siderolabs / extensions

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

每个点涵盖 5 天。

来自 GitHub 依赖图的完整解析依赖集合：3 个直接依赖与 311 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 314 个包，其中也包含从不交付的开发与测试版本固定：17 个存在已知公告，2 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "talos",
        "extensions"
      ],
      "is_fork": false,
      "size_kb": 9974,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "C": 97626,
        "Go": 28823,
        "Shell": 3940,
        "Makefile": 13446,
        "Go Template": 27301
      },
      "pushed_at": "2026-08-01T15:10:16Z",
      "created_at": "2022-01-20T18:35:51Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-31T11:40:51Z",
      "description": "Talos Linux System Extensions",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MPL-2.0",
      "default_branch": "main",
      "license_spdx_raw": "MPL-2.0",
      "primary_language": "C",
      "significant_languages": [
        "C",
        "Go",
        "Go Template"
      ]
    },
    "owner": {
      "blog": "https://www.siderolabs.com",
      "name": "Sidero Labs, Inc.",
      "type": "Organization",
      "login": "siderolabs",
      "company": null,
      "location": "Earth",
      "followers": 730,
      "avatar_url": "https://avatars.githubusercontent.com/u/13804887?v=4",
      "created_at": "2015-08-15T01:42:12Z",
      "is_verified": null,
      "public_repos": 145,
      "account_age_days": 4004
    },
    "license": {
      "state": "standard",
      "spdx_id": "MPL-2.0",
      "raw_spdx": "MPL-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.14.0-beta.1",
          "kind": "prerelease",
          "published_at": "2026-07-31T13:19:39Z"
        },
        {
          "tag": "v1.14.0-beta.0",
          "kind": "prerelease",
          "published_at": "2026-07-23T16:02:19Z"
        },
        {
          "tag": "v1.13.7",
          "kind": "patch",
          "published_at": "2026-07-21T12:01:25Z"
        },
        {
          "tag": "v1.12.10",
          "kind": "patch",
          "published_at": "2026-07-17T10:42:32Z"
        },
        {
          "tag": "v1.13.6",
          "kind": "patch",
          "published_at": "2026-07-09T07:16:16Z"
        },
        {
          "tag": "v1.14.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2026-06-26T08:25:27Z"
        },
        {
          "tag": "v1.13.5",
          "kind": "patch",
          "published_at": "2026-06-22T16:35:31Z"
        },
        {
          "tag": "v1.12.9",
          "kind": "patch",
          "published_at": "2026-06-19T15:20:42Z"
        },
        {
          "tag": "v1.13.4",
          "kind": "patch",
          "published_at": "2026-06-09T16:24:08Z"
        },
        {
          "tag": "v1.14.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2026-05-28T15:34:15Z"
        },
        {
          "tag": "v1.13.3",
          "kind": "patch",
          "published_at": "2026-05-26T08:00:18Z"
        },
        {
          "tag": "v1.12.8",
          "kind": "patch",
          "published_at": "2026-05-22T09:54:25Z"
        },
        {
          "tag": "v1.13.2",
          "kind": "patch",
          "published_at": "2026-05-12T19:07:02Z"
        },
        {
          "tag": "v1.14.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2026-04-29T14:52:46Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2026-04-27T11:43:13Z"
        },
        {
          "tag": "v1.12.7",
          "kind": "patch",
          "published_at": "2026-04-24T16:48:35Z"
        },
        {
          "tag": "v1.13.0-rc.0",
          "kind": "prerelease",
          "published_at": "2026-04-16T11:57:37Z"
        },
        {
          "tag": "v1.13.0-beta.1",
          "kind": "prerelease",
          "published_at": "2026-03-27T14:19:34Z"
        },
        {
          "tag": "v1.12.6",
          "kind": "patch",
          "published_at": "2026-03-19T15:36:34Z"
        },
        {
          "tag": "v1.13.0-beta.0",
          "kind": "prerelease",
          "published_at": "2026-03-18T13:52:34Z"
        },
        {
          "tag": "v1.12.5",
          "kind": "patch",
          "published_at": "2026-03-09T14:58:39Z"
        },
        {
          "tag": "v1.13.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2026-02-25T10:29:17Z"
        },
        {
          "tag": "v1.12.4",
          "kind": "patch",
          "published_at": "2026-02-13T10:58:00Z"
        },
        {
          "tag": "v1.12.3",
          "kind": "patch",
          "published_at": "2026-02-07T19:16:14Z"
        },
        {
          "tag": "v1.13.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2026-02-03T16:53:20Z"
        },
        {
          "tag": "v1.12.2",
          "kind": "patch",
          "published_at": "2026-01-22T09:06:06Z"
        },
        {
          "tag": "v1.12.1",
          "kind": "patch",
          "published_at": "2026-01-05T12:59:10Z"
        },
        {
          "tag": "v1.13.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2025-12-25T13:12:16Z"
        },
        {
          "tag": "v1.10.9",
          "kind": "patch",
          "published_at": "2025-12-24T10:25:27Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2025-12-22T17:03:59Z"
        },
        {
          "tag": "v1.11.6",
          "kind": "patch",
          "published_at": "2025-12-16T14:20:48Z"
        },
        {
          "tag": "v1.12.0-rc.1",
          "kind": "prerelease",
          "published_at": "2025-12-15T19:12:05Z"
        },
        {
          "tag": "v1.12.0-rc.0",
          "kind": "prerelease",
          "published_at": "2025-12-09T11:58:05Z"
        },
        {
          "tag": "v1.12.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-12-01T09:48:33Z"
        },
        {
          "tag": "v1.10.8",
          "kind": "patch",
          "published_at": "2025-11-18T14:25:41Z"
        },
        {
          "tag": "v1.12.0-beta.0",
          "kind": "prerelease",
          "published_at": "2025-11-14T12:09:25Z"
        },
        {
          "tag": "v1.11.5",
          "kind": "patch",
          "published_at": "2025-11-06T12:29:40Z"
        },
        {
          "tag": "v1.11.4",
          "kind": "patch",
          "published_at": "2025-11-05T17:04:14Z"
        },
        {
          "tag": "v1.12.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2025-10-29T07:22:19Z"
        },
        {
          "tag": "v1.11.3",
          "kind": "patch",
          "published_at": "2025-10-15T13:16:09Z"
        },
        {
          "tag": "v1.12.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2025-10-01T11:56:44Z"
        },
        {
          "tag": "v1.11.2",
          "kind": "patch",
          "published_at": "2025-09-25T13:29:28Z"
        },
        {
          "tag": "v1.11.1",
          "kind": "patch",
          "published_at": "2025-09-08T17:12:29Z"
        },
        {
          "tag": "v1.12.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2025-09-02T15:01:48Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2025-09-01T10:39:59Z"
        },
        {
          "tag": "v1.10.7",
          "kind": "patch",
          "published_at": "2025-08-26T16:34:32Z"
        },
        {
          "tag": "v1.11.0-rc.0",
          "kind": "prerelease",
          "published_at": "2025-08-19T08:38:11Z"
        },
        {
          "tag": "v1.11.0-beta.2",
          "kind": "prerelease",
          "published_at": "2025-08-12T14:56:59Z"
        },
        {
          "tag": "v1.11.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-08-04T17:12:49Z"
        },
        {
          "tag": "v1.10.6",
          "kind": "patch",
          "published_at": "2025-07-31T14:11:02Z"
        },
        {
          "tag": "v1.11.0-beta.0",
          "kind": "prerelease",
          "published_at": "2025-07-22T13:44:46Z"
        },
        {
          "tag": "v1.10.5",
          "kind": "patch",
          "published_at": "2025-07-03T14:55:06Z"
        },
        {
          "tag": "v1.11.0-alpha.3",
          "kind": "prerelease",
          "published_at": "2025-07-02T10:56:07Z"
        },
        {
          "tag": "v1.11.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2025-07-01T15:00:32Z"
        },
        {
          "tag": "v1.10.4",
          "kind": "patch",
          "published_at": "2025-06-11T13:41:44Z"
        },
        {
          "tag": "v1.11.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2025-06-05T11:19:34Z"
        },
        {
          "tag": "v1.10.3",
          "kind": "patch",
          "published_at": "2025-05-29T07:41:02Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2025-05-16T14:59:24Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2025-05-07T11:44:07Z"
        },
        {
          "tag": "v1.9.6",
          "kind": "patch",
          "published_at": "2025-05-05T15:00:21Z"
        },
        {
          "tag": "v1.11.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2025-05-01T13:14:05Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2025-04-30T14:50:30Z"
        },
        {
          "tag": "v1.10.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-04-22T12:44:29Z"
        },
        {
          "tag": "v1.10.0-beta.0",
          "kind": "prerelease",
          "published_at": "2025-04-15T14:10:35Z"
        },
        {
          "tag": "v1.10.0-alpha.3",
          "kind": "prerelease",
          "published_at": "2025-03-24T14:21:07Z"
        },
        {
          "tag": "v1.9.5",
          "kind": "patch",
          "published_at": "2025-03-12T14:16:27Z"
        },
        {
          "tag": "v1.10.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2025-03-05T11:26:02Z"
        },
        {
          "tag": "v1.9.4",
          "kind": "patch",
          "published_at": "2025-02-14T13:49:20Z"
        },
        {
          "tag": "v1.10.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2025-01-31T17:41:49Z"
        },
        {
          "tag": "v1.9.3",
          "kind": "patch",
          "published_at": "2025-01-28T17:47:35Z"
        },
        {
          "tag": "v1.9.2",
          "kind": "patch",
          "published_at": "2025-01-16T16:14:19Z"
        },
        {
          "tag": "v1.9.1",
          "kind": "patch",
          "published_at": "2024-12-26T15:24:54Z"
        },
        {
          "tag": "v1.10.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2024-12-23T14:17:07Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2024-12-17T13:08:05Z"
        },
        {
          "tag": "v1.8.4",
          "kind": "patch",
          "published_at": "2024-12-13T09:56:52Z"
        },
        {
          "tag": "v1.9.0-beta.1",
          "kind": "prerelease",
          "published_at": "2024-12-10T16:11:37Z"
        },
        {
          "tag": "v1.9.0-beta.0",
          "kind": "prerelease",
          "published_at": "2024-12-02T17:13:58Z"
        },
        {
          "tag": "v1.9.0-alpha.3",
          "kind": "prerelease",
          "published_at": "2024-11-25T15:44:53Z"
        },
        {
          "tag": "v1.8.3",
          "kind": "patch",
          "published_at": "2024-11-13T15:26:03Z"
        },
        {
          "tag": "v1.9.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2024-11-08T17:38:12Z"
        },
        {
          "tag": "v1.9.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2024-11-08T13:28:48Z"
        },
        {
          "tag": "v1.8.2",
          "kind": "patch",
          "published_at": "2024-10-28T12:35:34Z"
        },
        {
          "tag": "v1.9.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2024-10-18T14:44:10Z"
        },
        {
          "tag": "v1.8.1",
          "kind": "patch",
          "published_at": "2024-10-08T17:39:30Z"
        },
        {
          "tag": "v1.7.7",
          "kind": "patch",
          "published_at": "2024-09-26T17:19:34Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2024-09-23T14:15:16Z"
        },
        {
          "tag": "v1.8.0-beta.1",
          "kind": "prerelease",
          "published_at": "2024-09-16T14:35:05Z"
        },
        {
          "tag": "v1.8.0-beta.0",
          "kind": "prerelease",
          "published_at": "2024-09-09T15:37:13Z"
        },
        {
          "tag": "v1.8.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2024-08-30T18:18:09Z"
        },
        {
          "tag": "v1.7.6",
          "kind": "patch",
          "published_at": "2024-08-06T12:27:54Z"
        },
        {
          "tag": "v1.6.8",
          "kind": "patch",
          "published_at": "2024-07-24T15:22:43Z"
        },
        {
          "tag": "v1.8.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2024-07-08T13:15:24Z"
        },
        {
          "tag": "v1.7.5",
          "kind": "patch",
          "published_at": "2024-06-21T19:43:45Z"
        },
        {
          "tag": "v1.7.4",
          "kind": "patch",
          "published_at": "2024-05-30T15:03:59Z"
        },
        {
          "tag": "v1.7.3",
          "kind": "patch",
          "published_at": "2024-05-29T14:50:56Z"
        },
        {
          "tag": "v1.7.2",
          "kind": "patch",
          "published_at": "2024-05-17T15:45:23Z"
        },
        {
          "tag": "v1.8.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2024-05-02T16:09:59Z"
        },
        {
          "tag": "v1.7.1",
          "kind": "patch",
          "published_at": "2024-05-01T14:11:51Z"
        },
        {
          "tag": "v1.7.0",
          "kind": "minor",
          "published_at": "2024-04-19T13:13:44Z"
        },
        {
          "tag": "v1.7.0-beta.1",
          "kind": "prerelease",
          "published_at": "2024-04-12T14:24:51Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "a4877e63be0aad9e9ff82e8d426651a994de1053",
          "body": "This is the official v1.14.0-beta.1 release.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "release(v1.14.0-beta.1): prepare release",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-07-31T08:43:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd4b1ace0bb53c90a7f38c394510e0d39a73b544",
          "body": "Sync `PKGS` with Talos.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: sync pkgs with talos",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-07-30T16:21:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0f96c50ff02a44ea19200cc3da678c7bc19aa34",
          "body": "Sync `PKGS`/`TOOLS` from talos.\n\n`TOOLS` was already up-to-date.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: sync pkgs/tools",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-07-30T11:53:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5db41def8fc33dac21d95fae27df2d6fbde74224",
          "body": "This is the official v1.14.0-beta.0 release.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "release(v1.14.0-beta.0): prepare release",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-07-23T11:02:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62b6bdd081588ec839e1fd3ca96f099713a99ff8",
          "body": "Preparing for a release.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: sync pkgs with Talos main",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-07-23T09:31:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99ddb4f4acfccca89eb92db173959480467672ca",
          "body": "AMD SEV-SNP confidential VMs for Kata Containers (Confidential\nContainers), as a layer on top of the kata-containers extension: the\nAMDSEV.fd OVMF, the confidential guest kernel and dm-verity guest\nimage, and the kata-qemu-snp / kata-qemu-coco-dev containerd runtime\nhandlers, with configs generated \n[…]\nension, which provides the shim, virtiofsd,\nand QEMU. amd64 only.\n\nSigned-off-by: Calin Stefan <4985133+calintkd@users.noreply.github.com>\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: add kata-containers-snp extension",
          "author_name": "Calin Stefan",
          "author_login": "calintkd",
          "committed_at": "2026-07-22T16:26:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8d5b9d2daed126838d07853f599912fed92e098",
          "body": "cloudflared: 2026.7.2\ngvisor: 20260714.0\nnetbird: 0.74.7\nnewt: 1.15.0\ncloud-provider-aws: v1.36.1\ntailscale: 1.98.9\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update backportable dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-07-22T14:26:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85e5dca2f14639c9ededcdb81ff6a7c5f22297d7",
          "body": "Register a kata-qemu containerd runtime handler alongside the existing\ncloud-hypervisor one, selectable per-workload via RuntimeClass. Ships\nthe static QEMU binary and its pruned datadir for amd64 and arm64; on\nx86-64 the guest sees the host CPU virt flag, enabling nested VMs.\n\nThe QEMU configuratio\n[…]\ns blanked since kata\nignores it for non-confidential guests and AAVMF_VARS.fd is not\nshipped.\n\nSigned-off-by: Devin Buhl <devin@buhl.casa>\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat(kata-containers): add QEMU hypervisor handler",
          "author_name": "Devin Buhl",
          "author_login": "onedr0p",
          "committed_at": "2026-07-21T19:24:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e6871acc23efc690b0d1884153237266d829ab6d",
          "body": "This brings in updates from\nhttps://github.com/siderolabs/pkgs/pull/1622.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: pull in new pkgs/tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-07-21T17:59:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e17607de3c9069e90624220103b1b8b6c806aa5",
          "body": "Bump the metal-agent extension to v0.1.6, and regenerate with the latest kres.\n\nSigned-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: bump metal-agent version to v0.1.6",
          "author_name": "Utku Ozdemir",
          "author_login": "utkuozdemir",
          "committed_at": "2026-07-21T14:13:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16f9f3dc82309f6c25ea99d895910d2f479fee26",
          "body": "cloudflared: 2026.7.1\ngvisor: 20260706.0\nnetbird: 0.74.5\nnewt: 1.14.0\nqemu-guest-agent: 11.0.2\ntailscale: 1.98.8\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-07-16T08:56:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd0eddd659d3ea46213c088d040f6e4ef9de4a9f",
          "body": "-\n\nSigned-off-by: Maja Bojarska <maja.bojarska@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: bump tools, pkgs, and components",
          "author_name": "Maja Bojarska",
          "author_login": "majabojarska",
          "committed_at": "2026-07-14T17:30:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1959ffbf05deb349517da8b2b88abcd943f952b4",
          "body": "Via https://github.com/siderolabs/pkgs/pull/1607\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update DRBD to 9.3.3",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-07-13T09:51:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5817a7323b301c39993338e1373e06cc47bf5cdc",
          "body": "Add a Hyper-V guest integration extension under guest-agents/, providing the\nin-tree Linux tools/hv daemons as Talos extension services:\n\n- ext-hyperv-kvp (hv_kvp_daemon): report the guest IP, hostname, and OS to the\n  host so Get-VMNetworkAdapter is populated.\n- ext-hyperv-vss (hv_vss_daemon): take\n[…]\nses the zfs host-mount pattern. Tier extra.\n\nSee siderolabs/talos#6435 and siderolabs/talos discussion #12721.\n\nSigned-off-by: Ryan VanGundy <ryan@copia.io>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: add hyperv-guest-agent extension",
          "author_name": "Ryan VanGundy",
          "author_login": "rmvangun",
          "committed_at": "2026-07-10T06:51:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a3a5774bd7e31f3983b9e0703b5a9ce75f609f6",
          "body": "add docs about local dev as well\n\nSigned-off-by: Orzelius <33936483+Orzelius@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs: document how to build a single extensions and a catalog (#1127)",
          "author_name": "Albert",
          "author_login": "Orzelius",
          "committed_at": "2026-07-06T09:45:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1889ed12fcf12e41026c0c71d15e6347698c504",
          "body": "Move mdadm from extensions into core packages.\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: make mdadm package no-op",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-07-01T13:21:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "685e166a3d4ab632d7e48d6276315445a78722f7",
          "body": "Via pkgs.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update Linux firmware to 20260622",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-06-29T09:18:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "824211c4b7d4c7642042b60a5e6f17499bec9330",
          "body": "cloudflared: 2026.6.1\ngvisor: 20260622.0\nkata-containers: 3.32.0\nspin: 0.25.1\nnetbird: 0.73.2\ntailscale: 1.98.5\nsoci-snapshotter: v0.14.1\nwasmedge: 0.6.1\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-06-28T09:19:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed27dabf9ce7b534c367b3c2df131683fe33cc61",
          "body": "Update dependencies via pkgs.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: sync pkgs and tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-06-26T18:42:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31ac83869bac358fa2129ac100086fa4e81c09a9",
          "body": "This is the official v1.14.0-alpha.2 release.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "release(v1.14.0-alpha.2): prepare release",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-06-26T07:31:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9882a33d2a2f65a64fad42c6cc36295599841fb0",
          "body": "Prepare for Talos v1.14.0-alpha.2 release.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: sync pkgs/tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-06-25T12:00:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aea2cef59506f9e0415cc9c7ec6022550d00f325",
          "body": "Includes ctr bump to 2.3.2\n\nFollow-up to https://github.com/siderolabs/pkgs/pull/1588\n\nSigned-off-by: Maja Bojarska <maja.bojarska@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: bump containerd to 2.3.2",
          "author_name": "Maja Bojarska",
          "author_login": "majabojarska",
          "committed_at": "2026-06-19T08:45:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bf06ba617777595e1c9721324915188521db7fe",
          "body": "-\n\nSigned-off-by: Maja Bojarska <maja.bojarska@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update pkgs (2026-06-18)",
          "author_name": "Maja Bojarska",
          "author_login": "majabojarska",
          "committed_at": "2026-06-18T10:14:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5c6faa11e8f3eece05d7e0e7a550e4f5863f4b9",
          "body": "continuation of siderolabs#1117\n\nreflects siderolabs/pkgs#1585\n\nSigned-off-by: Maja Bojarska <maja.bojarska@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update zfs and nvidia",
          "author_name": "Maja Bojarska",
          "author_login": "majabojarska",
          "committed_at": "2026-06-16T20:48:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d97e46f8dcda5ba1616203ef24fe7e728a4134e",
          "body": "- Includes only updates related to updating `tools` and `pkgs`\n- Fixes comments referencing PKGS_VERSION - should be PKGS\n- Adds exceptions for nvidia-fs.ko\n\nSigned-off-by: Maja Bojarska <maja.bojarska@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update deps 2026-06-16",
          "author_name": "Maja Bojarska",
          "author_login": "majabojarska",
          "committed_at": "2026-06-16T18:59:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b7063cb7c4bef2402fe0f02374b34ab19c2f34c",
          "body": "Since v1.13.0 (#1028) the zfs-service runs `zpool export -a` at shutdown\nvia a blocking cmd.Run() that log.Fatalf's on error. Talos gives extension\nservices a fixed 10s SIGTERM->SIGKILL grace with no knob to raise it, so on\nbusy pools the export overruns it: the service is SIGKILLed mid-export and\nt\n[…]\n 10s grace); 0 skips\nthe export entirely (pre-v1.13 behavior).\n\nRefs #1085\n\nSigned-off-by: Bernard Gütermann <bernard.gutermann@sekops.ch>\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: bound zpool export at shutdown with a configurable timeout",
          "author_name": "Bernard Gütermann",
          "author_login": "bernardgut",
          "committed_at": "2026-06-04T11:58:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "87d1abcbeff512d0e9b2e01f6b160bb18d24af57",
          "body": "Updated extensions:\n- soci-snapshotter: `v0.13.0` -> `v0.14.0`\n- zerotier: `1.16.0` -> `1.16.2`\n\nMakefile: regenerated by kres\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: run rekres and bump deps",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-06-03T06:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55c738c08706202309b46886a9df9c65a294e1b9",
          "body": "cloudflared: 2026.5.2\nNVIDIA Container Toolkit: 1.19.1\ncrun: 1.28\ngvisor: 20260525.0\nnetbird: 0.71.4\nqemu-guest-agent: 11.0.1\ntailscale: 1.98.3\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: bump dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-29T13:57:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72668836b9579525770b5a8f808c2beedebfbfd7",
          "body": "Brings in new gcc, LLVM, and optimized CLFAGs via bldr update.\n\nNot bumping any dependencies outside of inherited via pkgs here.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update pkgs and tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-28T17:33:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "599a4831bbd13baa304ec56ea578822ee0d93b11",
          "body": "This is the official v1.14.0-alpha.1 release.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "release(v1.14.0-alpha.1): prepare release",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-28T13:15:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7d9773559035718f3f51d9d6ab6bc7d12f09f52",
          "body": "Update to the latest in preparation for a release.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: sync pkgs/tools to match Talos main",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-28T10:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ee3fc5533a166ce00748051e5c63050266e3d39",
          "body": "Adds a kubelet image credential provider extension built from\ncontainer-registry/harbor-workload-identity-federation, enabling\nsecret-less image pulls from Harbor / 8gears Container Registry via\nWorkload Identity Federation using short-lived ServiceAccount tokens\ninstead of static robot account secr\n[…]\ning ecr-credential-provider extension. Tracks\nupstream v0.0.1 with a renovate hint for future bumps.\n\nSigned-off-by: Daniil Kivenko <daniil.kivenko@p2p.org>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: add harbor-credential-provider extension",
          "author_name": "Daniil Kivenko",
          "author_login": "p2pdkivenko",
          "committed_at": "2026-05-21T17:52:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e25da7fd6fc7a68fb4fb30355c4c6598278796bb",
          "body": "Tools: `v1.14.0-alpha.0-10-g808f34f` -> `v1.14.0-alpha.0-11-gaa45c41`\nPkgs: `v1.14.0-alpha.0-59-g87994f7` -> `v1.14.0-alpha.0-62-gc62c4e1`\n\nAlso updated:\n- kata-containers: `3.30.0` -> `3.31.0`\n- cloudflared: `2026.3.0` -> `2026.5.0`\n- lldpd: `1.0.21` -> `1.0.22`\n- tailscale: `1.96.4` -> `1.98.2`\n- \n[…]\nud-provider-aws: `v1.35.1` -> `v1.36.0`\n- linux-firmware: `20260410` -> `20260519`\n- ctr: `2.3.0` -> `2.3.1`\n\nRegenerated CI workflows.\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update tools, pkgs, extensions",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-05-21T12:17:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b765a11c529cd862db56716a3eb4a23d3e6ac64",
          "body": "Phonet protocol was disabled in the kernel.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: drop phonet module",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-20T10:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "126ef5d573310af1cf8819a16cf7fadf1e4e950f",
          "body": "PR #1033 added allowlist of `/usr/bin/nvme` and #1034 started creating\na symlink from `/usr/bin/nvme -> /usr/local/bin/nvme`, this meant containers\nmounting up `/` saw nvme symlinked to absolute `/usr/local/bin`which they\ncannot resolve, fix by putting the actual file as `/usr/bin/nvme`.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: nvme-cli install path",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-05-19T16:37:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d2ef77373c9a3cc819377c3fd29d2516210ecbc",
          "body": "Add security note for rpcbind\n\nSigned-off-by: OrbisAI Security <mediratta01.pally@gmail.com>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "docs: add a note on rpcbind listening on all interfaces",
          "author_name": "OrbisAI Security",
          "author_login": null,
          "committed_at": "2026-05-17T13:12:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e67c9ea79d18a8e79f8d776d32e7bd2c4ec5328c",
          "body": "ZFS: 2.4.2\nNVIDIA production: 580.159.04\n\nMatches https://github.com/siderolabs/pkgs/pull/1548\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update ZFS & NVIDIA LTS",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-15T14:18:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b6d4d3af90cc0ae757c3e7f8f027ebc51c9f978",
          "body": "See https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260512\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: update intel ucode to 20260512",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-05-13T13:41:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e045f20ef51fcc6f55912564128db40748411eb9",
          "body": "Cleanup the arm64 exception to drop amd64 files\nRemove a space in vars.yaml\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "chore: small cleanups",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-05-13T12:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93e166845928e6b74d47bcc02e558b59de2258f4",
          "body": "PR #1074 missed the ldconfig step for production fabricmanager.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: add missing ldconfig step fabricmanager production",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-05-12T08:30:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bcd2497c650b76571a2e6fa8ba2bc6c0b2e8db8",
          "body": "nvidia-fabricmanager needs libz for amd64, but we can't just ship it into\n`/usr/local/lib` since zfs extension also ships a musl linked libz, so\nthe fix is to make the nvidia-fabricmanager service fully self contained\nat the cost of copying over same glibc into the container rootfs. This\ncost is acc\n[…]\nll have another PR to make zfs also self\ncontained, but that will be for 1.14 only, this will allow to backport\nthe nvidia-fabricmanager fix.\n\nFixes: #1073\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: nvidia-fabricmanager missing libz dependency",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-05-12T07:36:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d752ea37bef986c41bc7fbf9231fb2fc2a325db",
          "body": "Via tools/pkgs.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update Go to 1.26.3",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-08T14:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2632a397d3cee6f279649fff0c3d3299c2cedbc",
          "body": "Now we ship full set: module + tools.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: add btrfsprogs (userspace tools) to btrfs extensions",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-07T16:58:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cc7808caf35a3c591a3fae3ae54b4e0fd5e0d79",
          "body": "crun: 1.27.1\ngvisor: 20260427.0\nkata-containers: 3.30.0\nspin: 0.24.0\nnetbird: 0.70.5\nnewt: 1.12.3\nmdadm: 4.6\nqemu-guest-agent: 11.0.0\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: bump dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-07T11:38:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d57047e698831acdcc66de8f4dd0dd95f6047f89",
          "body": "bird is the component that brings the node's address up via BGP\nunnumbered (peers over IPv6 link-local, learns and installs the routable\naddress from the ToR). The previous depends block held bird back from\nthe things it itself fulfills:\n\n- service: cri only resolves after a machineconfig is applied\n[…]\ny configuration: true, so bird starts as soon as its\nExtensionServiceConfig is present.\n\nCloses #1064\n\nSigned-off-by: imusmanmalik <usmanmalik@engineer.com>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: allow bird to start in maintenance mode",
          "author_name": "imusmanmalik",
          "author_login": "imusmanmalik",
          "committed_at": "2026-05-07T07:48:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5998878b9fb39d9f242cb7c1dc19f049e3598fb",
          "body": "Update versions for dependent extensions.\n\nSee https://github.com/siderolabs/pkgs/pull/1537\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: sync pkgs/tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-06T14:33:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a533b16f4a675a6ff35b2e42f6b62304919153b",
          "body": "Via pkgs.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update DRBD to 9.3.2",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-05T17:13:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "582f9a89b94efbc2cccd3e740c1528187bd57d63",
          "body": "```\n| Package | Update | Change |\n|---|---|---|\n| nvidia-driver-lts | minor | `580.126.20` → `580.159.03` |\n| nvidia-driver-production | minor | `595.58.03` → `595.71.05` |\n```\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update NVIDIA drivers",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-05T17:02:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "369847173907c1ed6094b09c111061461dd86137",
          "body": "See https://github.com/siderolabs/extensions/issues/1061\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: install iptables correctly into tailscale extension",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-05-04T12:09:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dade5d9a4efdad42a3287954afc0e59755d783b1",
          "body": "Fixes #1059\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: promote multitpath-tools to extra, bump version",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-04-30T10:40:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d64b3c1998cb0bb398a3ecf8f6d96c16efcc539f",
          "body": "This is the official v1.14.0-alpha.0 release.\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "release(v1.14.0-alpha.0): prepare release",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-04-29T11:53:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7aabff30a3e15ceb6f440d2868b79ba12e8cd448",
          "body": "Tools: v1.14.0-alpha.0-4-g4ac4449 -> v1.14.0-alpha.0-6-g44ad18c\nPkgs: v1.14.0-alpha.0-13-g6ea49c7 -> v1.14.0-alpha.0-20-g6a53a93\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update tools and pkgs version",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-04-29T10:33:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74431c05c96554e5bef81b5ad2c8603aca320ad7",
          "body": "Bump metal-agent to 0.1.5\n\nSigned-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: bump metal-agent to 0.1.5",
          "author_name": "Edward Sammut Alessi",
          "author_login": "Slessi",
          "committed_at": "2026-04-28T10:40:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe0a99c0042c9b5fcd5dba01aacd05a661fabb04",
          "body": "Rekres\n\nSigned-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: rekres",
          "author_name": "Edward Sammut Alessi",
          "author_login": "Slessi",
          "committed_at": "2026-04-28T10:40:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f45d7ccb006554421677d49e07086447a5e354c",
          "body": "NB_SETUP_KEY seems to be the correct name\n\nSigned-off-by: Vassil Iordanov <vassil.iordanov@gmail.com>\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "docs: fix setup key variable name in README",
          "author_name": "Vassil Iordanov",
          "author_login": "VassilIordanov",
          "committed_at": "2026-04-20T09:55:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66f49bbb5706b0aa75791b80f1db6c669ecc6f38",
          "body": "Bump to latest pkgs & tools, and no-op bump of systemd.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: sync pkgs & tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-04-16T11:09:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7871fc2f462e75ef3b4d0ed743fe012eedb11372",
          "body": "Grype scan was broken due to it not being able to build with Go 1.26\nFix by updating the dependency.\n\nAlso add missing packages that ship sbom.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: grype scans",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-16T06:23:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07b43374f68816a3d78c46e4689df8a7d6c79d97",
          "body": "This is a fix for PR #1038, without it the extensions are never built.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: enable for real joydev & uinput extensions",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-04-15T10:25:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5ef7eb00e02973375441fe8709564b10af7e7e2",
          "body": "Add uhid and joydev extensions.\n\nSigned-off-by: Ansgar Dahlen <adahlen@evoila.de>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: add uhid and joydev extensions",
          "author_name": "Ansgar Dahlen",
          "author_login": "EvoilaAnsgarDahlen",
          "committed_at": "2026-04-14T18:32:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36706070f7a95e55f3e94a6e909fc393bed35173",
          "body": "Update and regen docs.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update pkgs to pull in Linux firmware 20260410",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-04-14T13:46:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26dae82e3846bf6b93fed0ae29ae88f4fdfc0a44",
          "body": "Make sure we don't ship duplictate extension files.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat(ci): add extensions duplicate finder",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-14T08:32:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9a1e7dd9e8c759b365cf8fa0c8bc65be10174f8",
          "body": "Update various dependencies:\n- gvisor: 20260309.0 -> 20260406.0\n- soci-snapshotter: v0.12.1 -> v0.13.0\n- kata-containers: 3.27.0 -> 3.28.0\n- crun: 1.26 -> 1.27\n- qemu-guest-agent: 10.2.1 -> 10.2.2\n- tailscale: 1.94.2 -> 1.96.4\n- newt: 1.10.2 -> 1.11.0\n- netbird: 0.67.2 -> 0.67.4\n- nut: 2.8.4 -> 2.8.5\n- fuse3: 3.18.1 -> 3.18.2\n- util-linux: 2.41.3 -> 2.41.4\n- pkgs/tools update\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update dependencies",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-04-10T12:39:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f52533829cfb52ec560e957ab5d5e03e25bc1ad1",
          "body": "Rekres to avoid downloading bldr everytime.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "chore: rekres",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-07T13:54:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdd02585f835159c1266f1b141f67423e3450d2a",
          "body": "Rework and cleanup the NVIDIA extensions so that it uses standard paths and is easier to maintain.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: nvidia extension rework",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-07T04:40:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a0db5378c1f396448c1e339a8fd19e6c0326a8e",
          "body": "Allow more NVIDIA and NVME files from extensions,\nthis helps keep Talos rootfs clean and only extensions bring in the required files/symlinks.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: allow more nvidia and nvme files from extensions",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-05T06:13:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77208fd162d3bd429f0245c9529ce0db4ddee91b",
          "body": "Allow both `/etc/ld.so.conf` and `/etc/ld.so.cache` files in `/etc`\nsince tools expect these to be standard.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: allow glibc ld files in etc",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-04T15:57:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddd47209fb6a55616b7c81df2547c948a5f727f9",
          "body": "Netbird failed to build with Go 1.26 previously, bump version to fix and reenable.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: reenable netbird",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-04-02T09:12:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62d2176758a959c63649612efb896876a623665d",
          "body": "Save Netbird config to persistent location.\n\nSigned-off-by: sam <67697492+shyam0904a@users.noreply.github.com>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: netbird config to a persistent location",
          "author_name": "sam",
          "author_login": "shyam0904a",
          "committed_at": "2026-03-31T09:44:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5aeaf4e774be4b35feb8c522bfce01014e503591",
          "body": "Fixes cases where later tasks fail because the disks are still in use\n(e.g. closing encrypted volumes).\n\nSigned-off-by: Galen Abell <galen@galenabell.com>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: export zpools on zfs shutdown",
          "author_name": "Galen Abell",
          "author_login": "gjabell",
          "committed_at": "2026-03-31T09:30:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b28a70da13f61b8c90be579d359a418d15beb95d",
          "body": "E.g. my build machine has ancient NVIDIA GPU, and has nouveau loaded,\nwhich aborts the build, but it doesn't make any sense as I'm not\nbuilding it for my machine.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: disable NVIDIA GPU check while building the driver",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-26T08:35:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "faa5ccd7eba9a203944912f120ee4af07e287f6a",
          "body": "Update via tools/pkgs.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update musl to 1.2.6",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-26T07:17:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6b6bb91551623d266877df4dda5600c759e74a7",
          "body": "See https://github.com/siderolabs/pkgs/pull/1496\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update NVIDIA production to 595.58.03",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-24T17:58:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20f2cac4fd56d6dbbc3d1c85fa5ce9d43e4ce273",
          "body": "For some reason buildx in the CI doesn't want to export full metadata,\nonly the digest is exposed.\n\nUse a mixed solution by building the image tag via bldr as previously,\nwhile attaching the digest from buildx.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: rework image digests one more time",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-17T18:43:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "432828752d38dd134a78c41a80c722abe746bf06",
          "body": "Use buldkit's metadata file to find what went into the build instead of\ntrying to resolve the digests on the fly.\n\nDepends on kres change: https://github.com/siderolabs/kres/pull/627\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "fix: calculate correctly image digests for the catalog",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-17T14:00:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03ed43c876b7aa1688b803556b6102604e7568d7",
          "body": "Update dependencies:\n```\npkgs: v1.13.0-beta.0\ntools: v1.13.0-beta.0\n```\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update pkgs and tools",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-03-17T11:01:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "279ee3adadfbac6beb7dddb4a8992e4836f879f6",
          "body": "Bump dependencies.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: bump deps",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-03-17T02:19:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4afe22133eac4b3c8b8a143dac05c72030224f7",
          "body": "iscsi binaries needs to be present on the host.\nMultipathd seems not to work when self-contained.\n\nFixes: https://github.com/siderolabs/talos/issues/12951\nFixes: https://github.com/siderolabs/extensions/issues/1006\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: iscsi-tools and multipath-tools",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-03-15T13:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a22602ff8841c1a2d6c892bd18e41d617fe6360b",
          "body": "Bump ctr to 2.2.2.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update pkgs with containerd 2.2.2",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-11T17:46:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2644125216867d13a2c6d10fc6eae61948806e56",
          "body": "This pulls in LLVM 22.1 and latest kernel, no functional changes here.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: sync pkgs and tools",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-11T08:14:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59dbb6573b13cfa8bf673c7b5d4f8c01f516713b",
          "body": "Production pkgs should use prod version.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: nvidia production pkg firmware path",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-03-11T06:28:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5480f9075c7af834c9a0b37d7d389aa4c90f35e",
          "body": "Switch to CDI for NVIDIA.\n\nFixes: #940\nFixes: https://github.com/siderolabs/talos/issues/12103\n\nNeeds: https://github.com/siderolabs/talos/pull/12909\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat(nvidia): switch to CDI",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-03-10T09:49:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74580ee730e2ee8c01bd947314a7f22a11cdc8d4",
          "body": "Pull in new pkgs, and bump:\n\n* ZFS 2.4.1\n* NVIDIA LTS 580.126.20\n\nBumps in extensions:\n\n* netbird 0.66.2\n* newt 1.9.0\n* tailscale 1.94.2\n* spin 0.23.0\n* youki 0.6.0\n* Intel ucode 20260227\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-09T10:23:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d347c27859537ea63daf3174c650bea5bfc06da4",
          "body": "Sync pkgs/tools.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update Go to 1.26.1",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-03-06T18:53:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eb92a9db84d4ab9a4471e53e87283768b530d5c",
          "body": "Add the Apple iPhone USB Ethernet driver (ipheth) to the usb-modem\nextension for both x86_64 and aarch64. This completes the USB network\ndriver coverage by including the standard Linux driver for iPhone USB\ntethering.\n\nThe ipheth module is an in-tree driver in drivers/net/usb/ alongside\nthe other US\n[…]\ng kernel config change enabling\nCONFIG_USB_IPHETH=m in siderolabs/pkgs.\n\nSigned-off-by: Andreas Lüdeke <aluedeke@users.noreply.github.com>\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: add ipheth to usb-modem-drivers extension",
          "author_name": "Andreas Lüdeke",
          "author_login": "aluedeke",
          "committed_at": "2026-02-27T17:06:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c538dab9c9a17623edfeee05017d9a98ee296210",
          "body": "This is the official v1.13.0-alpha.2 release.\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "release(v1.13.0-alpha.2): prepare release",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-02-24T11:52:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b3058b1f05328e14e5ac4f13f03b3a6ff37b59f",
          "body": "Updated dependencies:\n\nzlib: 1.3.2 (was 1.3.1)\nkata-containers: 3.27.0 (was 3.26.0)\nqemu: 10.2.1 (was 10.2.0)\nnetbird: 0.65.3 (was 0.64.5)\nnewt: 1.10.0 (was 1.9.0)\nwolfi-base: sha256:9925d3017788558fa8f27e8bb160b791e56202b60c91fbcc5c867de3175986c8 (was sha256:1c56f3ceb1c9929611a1cc7ab7a5fde1ec5df87add282029cd1596b8eae5af67)\n\nUpdated PKGS to v1.13.0-alpha.0-61-g3c982f8\n\nSigned-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>",
          "is_bot": false,
          "headline": "chore: update deps",
          "author_name": "Mateusz Urbanek",
          "author_login": "shanduur",
          "committed_at": "2026-02-24T09:32:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42cc8888d0b4d495a476f3832859c893586b492b",
          "body": "Using the latest.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update Linux firmware to 20260221",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-02-24T08:40:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2bff8e8d7aa5b27616417e20605fe9123d2bb06",
          "body": "SideroLabs kubelet image expects `iscsiadm` at `/usr/local/sbin`, easier to fix here than updating kubelet image.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: iscsi and rpcbind extensions",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-02-23T09:13:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95fe5cbeb6d08d6fcf4d62575fa1932c7d485b96",
          "body": "This was an oversight and was missed while doing #962\nSee also #988\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: iscsi extension",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-02-20T10:34:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f958d7de526d8800c5a92ece77941c049ff2d01",
          "body": "New drm/intel-npu extension following the same pattern as drm/i915.\nCopies intel_vpu.ko and VPU firmware from linux-firmware. amd64 only.\nCovers Meteor Lake (37xx), Arrow Lake/Lunar Lake (40xx), and\nPanther Lake (50xx).\n\nSigned-off-by: lmacka <lmacka@gmail.com>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: add intel-npu extension for IVPU module and firmware",
          "author_name": "lmacka",
          "author_login": "lmacka",
          "committed_at": "2026-02-19T14:57:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8da034616ef6316474af7f9df5f76ba7c3c615c",
          "body": "Refactoring in #962 missed copying the iscsi extension manifest.\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "fix: iscsi extension",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-02-19T13:33:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b626ae0064cb4f6d1fe970dd92eed8345a03306f",
          "body": "bring in go1.26\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: bring in go1.26",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-02-19T12:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb4eb042d710ee402ee5e11e36ec5cebb387aa80",
          "body": "Consolidate extension services to be self contained, don't pollute rootfs or mount up libraries from host unless absolutely needed.\n\nFixes: #876\nFixes: https://github.com/siderolabs/talos/issues/12667\n\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: consolidate extension services",
          "author_name": "Noel Georgi",
          "author_login": "frezbo",
          "committed_at": "2026-02-18T16:17:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ea3858784db53bcbf9ef37faeaf42e87e49919a",
          "body": "Some extensions are straight copies of stuff built in pkgs, so we need\nto sync versions properly.\n\nImport https://github.com/siderolabs/pkgs/pull/1461\n\nAnd update many other variables which were outdated.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update extensions versions for pkgs deps",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-02-11T13:12:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2960cd02dd222af7b5fb18176f07f611d1e5b1c",
          "body": "See https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260210-rev1\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update Intel ucode to 20260210",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-02-11T10:54:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4299bc8d810852afa89794c66beb7fe2e60f0ef4",
          "body": "netbird: 0.64.5\ngvisor: 20260202.0\nKata containers: 3.26.0\ncloudflared: 2026.2.0\nnebula: 1.10.3\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update backportable dependencies",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-02-10T17:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49bf5e494f2b97b8a7463c37d9320244f764b01c",
          "body": "This matches pkgs update.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update NVIDIA LTS to 580.126.16",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-02-10T15:22:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bdbd278d6173e08c3e562ddbad9676fd22ed4c7b",
          "body": "Switch source URL from bird.network.cz to GitLab archive as the\nrelease tarball for 2.18 is not published on the project website.\nAdd autoreconf step since the GitLab archive doesn't include a\npre-generated configure script.\n\nSigned-off-by: Max Makarov <maxpain@linux.com>\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update bird2 to 2.18",
          "author_name": "Max Makarov",
          "author_login": "maxpain",
          "committed_at": "2026-02-09T10:50:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e7d25396e4c6d923a6b9a75992224d2fef85132",
          "body": "Wolfi seems to have moved to glibc 2.43, so we have to move as well.\n\nSigned-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>",
          "is_bot": false,
          "headline": "feat: update glibc to 2.43",
          "author_name": "Andrey Smirnov",
          "author_login": "smira",
          "committed_at": "2026-02-06T16:58:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26b0843338ebf695458b4e89316b5c9f49387fcb",
          "body": "by adding additional mounts and correct PATH\n\nSigned-off-by: Michal Baumgartner <michal.baumgartner@deepnote.com>\nSigned-off-by: Noel Georgi <git@frezbo.dev>",
          "is_bot": false,
          "headline": "feat: support SOCI snapshotter's lazy loading mode",
          "author_name": "Michal Baumgartner",
          "author_login": "m1so",
          "committed_at": "2026-02-06T09:11:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 189,
      "latest_release_at": "2026-07-31T13:19:39Z",
      "latest_release_tag": "v1.14.0-beta.1",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 49,
      "days_since_latest_release": 1,
      "mean_days_between_releases": 7.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 249,
      "stars": 280,
      "watchers": 6,
      "fork_history": {
        "days": [
          {
            "date": "2022-01-20",
            "count": 1
          },
          {
            "date": "2022-01-21",
            "count": 2
          },
          {
            "date": "2022-02-01",
            "count": 1
          },
          {
            "date": "2022-02-11",
            "count": 1
          },
          {
            "date": "2022-02-21",
            "count": 1
          },
          {
            "date": "2022-03-21",
            "count": 1
          },
          {
            "date": "2022-03-23",
            "count": 1
          },
          {
            "date": "2022-03-24",
            "count": 1
          },
          {
            "date": "2022-05-11",
            "count": 1
          },
          {
            "date": "2022-05-15",
            "count": 1
          },
          {
            "date": "2022-06-20",
            "count": 1
          },
          {
            "date": "2022-08-16",
            "count": 1
          },
          {
            "date": "2022-08-20",
            "count": 1
          },
          {
            "date": "2022-08-23",
            "count": 1
          },
          {
            "date": "2022-09-03",
            "count": 1
          },
          {
            "date": "2022-11-26",
            "count": 1
          },
          {
            "date": "2023-01-12",
            "count": 1
          },
          {
            "date": "2023-01-25",
            "count": 1
          },
          {
            "date": "2023-02-04",
            "count": 1
          },
          {
            "date": "2023-03-07",
            "count": 1
          },
          {
            "date": "2023-03-22",
            "count": 1
          },
          {
            "date": "2023-04-01",
            "count": 1
          },
          {
            "date": "2023-04-07",
            "count": 1
          },
          {
            "date": "2023-04-20",
            "count": 1
          },
          {
            "date": "2023-04-26",
            "count": 2
          },
          {
            "date": "2023-05-05",
            "count": 1
          },
          {
            "date": "2023-05-16",
            "count": 1
          },
          {
            "date": "2023-06-21",
            "count": 1
          },
          {
            "date": "2023-07-22",
            "count": 1
          },
          {
            "date": "2023-08-02",
            "count": 1
          },
          {
            "date": "2023-08-05",
            "count": 1
          },
          {
            "date": "2023-08-11",
            "count": 1
          },
          {
            "date": "2023-08-15",
            "count": 1
          },
          {
            "date": "2023-08-18",
            "count": 1
          },
          {
            "date": "2023-08-21",
            "count": 1
          },
          {
            "date": "2023-08-31",
            "count": 1
          },
          {
            "date": "2023-09-03",
            "count": 1
          },
          {
            "date": "2023-09-04",
            "count": 1
          },
          {
            "date": "2023-09-25",
            "count": 1
          },
          {
            "date": "2023-10-03",
            "count": 1
          },
          {
            "date": "2023-10-28",
            "count": 1
          },
          {
            "date": "2023-11-08",
            "count": 1
          },
          {
            "date": "2023-11-16",
            "count": 1
          },
          {
            "date": "2023-11-29",
            "count": 1
          },
          {
            "date": "2023-12-05",
            "count": 1
          },
          {
            "date": "2023-12-06",
            "count": 1
          },
          {
            "date": "2023-12-17",
            "count": 1
          },
          {
            "date": "2023-12-18",
            "count": 1
          },
          {
            "date": "2023-12-19",
            "count": 1
          },
          {
            "date": "2024-01-10",
            "count": 1
          },
          {
            "date": "2024-01-17",
            "count": 2
          },
          {
            "date": "2024-01-24",
            "count": 1
          },
          {
            "date": "2024-01-27",
            "count": 1
          },
          {
            "date": "2024-02-13",
            "count": 1
          },
          {
            "date": "2024-02-23",
            "count": 1
          },
          {
            "date": "2024-02-29",
            "count": 1
          },
          {
            "date": "2024-03-03",
            "count": 1
          },
          {
            "date": "2024-03-08",
            "count": 1
          },
          {
            "date": "2024-03-20",
            "count": 1
          },
          {
            "date": "2024-04-15",
            "count": 1
          },
          {
            "date": "2024-04-17",
            "count": 1
          },
          {
            "date": "2024-04-24",
            "count": 1
          },
          {
            "date": "2024-05-06",
            "count": 1
          },
          {
            "date": "2024-05-12",
            "count": 1
          },
          {
            "date": "2024-05-17",
            "count": 2
          },
          {
            "date": "2024-05-21",
            "count": 1
          },
          {
            "date": "2024-06-02",
            "count": 1
          },
          {
            "date": "2024-06-05",
            "count": 2
          },
          {
            "date": "2024-06-11",
            "count": 1
          },
          {
            "date": "2024-06-25",
            "count": 2
          },
          {
            "date": "2024-06-28",
            "count": 1
          },
          {
            "date": "2024-07-05",
            "count": 1
          },
          {
            "date": "2024-07-14",
            "count": 1
          },
          {
            "date": "2024-07-16",
            "count": 1
          },
          {
            "date": "2024-07-18",
            "count": 1
          },
          {
            "date": "2024-07-23",
            "count": 1
          },
          {
            "date": "2024-07-26",
            "count": 1
          },
          {
            "date": "2024-07-31",
            "count": 2
          },
          {
            "date": "2024-08-12",
            "count": 1
          },
          {
            "date": "2024-08-13",
            "count": 1
          },
          {
            "date": "2024-08-15",
            "count": 2
          },
          {
            "date": "2024-08-29",
            "count": 1
          },
          {
            "date": "2024-09-02",
            "count": 1
          },
          {
            "date": "2024-09-05",
            "count": 1
          },
          {
            "date": "2024-09-19",
            "count": 1
          },
          {
            "date": "2024-09-24",
            "count": 1
          },
          {
            "date": "2024-10-02",
            "count": 1
          },
          {
            "date": "2024-10-09",
            "count": 2
          },
          {
            "date": "2024-10-11",
            "count": 1
          },
          {
            "date": "2024-10-18",
            "count": 1
          },
          {
            "date": "2024-10-20",
            "count": 1
          },
          {
            "date": "2024-10-25",
            "count": 1
          },
          {
            "date": "2024-11-01",
            "count": 1
          },
          {
            "date": "2024-11-09",
            "count": 1
          },
          {
            "date": "2024-11-10",
            "count": 1
          },
          {
            "date": "2024-11-23",
            "count": 1
          },
          {
            "date": "2024-11-30",
            "count": 1
          },
          {
            "date": "2024-12-09",
            "count": 1
          },
          {
            "date": "2024-12-16",
            "count": 1
          },
          {
            "date": "2024-12-17",
            "count": 2
          },
          {
            "date": "2024-12-28",
            "count": 2
          },
          {
            "date": "2025-01-06",
            "count": 1
          },
          {
            "date": "2025-01-10",
            "count": 1
          },
          {
            "date": "2025-01-27",
            "count": 2
          },
          {
            "date": "2025-02-03",
            "count": 1
          },
          {
            "date": "2025-02-04",
            "count": 1
          },
          {
            "date": "2025-02-07",
            "count": 1
          },
          {
            "date": "2025-02-10",
            "count": 1
          },
          {
            "date": "2025-02-16",
            "count": 2
          },
          {
            "date": "2025-02-20",
            "count": 1
          },
          {
            "date": "2025-02-22",
            "count": 1
          },
          {
            "date": "2025-02-26",
            "count": 1
          },
          {
            "date": "2025-02-28",
            "count": 1
          },
          {
            "date": "2025-03-03",
            "count": 1
          },
          {
            "date": "2025-03-05",
            "count": 1
          },
          {
            "date": "2025-03-10",
            "count": 1
          },
          {
            "date": "2025-03-13",
            "count": 1
          },
          {
            "date": "2025-03-14",
            "count": 1
          },
          {
            "date": "2025-03-24",
            "count": 1
          },
          {
            "date": "2025-04-03",
            "count": 1
          },
          {
            "date": "2025-04-06",
            "count": 1
          },
          {
            "date": "2025-04-11",
            "count": 2
          },
          {
            "date": "2025-04-25",
            "count": 1
          },
          {
            "date": "2025-05-20",
            "count": 1
          },
          {
            "date": "2025-06-12",
            "count": 1
          },
          {
            "date": "2025-06-15",
            "count": 1
          },
          {
            "date": "2025-06-28",
            "count": 1
          },
          {
            "date": "2025-07-01",
            "count": 1
          },
          {
            "date": "2025-07-05",
            "count": 2
          },
          {
            "date": "2025-07-23",
            "count": 1
          },
          {
            "date": "2025-07-26",
            "count": 1
          },
          {
            "date": "2025-07-29",
            "count": 1
          },
          {
            "date": "2025-08-04",
            "count": 1
          },
          {
            "date": "2025-08-21",
            "count": 1
          },
          {
            "date": "2025-08-27",
            "count": 1
          },
          {
            "date": "2025-09-03",
            "count": 2
          },
          {
            "date": "2025-09-07",
            "count": 1
          },
          {
            "date": "2025-09-08",
            "count": 1
          },
          {
            "date": "2025-09-09",
            "count": 1
          },
          {
            "date": "2025-09-18",
            "count": 1
          },
          {
            "date": "2025-09-19",
            "count": 2
          },
          {
            "date": "2025-09-28",
            "count": 1
          },
          {
            "date": "2025-10-01",
            "count": 1
          },
          {
            "date": "2025-10-09",
            "count": 1
          },
          {
            "date": "2025-10-18",
            "count": 1
          },
          {
            "date": "2025-10-25",
            "count": 1
          },
          {
            "date": "2025-10-27",
            "count": 1
          },
          {
            "date": "2025-10-29",
            "count": 2
          },
          {
            "date": "2025-10-31",
            "count": 1
          },
          {
            "date": "2025-11-04",
            "count": 1
          },
          {
            "date": "2025-11-06",
            "count": 2
          },
          {
            "date": "2025-11-08",
            "count": 1
          },
          {
            "date": "2025-11-10",
            "count": 1
          },
          {
            "date": "2025-11-11",
            "count": 1
          },
          {
            "date": "2025-11-21",
            "count": 1
          },
          {
            "date": "2025-12-01",
            "count": 2
          },
          {
            "date": "2025-12-03",
            "count": 1
          },
          {
            "date": "2025-12-04",
            "count": 1
          },
          {
            "date": "2025-12-11",
            "count": 1
          },
          {
            "date": "2025-12-16",
            "count": 1
          },
          {
            "date": "2025-12-19",
            "count": 1
          },
          {
            "date": "2025-12-26",
            "count": 1
          },
          {
            "date": "2025-12-27",
            "count": 1
          },
          {
            "date": "2025-12-31",
            "count": 1
          },
          {
            "date": "2026-01-06",
            "count": 1
          },
          {
            "date": "2026-01-09",
            "count": 1
          },
          {
            "date": "2026-01-18",
            "count": 1
          },
          {
            "date": "2026-01-25",
            "count": 1
          },
          {
            "date": "2026-01-27",
            "count": 1
          },
          {
            "date": "2026-01-28",
            "count": 1
          },
          {
            "date": "2026-01-30",
            "count": 1
          },
          {
            "date": "2026-02-04",
            "count": 1
          },
          {
            "date": "2026-02-07",
            "count": 1
          },
          {
            "date": "2026-02-10",
            "count": 1
          },
          {
            "date": "2026-02-13",
            "count": 1
          },
          {
            "date": "2026-02-16",
            "count": 1
          },
          {
            "date": "2026-02-18",
            "count": 1
          },
          {
            "date": "2026-02-24",
            "count": 1
          },
          {
            "date": "2026-02-25",
            "count": 1
          },
          {
            "date": "2026-02-27",
            "count": 1
          },
          {
            "date": "2026-03-03",
            "count": 1
          },
          {
            "date": "2026-03-05",
            "count": 1
          },
          {
            "date": "2026-03-07",
            "count": 1
          },
          {
            "date": "2026-03-09",
            "count": 1
          },
          {
            "date": "2026-03-11",
            "count": 1
          },
          {
            "date": "2026-03-15",
            "count": 1
          },
          {
            "date": "2026-03-21",
            "count": 3
          },
          {
            "date": "2026-03-24",
            "count": 1
          },
          {
            "date": "2026-03-25",
            "count": 1
          },
          {
            "date": "2026-03-29",
            "count": 1
          },
          {
            "date": "2026-04-01",
            "count": 1
          },
          {
            "date": "2026-04-03",
            "count": 1
          },
          {
            "date": "2026-04-08",
            "count": 1
          },
          {
            "date": "2026-04-13",
            "count": 1
          },
          {
            "date": "2026-04-14",
            "count": 1
          },
          {
            "date": "2026-04-18",
            "count": 1
          },
          {
            "date": "2026-04-28",
            "count": 1
          },
          {
            "date": "2026-05-01",
            "count": 1
          },
          {
            "date": "2026-05-02",
            "count": 1
          },
          {
            "date": "2026-05-06",
            "count": 1
          },
          {
            "date": "2026-05-07",
            "count": 1
          },
          {
            "date": "2026-05-10",
            "count": 1
          },
          {
            "date": "2026-05-16",
            "count": 1
          },
          {
            "date": "2026-05-19",
            "count": 1
          },
          {
            "date": "2026-05-29",
            "count": 1
          },
          {
            "date": "2026-06-12",
            "count": 1
          },
          {
            "date": "2026-06-16",
            "count": 1
          },
          {
            "date": "2026-06-17",
            "count": 1
          },
          {
            "date": "2026-06-18",
            "count": 1
          },
          {
            "date": "2026-06-19",
            "count": 1
          },
          {
            "date": "2026-07-03",
            "count": 2
          },
          {
            "date": "2026-07-05",
            "count": 1
          },
          {
            "date": "2026-07-13",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 2
          },
          {
            "date": "2026-07-17",
            "count": 1
          },
          {
            "date": "2026-07-22",
            "count": 1
          },
          {
            "date": "2026-07-23",
            "count": 2
          },
          {
            "date": "2026-07-25",
            "count": 1
          },
          {
            "date": "2026-07-26",
            "count": 1
          },
          {
            "date": "2026-07-27",
            "count": 1
          },
          {
            "date": "2026-07-31",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 246,
        "total_forks": 249
      },
      "star_history": null,
      "open_issues_and_prs": 26
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "examples/hello-world-service/src/go.mod",
        "firmware/revpi-firmware/src/go.mod",
        "internal/grype-scan/go.mod",
        "network/netbird/src/go.mod",
        "network/zerotier/zerotier-wrapper/go.mod",
        "nvidia-gpu/nvidia-container-toolkit/nvidia-persistenced-wrapper/go.mod",
        "nvidia-gpu/nvidia-fabricmanager/nvidia-fabricmanager-wrapper/go.mod",
        "nvidia-gpu/nvidia-gdrdrv-device/go.mod",
        "storage/zfs/zfs-service/go.mod"
      ],
      "largest_source_bytes": 32542,
      "source_files_sampled": 12,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/containerd/containerd/v2",
            "direct": false,
            "version": "v2.2.1",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.9,
            "advisory_ids": [
              "GHSA-33vj-92qq-66hc",
              "GHSA-cvxm-645q-p574",
              "GHSA-fqw6-gf59-qr4w",
              "GHSA-jpcc-p29g-p8mq",
              "GHSA-rgh6-rfwx-v388",
              "GHSA-xhf5-7wjv-pqxp",
              "GO-2026-5064",
              "GO-2026-5338",
              "GO-2026-5378",
              "GO-2026-5475"
            ],
            "fixed_version": "2.3.2",
            "advisory_count": 12,
            "oldest_advisory_days": 71
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.49.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-jppx-rxg9-jmrx",
              "GHSA-q4h4-gmj2-qvw2",
              "GHSA-qpw4-5x99-6vjp",
              "GHSA-rm3j-f69w-wqmq"
            ],
            "fixed_version": "0.52.0",
            "advisory_count": 27,
            "oldest_advisory_days": 71
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 2,
            "oldest_advisory_days": 10
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2026-4883",
              "GO-2026-4887",
              "GO-2026-5617",
              "GO-2026-5668",
              "GO-2026-5746"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 10,
            "oldest_advisory_days": 127
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.8.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-m3xc-h892-ggx6",
              "GHSA-qw64-3x98-g7q2",
              "GO-2026-5490",
              "GO-2026-5597"
            ],
            "fixed_version": "6.0.0-alpha.1",
            "advisory_count": 4,
            "oldest_advisory_days": 80
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.3",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-78h2-9frx-2jm8",
              "GO-2026-4945"
            ],
            "fixed_version": "4.1.4",
            "advisory_count": 2,
            "oldest_advisory_days": 120
          },
          {
            "name": "github.com/hashicorp/go-getter",
            "direct": false,
            "version": "v1.8.5",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-92mm-2pjq-r785",
              "GO-2026-5058"
            ],
            "fixed_version": "1.8.6",
            "advisory_count": 2,
            "oldest_advisory_days": 114
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.40.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh2q-q3fh-2475",
              "GO-2026-5506"
            ],
            "fixed_version": "1.41.0",
            "advisory_count": 2,
            "oldest_advisory_days": 115
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.40.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-hfvc-g4fc-pqhx",
              "GO-2026-5426"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 2,
            "oldest_advisory_days": 115
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.4",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-xmrv-pmrh-hhx2",
              "GO-2026-5764"
            ],
            "fixed_version": "1.97.3",
            "advisory_count": 2,
            "oldest_advisory_days": 115
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": false,
            "version": "v1.96.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-xmrv-pmrh-hhx2",
              "GO-2026-5764"
            ],
            "fixed_version": "1.97.3",
            "advisory_count": 2,
            "oldest_advisory_days": 115
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": false,
            "version": "v5.17.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-389r-gv7p-r3rp",
              "GHSA-3xc5-wrhm-f963",
              "GHSA-crhj-59gh-8x96",
              "GHSA-gm2x-2g9h-ccm8",
              "GHSA-jhf3-xxhw-2wpp",
              "GHSA-m7cr-m3pv-hgrp",
              "GHSA-w5pp-99ch-qj29",
              "GO-2026-4909",
              "GO-2026-4910",
              "GO-2026-5074"
            ],
            "fixed_version": "6.0.0-alpha.4",
            "advisory_count": 14,
            "oldest_advisory_days": 124
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.52.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-4918",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030",
              "GO-2026-5942"
            ],
            "fixed_version": "1.26.3",
            "advisory_count": 9,
            "oldest_advisory_days": 86
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "0.10.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 71
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.42.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 71
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.5",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 5
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.35.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 18
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 6,
          "unknown": 4,
          "critical": 3,
          "moderate": 4
        },
        "advisory_count": 94,
        "affected_count": 17,
        "assessed_count": 314,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [],
      "dependencies": [
        {
          "name": "golang.org/x/sys",
          "manifest": "nvidia-gpu/nvidia-gdrdrv-device/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.47.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.123.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.18.1",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/monitoring",
            "direct": false,
            "version": "v1.24.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/storage",
            "direct": false,
            "version": "v1.60.0",
            "ecosystem": "go"
          },
          {
            "name": "cyphar.com/go-pathrs",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/acarl005/stripansi",
            "direct": false,
            "version": "v0.0.0-20180116102854-5a71ef0e047d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/acobaugh/osrelease",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/adrg/xdg",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agext/levenshtein",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/bubbly",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/clio",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/fangs",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-collections",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-homedir",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-logger",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-lzo",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-macholibre",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-rpmdb",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-struct-converter",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-sync",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-version",
            "direct": false,
            "version": "v1.2.2-0.20210903204242-51efa5b487c4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/grype",
            "direct": false,
            "version": "v0.111.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/packageurl-go",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/stereoscope",
            "direct": false,
            "version": "v0.1.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-textseg/v15",
            "direct": false,
            "version": "v15.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/go-pep440-version",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/go-version",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/araddon/dateparse",
            "direct": false,
            "version": "v0.0.0-20210429162001-6b43995a97de",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": false,
            "version": "v1.41.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": false,
            "version": "v1.32.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.19.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
            "direct": false,
            "version": "v1.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": false,
            "version": "v1.96.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.30.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.35.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.41.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/becheran/wildmatch-go",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bgentry/go-netrc",
            "direct": false,
            "version": "v0.0.0-20140422174119-9fd32a8b3d3d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bitnami/go-version",
            "direct": false,
            "version": "v0.0.0-20250505154626-452e8c5ee607",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blakesmith/ar",
            "direct": false,
            "version": "v0.0.0-20190502131153-809d4375e1fb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v2",
            "direct": false,
            "version": "v2.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bodgit/plumbing",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bodgit/sevenzip",
            "direct": false,
            "version": "v1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bodgit/windows",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbles",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": false,
            "version": "v1.3.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/harmonica",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.11.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/cellbuf",
            "direct": false,
            "version": "v0.0.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/displaywidth",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cncf/xds/go",
            "direct": false,
            "version": "v0.0.0-20251210132809-ee656c7534f5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/cgroups/v3",
            "direct": false,
            "version": "v3.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd/api",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd/v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/continuity",
            "direct": false,
            "version": "v0.4.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/fifo",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v1.0.0-rc.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/plugin",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/stargz-snapshotter/estargz",
            "direct": false,
            "version": "v0.18.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/ttrpc",
            "direct": false,
            "version": "v1.2.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/typeurl/v2",
            "direct": false,
            "version": "v2.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyclonedx/cyclonedx-go",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/zstd",
            "direct": false,
            "version": "v1.5.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/deitch/magic",
            "direct": false,
            "version": "v0.0.0-20240306090643-c67ab88f10cb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/diskfs/go-diskfs",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v29.3.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/distribution",
            "direct": false,
            "version": "v2.8.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dsnet/compress",
            "direct": false,
            "version": "v0.0.2-0.20230904184137-39efe44ab707",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elliotchance/phpserialize",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emirpasic/gods",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/go-control-plane/envoy",
            "direct": false,
            "version": "v1.36.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/facebookincubator/nvdtools",
            "direct": false,
            "version": "v0.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/fgprof",
            "direct": false,
            "version": "v0.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gabriel-vasile/mimetype",
            "direct": false,
            "version": "v1.4.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/github/go-spdx/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/glebarez/go-sqlite",
            "direct": false,
            "version": "v1.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/glebarez/sqlite",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": false,
            "version": "v5.17.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-restruct/restruct",
            "direct": false,
            "version": "v1.2.0-alpha",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goaux/decowriter",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-yaml",
            "direct": false,
            "version": "v1.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gocsaf/csaf/v3",
            "direct": false,
            "version": "v3.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gohugoio/hashstructure",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "v0.0.0-20241129210726-2c02b8208cf8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": false,
            "version": "v0.21.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/licensecheck",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20250630185457-6e76a2b096b5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.17.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp",
            "direct": false,
            "version": "v1.30.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gookit/color",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gpustack/gguf-parser-go",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hako/durafmt",
            "direct": false,
            "version": "v0.0.0-20210608085754-5c1018a4e16b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/aws-sdk-go-base/v2",
            "direct": false,
            "version": "v2.0.0-beta.70",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-getter",
            "direct": false,
            "version": "v1.8.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl/v2",
            "direct": false,
            "version": "v2.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/henvic/httpretty",
            "direct": false,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/iancoleman/strcase",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/intevation/gval",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/intevation/jsonpath",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jedib0t/go-pretty/v6",
            "direct": false,
            "version": "v6.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/copier",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/inflection",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/now",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kastenhq/goversion",
            "direct": false,
            "version": "v0.0.0-20230811215019-93b2f8823953",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kevinburke/ssh_config",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/pgzip",
            "direct": false,
            "version": "v1.2.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knqyf263/go-apk-version",
            "direct": false,
            "version": "v0.0.0-20200609155635-041fdbb8563f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knqyf263/go-deb-version",
            "direct": false,
            "version": "v0.0.0-20241115132648-6f4aee6ccd23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masahiro331/go-mvn-version",
            "direct": false,
            "version": "v0.0.0-20250131095131-f4974fa13b8a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/goutils",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig/v3",
            "direct": false,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.2-0.20220822084749-2491eb6c1c75",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mgutz/ansi",
            "direct": false,
            "version": "v0.0.0-20200706080929-d51e80ef957d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mholt/archives",
            "direct": false,
            "version": "v0.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/hcsshim",
            "direct": false,
            "version": "v0.14.0-rc.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mikelolasagasti/xz",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/minio/minlz",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/locker",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/api",
            "direct": false,
            "version": "v1.54.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/client",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/mountinfo",
            "direct": false,
            "version": "v0.7.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/signal",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": false,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nix-community/go-nix",
            "direct": false,
            "version": "v0.0.0-20250101154619-4bdde671e0a1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nwaples/rardecode/v2",
            "direct": false,
            "version": "v2.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/cat",
            "direct": false,
            "version": "v0.0.0-20250911104152-50322a0618f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/errors",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/ll",
            "direct": false,
            "version": "v0.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/tablewriter",
            "direct": false,
            "version": "v1.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oneofone/xxhash",
            "direct": false,
            "version": "v1.2.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/runtime-spec",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/selinux",
            "direct": false,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/openvex/go-vex",
            "direct": false,
            "version": "v0.2.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/owenrumney/go-sarif",
            "direct": false,
            "version": "v1.1.2-0.20231003122901-1000f5e05554",
            "ecosystem": "go"
          },
          {
            "name": "github.com/package-url/packageurl-go",
            "direct": false,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pandatix/go-cvss",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pborman/indent",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml",
            "direct": false,
            "version": "v1.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pjbgf/sha1cd",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/profile",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/xattr",
            "direct": false,
            "version": "v0.4.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rust-secure-code/go-rustaudit",
            "direct": false,
            "version": "v0.0.0-20250226111315-e20ec32e963c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/saintfish/chardet",
            "direct": false,
            "version": "v0.0.0-20230101081208-5e3ef4b5456d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sassoftware/go-rpmutils",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/scylladb/go-set",
            "direct": false,
            "version": "v1.0.3-0.20200225121959-cc7b2070d91e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergi/go-diff",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/skeema/knownhosts",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/smallnest/ringbuffer",
            "direct": false,
            "version": "v0.0.0-20241116012123-461381446e3d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sorairolake/lzip-go",
            "direct": false,
            "version": "v0.3.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spdx/gordf",
            "direct": false,
            "version": "v0.0.0-20250128162952-000978ccd6fb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spdx/tools-golang",
            "direct": false,
            "version": "v0.5.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": false,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/starry-s/zip",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sylabs/sif/v2",
            "direct": false,
            "version": "v2.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sylabs/squashfs",
            "direct": false,
            "version": "v1.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/therootcompany/xz",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ulikunitz/xz",
            "direct": false,
            "version": "v0.5.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vbatts/go-mtree",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vbatts/tar-split",
            "direct": false,
            "version": "v0.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vifraa/gopom",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vishvananda/netlink",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vishvananda/netns",
            "direct": false,
            "version": "0.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wagoodman/go-partybus",
            "direct": false,
            "version": "v0.0.0-20230516145632-8ccac152c651",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wagoodman/go-presenter",
            "direct": false,
            "version": "v0.0.0-20211015174752-f9c01afc824b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wagoodman/go-progress",
            "direct": false,
            "version": "v0.0.0-20260303201901-10176f79b2c0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xanzy/ssh-agent",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xi2/xz",
            "direct": false,
            "version": "v0.0.0-20171230120015-48954b6210f8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty",
            "direct": false,
            "version": "v1.16.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zyedidia/generic",
            "direct": false,
            "version": "v1.2.2-0.20230320175451-4410d2372cb1",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/bbolt",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.opencensus.io",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/detectors/gcp",
            "direct": false,
            "version": "v1.39.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.62.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "go4.org",
            "direct": false,
            "version": "v0.0.0-20230225012048-214862532bf5",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.49.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20251023183803-a4bb9ffd2546",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.41.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20240903120638-7835f813f4da",
            "ecosystem": "go"
          },
          {
            "name": "gonum.org/v1/gonum",
            "direct": false,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": false,
            "version": "v0.267.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20260128011058-8636f8732409",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260203192932-546029d2fa20",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260203192932-546029d2fa20",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/gorm",
            "direct": false,
            "version": "v1.31.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.70.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": false,
            "version": "v1.46.2",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 314,
        "direct_count": 3,
        "indirect_count": 311
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 10,
        "merged_prs": 788,
        "open_issues": 16,
        "closed_ratio": 0.915,
        "closed_issues": 172,
        "closed_unmerged_prs": 103
      },
      "bus_factor": 2,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "smira",
          "commits": 222,
          "avatar_url": "https://avatars.githubusercontent.com/u/55211?v=4"
        },
        {
          "type": "User",
          "login": "frezbo",
          "commits": 151,
          "avatar_url": "https://avatars.githubusercontent.com/u/18496730?v=4"
        },
        {
          "type": "User",
          "login": "shanduur",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/32583062?v=4"
        },
        {
          "type": "User",
          "login": "dsseng",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/19504461?v=4"
        },
        {
          "type": "User",
          "login": "utkuozdemir",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/1465819?v=4"
        },
        {
          "type": "User",
          "login": "andrewrynhard",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/3383143?v=4"
        },
        {
          "type": "User",
          "login": "rsmitty",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/1529818?v=4"
        },
        {
          "type": "User",
          "login": "jfroy",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/49554?v=4"
        },
        {
          "type": "User",
          "login": "majabojarska",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/33836570?v=4"
        },
        {
          "type": "User",
          "login": "buroa",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/36205263?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.392
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yaml",
        "grype-scan-cron.yaml",
        "lock.yml",
        "slack-notify-ci-failure.yaml",
        "slack-notify.yaml",
        "stale.yml",
        "weekly.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 10 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "51 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "a4877e63be0aad9e9ff82e8d426651a994de1053",
        "ran_at": "2026-08-01T19:54:04Z",
        "aggregate_score": 6.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-08-01T15:10:16Z",
      "oldest_open_prs": [
        {
          "number": 400,
          "created_at": "2024-06-02T08:52:48Z",
          "last_comment_at": "2025-06-28T02:15:37Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 454,
          "created_at": "2024-08-17T10:59:20Z",
          "last_comment_at": "2025-12-04T02:16:15Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 567,
          "created_at": "2024-12-25T18:54:47Z",
          "last_comment_at": "2026-04-24T14:06:10Z",
          "last_comment_author": "renovate"
        },
        {
          "number": 624,
          "created_at": "2025-02-26T14:46:08Z",
          "last_comment_at": "2025-09-14T02:11:15Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 1004,
          "created_at": "2026-03-11T09:39:47Z",
          "last_comment_at": "2026-07-15T02:19:38Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 1062,
          "created_at": "2026-05-02T20:29:16Z",
          "last_comment_at": "2026-06-18T02:25:50Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 1103,
          "created_at": "2026-05-29T14:06:32Z",
          "last_comment_at": "2026-07-15T02:19:35Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 1105,
          "created_at": "2026-06-02T15:20:13Z",
          "last_comment_at": "2026-07-18T02:19:20Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 1164,
          "created_at": "2026-07-23T06:12:54Z",
          "last_comment_at": "2026-07-23T09:25:10Z",
          "last_comment_author": "calintkd"
        },
        {
          "number": 1171,
          "created_at": "2026-07-28T18:56:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-31T11:40:23Z",
      "ci_last_conclusion": "SKIPPED",
      "oldest_open_issues": [
        {
          "number": 58,
          "created_at": "2022-08-29T20:50:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 413,
          "created_at": "2024-06-13T08:36:22Z",
          "last_comment_at": "2026-03-02T15:31:43Z",
          "last_comment_author": "mingfeiluq2"
        },
        {
          "number": 426,
          "created_at": "2024-07-09T09:10:34Z",
          "last_comment_at": "2026-06-28T04:30:12Z",
          "last_comment_author": "stevefan1999-personal"
        },
        {
          "number": 431,
          "created_at": "2024-07-22T15:05:12Z",
          "last_comment_at": "2026-07-25T17:59:53Z",
          "last_comment_author": "yyewolf"
        },
        {
          "number": 561,
          "created_at": "2024-12-19T05:11:41Z",
          "last_comment_at": "2026-03-02T21:11:12Z",
          "last_comment_author": "xyhhx"
        },
        {
          "number": 1015,
          "created_at": "2026-03-19T14:13:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1025,
          "created_at": "2026-03-27T02:43:10Z",
          "last_comment_at": "2026-03-28T07:03:31Z",
          "last_comment_author": "frezbo"
        },
        {
          "number": 1029,
          "created_at": "2026-03-29T21:41:22Z",
          "last_comment_at": "2026-03-31T07:46:32Z",
          "last_comment_author": "frezbo"
        },
        {
          "number": 1032,
          "created_at": "2026-04-05T05:53:04Z",
          "last_comment_at": "2026-04-06T01:55:47Z",
          "last_comment_author": "justin8"
        },
        {
          "number": 1084,
          "created_at": "2026-05-16T07:32:20Z",
          "last_comment_at": "2026-06-01T15:38:58Z",
          "last_comment_author": "guntars-rakitko"
        },
        {
          "number": 1109,
          "created_at": "2026-06-07T16:21:18Z",
          "last_comment_at": "2026-06-07T18:47:10Z",
          "last_comment_author": "KarstenB"
        },
        {
          "number": 1116,
          "created_at": "2026-06-15T08:12:58Z",
          "last_comment_at": "2026-06-18T06:03:40Z",
          "last_comment_author": "mcrespov"
        },
        {
          "number": 1145,
          "created_at": "2026-07-09T17:44:34Z",
          "last_comment_at": "2026-07-14T11:51:15Z",
          "last_comment_author": "frezbo"
        },
        {
          "number": 1167,
          "created_at": "2026-07-23T13:43:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1169,
          "created_at": "2026-07-26T00:36:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1174,
          "created_at": "2026-07-31T05:35:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/siderolabs/extensions",
    "host": "github.com",
    "name": "extensions",
    "owner": "siderolabs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 74,
      "inputs": {
        "security": 67,
        "vitality": 99,
        "community": 57,
        "governance": 76,
        "engineering": 65
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 99,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "commits_last_year": 189,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 49
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "49/52 weeks with commits",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 49
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "189 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 189
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v1.14.0-beta.1",
              "releases_from_tags": false,
              "days_since_latest_release": 1,
              "mean_days_between_releases": 7.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~7.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 7.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 57,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "forks": 249,
              "stars": 280,
              "watchers": 6,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "280 stars",
                "points": 39.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 280
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "249 forks",
                "points": 20,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 249
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "6 watchers",
                "points": 3.9,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MPL-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MPL-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 76,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 100,
              "top_contributor_share": 0.392
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 39% of commits",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 39
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "merged_prs": 788,
              "open_issues": 16,
              "closed_issues": 172,
              "issue_closed_ratio": 0.915,
              "closed_unmerged_prs": 103
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "92% of issues closed",
                "points": 42.8,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 92
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "788/891 decided PRs merged",
                "points": 33.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 788,
                      "decided": 891
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "followers": 730,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "siderolabs",
              "public_repos": 145,
              "account_age_days": 4004
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "730 followers of siderolabs",
                "points": 20.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 730,
                      "login": "siderolabs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "145 public repos, account ~10 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 145
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 10
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 65,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "talos",
                "extensions"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "2 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 67,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "51 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 314 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 314
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 86,
            "inputs": {
              "source": "osv",
              "advisories": 94,
              "affected_packages": 17,
              "assessed_packages": 314,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 3, high 6, moderate 4, unknown 4",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: golang.org/x/sys 0.10.0 (unknown), golang.org/x/sys v0.42.0 (unknown)",
                "points": 24.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "golang.org/x/sys 0.10.0 (unknown), golang.org/x/sys v0.42.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 314,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 18
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "examples/hello-world-service/src/go.mod",
                "firmware/revpi-firmware/src/go.mod",
                "internal/grype-scan/go.mod",
                "network/netbird/src/go.mod",
                "network/zerotier/zerotier-wrapper/go.mod",
                "nvidia-gpu/nvidia-container-toolkit/nvidia-persistenced-wrapper/go.mod",
                "nvidia-gpu/nvidia-fabricmanager/nvidia-fabricmanager-wrapper/go.mod",
                "nvidia-gpu/nvidia-gdrdrv-device/go.mod",
                "storage/zfs/zfs-service/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "C (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "C"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "C",
              "largest_source_bytes": 32542,
              "source_files_sampled": 12,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "C (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "C"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/12 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 12,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-01T19:54:33.671639Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/siderolabs/extensions.svg",
  "full_name": "siderolabs/extensions",
  "license_state": "standard",
  "license_spdx": "MPL-2.0"
}