for cdktn on npm (#185)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-17T13:20:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "24eb9bb93cfbdc7ef0bf2b22e3e884b850e37c75",
          "body": "`https://cdk.tf/modules-and-providers` ->\n`https://cdktn.io/docs/concepts/providers`.\n\nSee #27\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contribu\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: replace cdk.tf/modules-and-providers links (#184)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-17T13:20:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be10ddfbe0bdfbbe8fac7f47054d7d557a9d4e1e",
          "body": "This is presumably not that useful to us since we don't have any\nownership over the cdk.tf domain or the Vercel site behind it.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more \n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "chore: delete Vercel config for cdk.tf site (#180)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-17T13:20:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c2f1d870e27be68faa03e8656d131ad1b621254",
          "body": "Semicolons aren't always necessary in JS/TS, but we do tend to emit them\nmost of the time. For consistency, we should always emit them.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRe\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "fix(provider-generator): add missing semicolons (#177)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-17T12:58:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a384a73af488cec04b17e96ef5782e58a2fd2951",
          "body": "### Description\n\nConsolidates per-test-suite PR workflows into a single `pr.yml`\norchestrator with tiered fail-fast gating, so quality and build failures\nstop heavy test runs from kicking off. Also folds in `dep-check` and\nrenames lint to a broader `quality` workflow.\n\n## Pipeline shape\n\n```\nquality\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: Consolidate PR CI into tiered orchestrator workflow (#143)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-16T16:15:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c921e4b15974b8e1bd8fa7d216166a09c8845ae4",
          "body": "### Description\n\nThe `archiveSync` function in `packages/cdktn/lib/private/fs.ts` runs\nfrom `TerraformAsset._onSynthesize`, which executes inside the\nsynchronous constructs synth lifecycle, so it has to block until the zip\nis on disk. yazl only exposes a streaming API, so the previous\nimplementation\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
          "is_bot": false,
          "headline": "chore: replace yazl with fflate (#148)",
          "author_name": "Simon Heather",
          "author_login": "X-Guardian",
          "committed_at": "2026-05-16T16:01:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "324a264c1962d0af20d7dcec4ce377878ad1d320",
          "body": "Currently, code generated by cdktn uses CommonJS for import semantics.\nNo file extensions are emitted, and the `/index` path is omitted. This\nis problematic as the JS/TS community has largely moved to ESM.\n\nFor consumers that want ESM, we add a setting that allows customizing\nthe extension for emitt\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
          "is_bot": false,
          "headline": "feat(provider-generator): configurable import extensions (#151)",
          "author_name": "Gabe Gorelick",
          "author_login": "gabegorelick",
          "committed_at": "2026-05-16T16:00:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a146856a8a3d36d05f557a39ba8b9c4a4ae8f4be",
          "body": "## 0.23.1\n\n### fix\n- fix(cli): forward stderr output in spawnInteractive\n[\\#173](https://github.com/open-constructs/cdk-terrain/pull/173)\n- fix(provider-generator): Fix code generation failures caused by case\ninsensitive name collisions\n[\\#165](https://github.com/open-constructs/cdk-terrain/pull/165\n[…]\ndate knip config\n[\\#144](https://github.com/open-constructs/cdk-terrain/pull/144)\n- chore: Refine provider-integration GitHub workflows\n[\\#142](https://github.com/open-constructs/cdk-terrain/pull/142)",
          "is_bot": false,
          "headline": "chore: prepare v0.23.1 release (#176)",
          "author_name": "Jon Steinich",
          "author_login": "jsteinich",
          "committed_at": "2026-05-16T01:46:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 7,
      "commits_last_year": 212,
      "latest_release_at": "2026-07-03T00:40:12Z",
      "latest_release_tag": "v0.23.4",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 29,
      "days_since_latest_release": 20,
      "mean_days_between_releases": 22.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "cdktn",
          "exists": true,
          "license": "MPL-2.0",
          "keywords": [
            "cdk",
            "cdktf",
            "cdktn",
            "terraform"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/cdktn",
          "is_deprecated": false,
          "latest_version": "0.23.4",
          "repository_url": "https://github.com/open-constructs/cdk-terrain",
          "versions_count": 103,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 98127,
          "first_published_at": "2025-12-27T11:56:28.480000Z",
          "latest_published_at": "2026-07-03T00:42:42.231000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 20
        },
        {
          "name": "cdktn-cli",
          "exists": true,
          "license": "MPL-2.0",
          "keywords": [
            "cdk",
            "cdktf",
            "cdktn",
            "terraform"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/cdktn-cli",
          "is_deprecated": false,
          "latest_version": "0.23.4",
          "repository_url": "https://github.com/open-constructs/cdk-terrain",
          "versions_count": 103,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 74896,
          "first_published_at": "2025-12-27T12:07:25.621000Z",
          "latest_published_at": "2026-07-03T00:41:53.642000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 20
        }
      ]
    },
    "popularity": {
      "forks": 23,
      "stars": 234,
      "watchers": 6,
      "fork_history": {
        "days": [
          {
            "date": "2026-01-13",
            "count": 1
          },
          {
            "date": "2026-01-14",
            "count": 1
          },
          {
            "date": "2026-01-22",
            "count": 1
          },
          {
            "date": "2026-02-02",
            "count": 1
          },
          {
            "date": "2026-02-13",
            "count": 1
          },
          {
            "date": "2026-02-18",
            "count": 1
          },
          {
            "date": "2026-02-23",
            "count": 1
          },
          {
            "date": "2026-03-18",
            "count": 1
          },
          {
            "date": "2026-03-20",
            "count": 1
          },
          {
            "date": "2026-04-05",
            "count": 1
          },
          {
            "date": "2026-04-09",
            "count": 1
          },
          {
            "date": "2026-04-17",
            "count": 1
          },
          {
            "date": "2026-04-21",
            "count": 1
          },
          {
            "date": "2026-04-24",
            "count": 1
          },
          {
            "date": "2026-04-30",
            "count": 1
          },
          {
            "date": "2026-05-13",
            "count": 1
          },
          {
            "date": "2026-05-27",
            "count": 1
          },
          {
            "date": "2026-06-03",
            "count": 1
          },
          {
            "date": "2026-06-04",
            "count": 1
          },
          {
            "date": "2026-06-19",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          },
          {
            "date": "2026-07-11",
            "count": 1
          },
          {
            "date": "2026-07-15",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 23,
        "total_forks": 23
      },
      "star_history": null,
      "open_issues_and_prs": 79
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "example",
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "mise.toml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "examples/typescript/aws-cloudfront-proxy/tsconfig.json",
        "examples/typescript/aws-import/tsconfig.json",
        "examples/typescript/aws-kubernetes/tsconfig.json",
        "examples/typescript/aws-move/tsconfig.json",
        "examples/typescript/aws-multiple-stacks/tsconfig.json",
        "examples/typescript/aws-prebuilt/tsconfig.json",
        "examples/typescript/azure-app-service/tsconfig.json",
        "examples/typescript/azure-service-bus-queue-trigger/tsconfig.json",
        "examples/typescript/azure/tsconfig.json",
        "examples/typescript/backends/azurerm/tsconfig.json",
        "examples/typescript/backends/cloud/tsconfig.json",
        "examples/typescript/backends/gcs/tsconfig.json",
        "examples/typescript/backends/remote/tsconfig.json",
        "examples/typescript/backends/s3/tsconfig.json",
        "examples/typescript/docker/tsconfig.json",
        "examples/typescript/documentation/tsconfig.json",
        "examples/typescript/google-cloudrun/tsconfig.json",
        "examples/typescript/google/tsconfig.json",
        "examples/typescript/kubernetes/tsconfig.json",
        "examples/typescript/provisioner/tsconfig.json",
        "examples/typescript/ucloud/tsconfig.json",
        "examples/typescript/vault/tsconfig.json",
        "packages/@cdktn/cli-core/templates/typescript/tsconfig.json",
        "packages/@cdktn/cli-core/tsconfig.json",
        "packages/@cdktn/commons/tsconfig.json",
        "packages/@cdktn/hcl-tools/tsconfig.json",
        "packages/@cdktn/hcl2cdk/tsconfig.json",
        "packages/@cdktn/hcl2json/tsconfig.json",
        "packages/@cdktn/provider-generator/tsconfig.json",
        "packages/@cdktn/provider-schema/tsconfig.json",
        "packages/cdktn-cli/tsconfig.json",
        "test/tsconfig.json",
        "tools/generate-function-bindings/tsconfig.json"
      ],
      "toolchain_manifests": [
        "examples/csharp/aws/MyTerraformStack.csproj",
        "examples/csharp/azure/MyTerraformStack.csproj",
        "examples/csharp/documentation/MyTerraformStack.csproj",
        "examples/csharp/google/MyTerraformStack.csproj",
        "examples/csharp/ucloud/MyTerraformStack.csproj",
        "examples/go/aws/go.mod",
        "examples/go/azure/go.mod",
        "examples/go/docker/go.mod",
        "examples/go/documentation/go.mod",
        "examples/go/google-cloudrun/go.mod",
        "examples/go/google/go.mod",
        "examples/go/scaleway/go.mod",
        "examples/go/ucloud/go.mod",
        "examples/java/aws-gradle/build.gradle",
        "examples/java/aws/pom.xml",
        "examples/java/azure-gradle/build.gradle",
        "examples/java/azure/pom.xml",
        "examples/java/documentation-gradle/build.gradle",
        "examples/java/documentation/pom.xml",
        "examples/java/google-gradle/build.gradle",
        "examples/java/google/pom.xml",
        "examples/java/gradle-shared-module/build.gradle",
        "examples/java/gradle-shared-module/common/build.gradle",
        "examples/java/gradle-shared-module/module-a/build.gradle",
        "examples/java/gradle-shared-module/module-b/build.gradle",
        "examples/java/kubernetes-gradle/build.gradle",
        "examples/java/kubernetes/pom.xml",
        "examples/java/ucloud-gradle/build.gradle",
        "examples/java/ucloud/pom.xml",
        "packages/@cdktn/cli-core/templates/csharp/MyTerraformStack.csproj",
        "packages/@cdktn/cli-core/templates/go/go.mod",
        "packages/@cdktn/cli-core/templates/java/build.gradle",
        "packages/@cdktn/hcl-tools/go.mod",
        "packages/@cdktn/hcl2json/go.mod"
      ],
      "largest_source_bytes": 47439,
      "source_files_sampled": 897,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 6104
    },
    "dependencies": {
      "manifests": [
        "package.json",
        "test/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 3,
        "malicious_count": 0,
        "assessed_package": "npm:cdktn@0.23.4",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@types/node",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "22.20.1"
        },
        {
          "name": "@cdktn/hcl-tools",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@cdktn/hcl2cdk",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@cdktn/hcl2json",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inquirer/prompts",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "6.0.0"
        },
        {
          "name": "ansi-escapes",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "4.3.2"
        },
        {
          "name": "cli-cursor",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "3.1.0"
        },
        {
          "name": "cli-spinners",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "2.9.2"
        },
        {
          "name": "cli-table3",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.6.5"
        },
        {
          "name": "constructs",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "10.6.0"
        },
        {
          "name": "is-ci",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.1.0"
        },
        {
          "name": "punycode",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "2.3.1"
        },
        {
          "name": "yargs",
          "manifest": "packages/cdktn-cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "17.7.2"
        },
        {
          "name": "fflate",
          "manifest": "packages/cdktn/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.8.2"
        },
        {
          "name": "safe-stable-stringify",
          "manifest": "packages/cdktn/package.json",
          "ecosystem": "npm",
          "version_constraint": "2.5.0"
        },
        {
          "name": "semver",
          "manifest": "packages/cdktn/package.json",
          "ecosystem": "npm",
          "version_constraint": "7.7.4"
        },
        {
          "name": "cdktn",
          "manifest": "tools/documentation-generation/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@babel/parser",
          "manifest": "tools/generate-function-bindings/package.json",
          "ecosystem": "npm",
          "version_constraint": "7.27.2"
        },
        {
          "name": "@cdktn/commons",
          "manifest": "tools/generate-function-bindings/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 21,
        "merged_prs": 191,
        "open_issues": 58,
        "closed_ratio": 0.463,
        "closed_issues": 50,
        "closed_unmerged_prs": 33
      },
      "bus_factor": 2,
      "bot_contributors": 5,
      "top_contributors": [
        {
          "type": "User",
          "login": "DanielMSchmidt",
          "commits": 2336,
          "avatar_url": "https://avatars.githubusercontent.com/u/1337046?v=4"
        },
        {
          "type": "User",
          "login": "ansgarm",
          "commits": 1423,
          "avatar_url": "https://avatars.githubusercontent.com/u/1112056?v=4"
        },
        {
          "type": "User",
          "login": "skorfmann",
          "commits": 1005,
          "avatar_url": "https://avatars.githubusercontent.com/u/136789?v=4"
        },
        {
          "type": "User",
          "login": "mutahhir",
          "commits": 749,
          "avatar_url": "https://avatars.githubusercontent.com/u/573531?v=4"
        },
        {
          "type": "User",
          "login": "jsteinich",
          "commits": 494,
          "avatar_url": "https://avatars.githubusercontent.com/u/3868754?v=4"
        },
        {
          "type": "User",
          "login": "Maed223",
          "commits": 219,
          "avatar_url": "https://avatars.githubusercontent.com/u/72527044?v=4"
        },
        {
          "type": "User",
          "login": "laurapacilio",
          "commits": 199,
          "avatar_url": "https://avatars.githubusercontent.com/u/83350965?v=4"
        },
        {
          "type": "User",
          "login": "schersh",
          "commits": 85,
          "avatar_url": "https://avatars.githubusercontent.com/u/13408456?v=4"
        },
        {
          "type": "User",
          "login": "X-Guardian",
          "commits": 77,
          "avatar_url": "https://avatars.githubusercontent.com/u/32168619?v=4"
        },
        {
          "type": "User",
          "login": "so0k",
          "commits": 49,
          "avatar_url": "https://avatars.githubusercontent.com/u/1762599?v=4"
        }
      ],
      "contributors_sampled": 95,
      "top_contributor_share": 0.331
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yml",
        "cdktn-provider-docs-rollout.yml",
        "docker.yml",
        "examples.yml",
        "integration.yml",
        "lock.yml",
        "pnpm-upgrade.yml",
        "pr-copyright.yml",
        "pr-lint.yml",
        "pr-unit.yml",
        "pr.yml",
        "provider-integration.yml",
        "quality.yml",
        "registry-docs-pr-based.yml",
        "release-please.yml",
        "release-publish.yml",
        "release.yml",
        "remove-waiting-on-answer.yml",
        "stale.yml",
        "unit.yml",
        "update-project-board-issue.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Pipfile.lock",
        "go.sum",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 3,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 19 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 3,
            "reason": "SAST tool is not run on all commits -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "42 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "90322f97388207362ad6a0a19a312353df213a73",
        "ran_at": "2026-07-23T04:45:08Z",
        "aggregate_score": 4.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T04:24:48Z",
      "oldest_open_prs": [
        {
          "number": 62,
          "created_at": "2026-03-20T09:18:38Z",
          "last_comment_at": "2026-07-09T05:59:34Z",
          "last_comment_author": "so0k"
        },
        {
          "number": 153,
          "created_at": "2026-05-04T03:17:07Z",
          "last_comment_at": "2026-07-03T06:04:48Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 219,
          "created_at": "2026-05-28T01:08:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 227,
          "created_at": "2026-05-31T16:57:42Z",
          "last_comment_at": "2026-06-02T19:57:51Z",
          "last_comment_author": "gabegorelick"
        },
        {
          "number": 228,
          "created_at": "2026-05-31T23:09:44Z",
          "last_comment_at": "2026-07-03T06:29:28Z",
          "last_comment_author": "sakul-learning"
        },
        {
          "number": 229,
          "created_at": "2026-06-01T02:34:11Z",
          "last_comment_at": "2026-06-14T02:21:37Z",
          "last_comment_author": "so0k"
        },
        {
          "number": 230,
          "created_at": "2026-06-01T14:03:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 249,
          "created_at": "2026-06-07T05:25:33Z",
          "last_comment_at": "2026-06-07T06:12:46Z",
          "last_comment_author": "sakul-learning"
        },
        {
          "number": 251,
          "created_at": "2026-06-07T19:51:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 252,
          "created_at": "2026-06-07T20:19:55Z",
          "last_comment_at": "2026-06-08T00:14:08Z",
          "last_comment_author": "sakul-learning"
        },
        {
          "number": 253,
          "created_at": "2026-06-07T20:48:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 303,
          "created_at": "2026-07-04T09:28:22Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 326,
          "created_at": "2026-07-13T07:33:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 327,
          "created_at": "2026-07-13T07:33:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 333,
          "created_at": "2026-07-13T15:42:08Z",
          "last_comment_at": "2026-07-18T06:31:45Z",
          "last_comment_author": "sakul-learning"
        },
        {
          "number": 338,
          "created_at": "2026-07-18T22:26:55Z",
          "last_comment_at": "2026-07-19T00:25:53Z",
          "last_comment_author": "jsteinich"
        },
        {
          "number": 339,
          "created_at": "2026-07-19T03:15:10Z",
          "last_comment_at": "2026-07-20T01:08:34Z",
          "last_comment_author": "eduardomourar"
        },
        {
          "number": 346,
          "created_at": "2026-07-20T07:23:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 347,
          "created_at": "2026-07-20T07:23:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 348,
          "created_at": "2026-07-20T07:23:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T04:19:12Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 9,
          "created_at": "2026-01-24T16:18:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 28,
          "created_at": "2026-02-05T03:42:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 31,
          "created_at": "2026-02-12T20:18:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 33,
          "created_at": "2026-02-15T11:16:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 48,
          "created_at": "2026-02-26T08:37:25Z",
          "last_comment_at": "2026-03-01T10:29:23Z",
          "last_comment_author": "krzema12"
        },
        {
          "number": 56,
          "created_at": "2026-03-15T18:29:36Z",
          "last_comment_at": "2026-06-10T08:14:11Z",
          "last_comment_author": "so0k"
        },
        {
          "number": 58,
          "created_at": "2026-03-16T20:06:30Z",
          "last_comment_at": "2026-06-30T17:52:37Z",
          "last_comment_author": "vincenthsh"
        },
        {
          "number": 66,
          "created_at": "2026-03-23T02:25:30Z",
          "last_comment_at": "2026-06-10T08:15:25Z",
          "last_comment_author": "so0k"
        },
        {
          "number": 72,
          "created_at": "2026-03-24T00:16:16Z",
          "last_comment_at": "2026-04-04T14:38:36Z",
          "last_comment_author": "jsteinich"
        },
        {
          "number": 78,
          "created_at": "2026-03-28T17:13:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 79,
          "created_at": "2026-03-30T04:07:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 85,
          "created_at": "2026-04-01T16:39:34Z",
          "last_comment_at": "2026-06-08T17:50:16Z",
          "last_comment_author": "gabegorelick"
        },
        {
          "number": 92,
          "created_at": "2026-04-07T10:11:57Z",
          "last_comment_at": "2026-06-10T12:42:43Z",
          "last_comment_author": "egonbraun"
        },
        {
          "number": 96,
          "created_at": "2026-04-10T19:56:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 106,
          "created_at": "2026-04-14T02:19:17Z",
          "last_comment_at": "2026-04-25T05:50:25Z",
          "last_comment_author": "commiterate"
        },
        {
          "number": 136,
          "created_at": "2026-05-01T00:27:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 152,
          "created_at": "2026-05-04T03:15:36Z",
          "last_comment_at": "2026-05-04T14:30:41Z",
          "last_comment_author": "gabegorelick"
        },
        {
          "number": 168,
          "created_at": "2026-05-08T14:53:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 206,
          "created_at": "2026-05-24T11:56:13Z",
          "last_comment_at": "2026-06-10T08:25:31Z",
          "last_comment_author": "so0k"
        },
        {
          "number": 208,
          "created_at": "2026-05-25T03:21:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/open-constructs/cdk-terrain",
    "host": "github.com",
    "name": "cdk-terrain",
    "owner": "open-constructs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 77,
      "inputs": {
        "security": 58,
        "vitality": 90,
        "community": 76,
        "governance": 70,
        "engineering": 86
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 90,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "commits_last_year": 212,
              "human_commit_share": 0.96,
              "days_since_last_push": 0,
              "active_weeks_last_year": 29
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "29/52 weeks with commits",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 29
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "212 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 212
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 7,
              "latest_release_tag": "v0.23.4",
              "releases_from_tags": false,
              "days_since_latest_release": 20,
              "mean_days_between_releases": 22.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "7 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 20 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 20
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~22.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 22.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 76,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "forks": 23,
              "stars": 234,
              "watchers": 6,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "234 stars",
                "points": 38.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 234
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "23 forks",
                "points": 11.2,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 23
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "6 watchers",
                "points": 3.9,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MPL-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MPL-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 87,
            "inputs": {
              "packages": [
                "cdktn",
                "cdktn-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 173023
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "173,023 downloads/month across npm",
                "points": 69.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 173023,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 70,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 95,
              "top_contributor_share": 0.331
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 33% of commits",
                "points": 15.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 33
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "95 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 95
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 19 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "merged_prs": 191,
              "open_issues": 58,
              "closed_issues": 50,
              "issue_closed_ratio": 0.463,
              "closed_unmerged_prs": 33
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "46% of issues closed",
                "points": 21.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 46
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "191/224 decided PRs merged",
                "points": 32.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 191,
                      "decided": 224
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "followers": 55,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "open-constructs",
              "public_repos": 12,
              "account_age_days": 925
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "55 followers of open-constructs",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 55,
                      "login": "open-constructs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~2 yr old",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "cdktn",
                "cdktn-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 20
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "2 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 2,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 20 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 20
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "103 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 103
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 86,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "21 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "cdk",
                "cdktf",
                "infrastructure-as-code",
                "terraform",
                "opentofu",
                "terraform-cdk",
                "cdk-terrain",
                "cdktn"
              ],
              "has_wiki": false,
              "homepage": "http://cdktn.io",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://cdktn.io",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 58,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 19 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "42 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:cdktn@0.23.4 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:cdktn@0.23.4",
                  "assessed": 3
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 3,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 3,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 12
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 86,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 6104
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "96 of 96 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 96,
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Pipfile.lock",
                "go.sum",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "mise.toml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "examples/typescript/aws-cloudfront-proxy/tsconfig.json",
                "examples/typescript/aws-import/tsconfig.json",
                "examples/typescript/aws-kubernetes/tsconfig.json",
                "examples/typescript/aws-move/tsconfig.json",
                "examples/typescript/aws-multiple-stacks/tsconfig.json",
                "examples/typescript/aws-prebuilt/tsconfig.json",
                "examples/typescript/azure-app-service/tsconfig.json",
                "examples/typescript/azure-service-bus-queue-trigger/tsconfig.json",
                "examples/typescript/azure/tsconfig.json",
                "examples/typescript/backends/azurerm/tsconfig.json",
                "examples/typescript/backends/cloud/tsconfig.json",
                "examples/typescript/backends/gcs/tsconfig.json",
                "examples/typescript/backends/remote/tsconfig.json",
                "examples/typescript/backends/s3/tsconfig.json",
                "examples/typescript/docker/tsconfig.json",
                "examples/typescript/documentation/tsconfig.json",
                "examples/typescript/google-cloudrun/tsconfig.json",
                "examples/typescript/google/tsconfig.json",
                "examples/typescript/kubernetes/tsconfig.json",
                "examples/typescript/provisioner/tsconfig.json",
                "examples/typescript/ucloud/tsconfig.json",
                "examples/typescript/vault/tsconfig.json",
                "packages/@cdktn/cli-core/templates/typescript/tsconfig.json",
                "packages/@cdktn/cli-core/tsconfig.json",
                "packages/@cdktn/commons/tsconfig.json",
                "packages/@cdktn/hcl-tools/tsconfig.json",
                "packages/@cdktn/hcl2cdk/tsconfig.json",
                "packages/@cdktn/hcl2json/tsconfig.json",
                "packages/@cdktn/provider-generator/tsconfig.json",
                "packages/@cdktn/provider-schema/tsconfig.json",
                "packages/cdktn-cli/tsconfig.json",
                "test/tsconfig.json",
                "tools/generate-function-bindings/tsconfig.json"
              ],
              "agent_commit_share": 0.14,
              "toolchain_manifests": [
                "examples/csharp/aws/MyTerraformStack.csproj",
                "examples/csharp/azure/MyTerraformStack.csproj",
                "examples/csharp/documentation/MyTerraformStack.csproj",
                "examples/csharp/google/MyTerraformStack.csproj",
                "examples/csharp/ucloud/MyTerraformStack.csproj",
                "examples/go/aws/go.mod",
                "examples/go/azure/go.mod",
                "examples/go/docker/go.mod",
                "examples/go/documentation/go.mod",
                "examples/go/google-cloudrun/go.mod",
                "examples/go/google/go.mod",
                "examples/go/scaleway/go.mod",
                "examples/go/ucloud/go.mod",
                "examples/java/aws-gradle/build.gradle",
                "examples/java/aws/pom.xml",
                "examples/java/azure-gradle/build.gradle",
                "examples/java/azure/pom.xml",
                "examples/java/documentation-gradle/build.gradle",
                "examples/java/documentation/pom.xml",
                "examples/java/google-gradle/build.gradle",
                "examples/java/google/pom.xml",
                "examples/java/gradle-shared-module/build.gradle",
                "examples/java/gradle-shared-module/common/build.gradle",
                "examples/java/gradle-shared-module/module-a/build.gradle",
                "examples/java/gradle-shared-module/module-b/build.gradle",
                "examples/java/kubernetes-gradle/build.gradle",
                "examples/java/kubernetes/pom.xml",
                "examples/java/ucloud-gradle/build.gradle",
                "examples/java/ucloud/pom.xml",
                "packages/@cdktn/cli-core/templates/csharp/MyTerraformStack.csproj",
                "packages/@cdktn/cli-core/templates/go/go.mod",
                "packages/@cdktn/cli-core/templates/java/build.gradle",
                "packages/@cdktn/hcl-tools/go.mod",
                "packages/@cdktn/hcl2json/go.mod"
              ],
              "dependency_bot_commit_share": 0.03
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "mise.toml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "mise.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "examples/typescript/aws-cloudfront-proxy/tsconfig.json, examples/typescript/aws-import/tsconfig.json, examples/typescript/aws-kubernetes/tsconfig.json, examples/typescript/aws-move/tsconfig.json, examples/typescript/aws-multiple-stacks/tsconfig.json, examples/typescript/aws-prebuilt/tsconfig.json, examples/typescript/azure-app-service/tsconfig.json, examples/typescript/azure-service-bus-queue-trigger/tsconfig.json, examples/typescript/azure/tsconfig.json, examples/typescript/backends/azurerm/tsconfig.json, examples/typescript/backends/cloud/tsconfig.json, examples/typescript/backends/gcs/tsconfig.json, examples/typescript/backends/remote/tsconfig.json, examples/typescript/backends/s3/tsconfig.json, examples/typescript/docker/tsconfig.json, examples/typescript/documentation/tsconfig.json, examples/typescript/google-cloudrun/tsconfig.json, examples/typescript/google/tsconfig.json, examples/typescript/kubernetes/tsconfig.json, examples/typescript/provisioner/tsconfig.json, examples/typescript/ucloud/tsconfig.json, examples/typescript/vault/tsconfig.json, packages/@cdktn/cli-core/templates/typescript/tsconfig.json, packages/@cdktn/cli-core/tsconfig.json, packages/@cdktn/commons/tsconfig.json, packages/@cdktn/hcl-tools/tsconfig.json, packages/@cdktn/hcl2cdk/tsconfig.json, packages/@cdktn/hcl2json/tsconfig.json, packages/@cdktn/provider-generator/tsconfig.json, packages/@cdktn/provider-schema/tsconfig.json, packages/cdktn-cli/tsconfig.json, test/tsconfig.json, tools/generate-function-bindings/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples/typescript/aws-cloudfront-proxy/tsconfig.json, examples/typescript/aws-import/tsconfig.json, examples/typescript/aws-kubernetes/tsconfig.json, examples/typescript/aws-move/tsconfig.json, examples/typescript/aws-multiple-stacks/tsconfig.json, examples/typescript/aws-prebuilt/tsconfig.json, examples/typescript/azure-app-service/tsconfig.json, examples/typescript/azure-service-bus-queue-trigger/tsconfig.json, examples/typescript/azure/tsconfig.json, examples/typescript/backends/azurerm/tsconfig.json, examples/typescript/backends/cloud/tsconfig.json, examples/typescript/backends/gcs/tsconfig.json, examples/typescript/backends/remote/tsconfig.json, examples/typescript/backends/s3/tsconfig.json, examples/typescript/docker/tsconfig.json, examples/typescript/documentation/tsconfig.json, examples/typescript/google-cloudrun/tsconfig.json, examples/typescript/google/tsconfig.json, examples/typescript/kubernetes/tsconfig.json, examples/typescript/provisioner/tsconfig.json, examples/typescript/ucloud/tsconfig.json, examples/typescript/vault/tsconfig.json, packages/@cdktn/cli-core/templates/typescript/tsconfig.json, packages/@cdktn/cli-core/tsconfig.json, packages/@cdktn/commons/tsconfig.json, packages/@cdktn/hcl-tools/tsconfig.json, packages/@cdktn/hcl2cdk/tsconfig.json, packages/@cdktn/hcl2json/tsconfig.json, packages/@cdktn/provider-generator/tsconfig.json, packages/@cdktn/provider-schema/tsconfig.json, packages/cdktn-cli/tsconfig.json, test/tsconfig.json, tools/generate-function-bindings/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "14 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 14,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "3 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 3,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 47439,
              "source_files_sampled": 897,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/897 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 897,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "example",
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "example, examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "example, examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch npm package '@tools/documentation-generation' from its registry",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T04:45:37.701291Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/open-constructs/cdk-terrain.svg",
  "full_name": "open-constructs/cdk-terrain",
  "license_state": "standard",
  "license_spdx": "MPL-2.0"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计npm.