公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-08-02 00:57 UTC

xmidt-org / talaria

The Xmidt routing agent.

GoApache-2.0★ 11 星标⑂ 24 复刻始于 2016年3月在 GitHub 上查看 ↗

xmidt-org/talaria 的健康指数为 100 分中的 75 分，处于「良好」区间。 其得分最高的类别是Vitality（92/100），最低的是Community & Adoption（51/100）。 最近一次更新在 3 天前。 近期的大部分工作由 3 位贡献者完成。

75
总分 / 100
良好

软件健康指数

指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。

75
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

Xmidt组织
12 关注者122 个公开仓库始于 2019年6月

该仓库由组织支持——共同承担、可问责的托管责任，可延续于任何单一维护者之后。

软件包生态系统

注册表软件包版本月下载量版本数最近发布
Gogithub.com/xmidt-org/talariav0.20.7-1348 天前

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？

92优秀 · 占总体的 22%

开发活跃度

94优秀
评分方式
36/36推送新近度 — 最近一次推送于 3 天前
29.8/36提交节奏 — 52 周中有 43 周有提交
18/18提交量 — 最近一年 365 次提交
10/10OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year365
human_commit_share0.14
days_since_last_push3
active_weeks_last_year43

发布纪律

90优秀
评分方式
27/27有发布版本 — 已发布 100 个发布版本
36/36发布时效 — 最近一次发布版本于 8 天前
27/27发布节奏 — 约每 4.1 天发布一次
0/10OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases.
所用输入
releases_count100
latest_release_tagv0.20.7
releases_from_tags否
days_since_latest_release8
mean_days_between_releases4.1

社区与采用

项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？

51中等 · 占总体的 18%

流行度与采用

35存在风险
评分方式
16.2/60星标 — 11 个星标
11.3/25复刻 — 24 个复刻
7.2/15关注者 — 21 位关注者
所用输入
forks24
stars11
watchers21
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

70良好
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证（Apache-2.0）
18/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme是
has_license是
has_contributing是
has_issue_template否
has_code_of_conduct否
has_pull_request_template否

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？

79良好 · 占总体的 24%

维护者韧性（巴士系数）

75良好
评分方式
36/54巴士系数 — 3 位贡献者贡献了半数提交
15.9/22.5提交分布 — 头号贡献者编写了 29% 的提交
13.5/13.5贡献者广度 — 25 位贡献者
10/10OpenSSF Scorecard：Contributors — project has 5 contributing companies or organizations
所用输入
bus_factor3
contributors_sampled25
top_contributor_share0.293

议题与 PR 响应能力

84良好
评分方式
34.5/46.8议题解决 — 74% 的议题已关闭
34.6/38.3PR 接受 — 已裁定的 PR 中 613/677 已合并
15/15OpenSSF Scorecard：Code-Review — all changesets reviewed
所用输入
merged_prs613
open_issues35
closed_issues99
issue_closed_ratio0.739
closed_unmerged_prs64

所有权与托管责任

63中等
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
8/25所有者影响力 — xmidt-org 有 12 位关注者
25/25既往记录 — 122 个公开仓库，账户约 7 年
所用输入
followers12
owner_typeOrganization
is_verified—
owner_loginxmidt-org
public_repos122
account_age_days2,591

软件包维护

100优秀
评分方式
25/25已发布且可解析 — go 上有 1 个软件包
35/35发布时效 — 最近一次发布于 8 天前
20/20版本历史 — 134 个已发布版本
20/20未被弃用 — 活跃，未被弃用或撤回
所用输入
packagesgithub.com/xmidt-org/talaria
ecosystemsgo
any_deprecated否
min_days_since_publish8

工程质量

基础的工程与文档实践是否到位？

80良好 · 占总体的 20%

工程实践

84良好
评分方式
24/24CI 工作流 — 4 个工作流
24/24存在测试
16/16Linter 配置 — .golangci.yaml
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard：CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci是
has_tests是
has_editorconfig否
has_linter_config是
has_precommit_config否

文档

75良好
评分方式
30/30README
25/25文档目录
0/15文档 / 主页站点
10/10仓库描述
0/10主题标签
10/10Wiki
所用输入
topics—
has_wiki是
homepage—
has_readme是
has_docs_dir是
has_description是

安全

可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？

66中等 · 占总体的 16%

安全态势

66中等
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — 无数据
2.5/2.5CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 5 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — 无数据
3/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6
4.5/5SAST — SAST tool is not run on all commits -- score normalized to 9
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate6.6
已排除计分（无数据或不适用）：branch_protection, packaging。 其余权重已重新归一化。

依赖安全公告

64中等
评分方式
14/35直接依赖不含已知公告 — 1 个受影响：github.com/golang-jwt/jwt v3.2.2+incompatible (high 7.5)
0/25间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分
33.7/40没有长期未处理的公告 — 1 个携带公告的软件包超过 90 天未处理；最早一条发布于 498 天前
所用输入
sourceosv
advisories3
affected_packages2
assessed_packages157
unassessed_packages0
affected_by_severityhigh 1, unknown 1
direct_affected_packages1
已排除计分（无数据或不适用）：间接依赖不含已知公告。 其余权重已重新归一化。 已将 157 个已解析依赖与 OSV 比对。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。

58中等 · 占总体的 0%

AI 代理上下文与指引

1危急
评分方式
0/45代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则
0/15机器可读文档（llms.txt）
0/40可读的提交历史 — 无数据
所用输入
has_llms_txt否
legible_history_share—
agent_instruction_files—
agent_instruction_max_bytes—
已排除计分（无数据或不适用）：可读的提交历史。 其余权重已重新归一化。

验证循环（构建 / 测试 / 类型检查）

86优秀
评分方式
18/18一条命令的引导启动 — Makefile
22/22自动化测试
11/11Lint / 格式化配置 — .golangci.yaml
11/11静态类型检查 — Go（静态类型）
10/10可复现环境 — Dockerfile, lockfile
0/10已体现的代理实践 — 最近 100 次提交中没有代理编写的提交
8/8自动化维护 — 最近 100 次提交中有 86 次为自动依赖更新
6/10OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6
所用输入
has_nix否
has_tests是
lockfilesgo.sum
has_dockerfile是
typed_language是
bootstrap_filesMakefile
has_devcontainer否
has_linter_config是
typecheck_configs—
agent_commit_share0
toolchain_manifestscmd/device-simulator/go.mod, go.mod
dependency_bot_commit_share0.86

面向模型的代码可读性

100优秀
评分方式
45/45可类型检查的代码 — Go（静态类型）
55/55可控的文件大小 — 采样的 40 个源文件中有 0 个超过 60KB
所用输入
primary_languageGo
largest_source_bytes47,128
source_files_sampled40
oversized_source_files0

关键数据

11GitHub 星标
25贡献者
365最近 12 个月提交数
3距最近推送天数
100发布版本数
3巴士系数（bus factor）
35开放议题
Go软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

更多细节

Star 与 Fork 历史 0 ★ / 24 ⇿
0Star
24Fork
53发布

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

048121620242212018-052022-032026-01
主版本 0次版本 8修订 37

每个点涵盖 8 天。

OpenSSF Scorecard 6.6 / 10
6.6综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。Scorecard v5.5.0 · 2026-08-02 00:56 UTC

10Binary-Artifactsno binaries found in the repo
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 5 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
不适用Packagingpackaging workflow not detected
6Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 6
9SASTSAST tool is not run on all commits -- score normalized to 9
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
直接依赖 30
注册表软件包版本约束清单文件
Gogithub.com/fatih/structsv1.1.0go.mod
Gogithub.com/go-kit/kitv0.13.0go.mod
Gogithub.com/golang-jwt/jwtv3.2.2+incompatiblego.mod
Gogithub.com/goph/emperrorv0.17.3-0.20190703203600-60a8d9faa17bgo.mod
Gogithub.com/gorilla/muxv1.8.1go.mod
Gogithub.com/gorilla/websocketv1.5.3go.mod
Gogithub.com/justinas/alicev1.2.0go.mod
Gogithub.com/prometheus/client_golangv1.24.0go.mod
Gogithub.com/prometheus/client_modelv0.6.2go.mod
Gogithub.com/segmentio/ksuidv1.0.4go.mod
Gogithub.com/spf13/castv1.10.0go.mod
Gogithub.com/spf13/pflagv1.0.10go.mod
Gogithub.com/spf13/viperv1.21.0go.mod
Gogithub.com/stretchr/testifyv1.11.1go.mod
Gogithub.com/testcontainers/testcontainers-gov0.43.0go.mod
Gogithub.com/testcontainers/testcontainers-go/modules/kafkav0.43.0go.mod
Gogithub.com/thedevsaddam/gojsonq/v2v2.5.2go.mod
Gogithub.com/twmb/franz-gov1.21.5go.mod
Gogithub.com/xmidt-org/basculev1.1.6go.mod
Gogithub.com/xmidt-org/candlelightv0.2.15go.mod
Gogithub.com/xmidt-org/clorthov0.1.15go.mod
Gogithub.com/xmidt-org/httpauxv0.4.3go.mod
Gogithub.com/xmidt-org/sallustv0.2.8go.mod
Gogithub.com/xmidt-org/touchstonev0.1.8go.mod
Gogithub.com/xmidt-org/webpa-common/v2v2.9.0go.mod
Gogithub.com/xmidt-org/wrp-go/v3v3.7.0go.mod
Gogithub.com/xmidt-org/wrp-go/v5v5.4.3go.mod
Gogithub.com/xmidt-org/wrpkafkav0.1.24go.mod
Gogo.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmuxv0.69.0go.mod
Gogo.uber.org/zapv1.28.0go.mod
全部依赖 157

来自 GitHub 依赖图的完整解析依赖集合：30 个直接依赖与 127 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

注册表软件包版本关系
Gogithub.com/fatih/structsv1.1.0直接
Gogithub.com/go-kit/kitv0.13.0直接
Gogithub.com/golang-jwt/jwtv3.2.2+incompatible直接
Gogithub.com/goph/emperrorv0.17.3-0.20190703203600-60a8d9faa17b直接
Gogithub.com/gorilla/muxv1.8.1直接
Gogithub.com/gorilla/websocketv1.5.3直接
Gogithub.com/justinas/alicev1.2.0直接
Gogithub.com/prometheus/client_golangv1.24.0直接
Gogithub.com/prometheus/client_modelv0.6.2直接
Gogithub.com/segmentio/ksuidv1.0.4直接
Gogithub.com/spf13/castv1.10.0直接
Gogithub.com/spf13/pflagv1.0.10直接
Gogithub.com/spf13/viperv1.21.0直接
Gogithub.com/stretchr/testifyv1.11.1直接
Gogithub.com/testcontainers/testcontainers-gov0.43.0直接
Gogithub.com/testcontainers/testcontainers-go/modules/kafkav0.43.0直接
Gogithub.com/thedevsaddam/gojsonq/v2v2.5.2直接
Gogithub.com/twmb/franz-gov1.21.5直接
Gogithub.com/xmidt-org/basculev1.1.6直接
Gogithub.com/xmidt-org/candlelightv0.2.15直接
Gogithub.com/xmidt-org/clorthov0.1.15直接
Gogithub.com/xmidt-org/httpauxv0.4.3直接
Gogithub.com/xmidt-org/sallustv0.2.8直接
Gogithub.com/xmidt-org/touchstonev0.1.8直接
Gogithub.com/xmidt-org/webpa-common/v2v2.9.0直接
Gogithub.com/xmidt-org/wrp-go/v3v3.7.0直接
Gogithub.com/xmidt-org/wrp-go/v5v5.4.3直接
Gogithub.com/xmidt-org/wrpkafkav0.1.24直接
Gogo.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmuxv0.69.0直接
Gogo.uber.org/zapv1.28.0直接
Godario.cat/mergov1.0.2间接
Gogithub.com/armon/go-metricsv0.4.1间接
Gogithub.com/azure/go-ansitermv0.0.0-20250102033503-faa5f7b0171c间接
Gogithub.com/beorn7/perksv1.0.1间接
Gogithub.com/billhathaway/consistenthashv0.0.0-20140718022140-addea16d2229间接
Gogithub.com/c9s/goprocinfov0.0.0-20210130143923-c95fcf8c64a8间接
Gogithub.com/cenkalti/backoff/v4v4.3.0间接
Gogithub.com/cenkalti/backoff/v5v5.0.3间接
Gogithub.com/cespare/xxhash/v2v2.3.0间接
Gogithub.com/containerd/errdefsv1.0.0间接
Gogithub.com/containerd/errdefs/pkgv0.3.0间接
Gogithub.com/containerd/logv0.1.0间接
Gogithub.com/containerd/platformsv0.2.1间接
Gogithub.com/cpuguy83/dockercfgv0.3.2间接
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33cc间接
Gogithub.com/decred/dcrd/dcrec/secp256k1/v4v4.4.1间接
Gogithub.com/distribution/referencev0.6.0间接
Gogithub.com/docker/go-connectionsv0.6.0间接
Gogithub.com/docker/go-unitsv0.5.0间接
Gogithub.com/ebitengine/puregov0.10.0间接
Gogithub.com/fatih/colorv1.16.0间接
Gogithub.com/felixge/httpsnoopv1.0.4间接
Gogithub.com/fsnotify/fsnotifyv1.9.0间接
Gogithub.com/go-kit/logv0.2.1间接
Gogithub.com/go-logfmt/logfmtv0.6.1间接
Gogithub.com/go-logr/logrv1.4.3间接
Gogithub.com/go-logr/stdrv1.2.2间接
Gogithub.com/go-ole/go-olev1.2.6间接
Gogithub.com/go-viper/mapstructure/v2v2.4.0间接
Gogithub.com/go-zookeeper/zkv1.0.4间接
Gogithub.com/goccy/go-jsonv0.10.6间接
Gogithub.com/google/uuidv1.6.0间接
Gogithub.com/gorilla/schemav1.4.1间接
Gogithub.com/grpc-ecosystem/grpc-gateway/v2v2.29.0间接
Gogithub.com/hashicorp/consul/apiv1.33.2间接
Gogithub.com/hashicorp/errwrapv1.1.0间接
Gogithub.com/hashicorp/go-cleanhttpv0.5.2间接
Gogithub.com/hashicorp/go-hclogv1.5.0间接
Gogithub.com/hashicorp/go-immutable-radixv1.3.1间接
Gogithub.com/hashicorp/go-multierrorv1.1.1间接
Gogithub.com/hashicorp/go-rootcertsv1.0.2间接
Gogithub.com/hashicorp/golang-lruv0.5.4间接
Gogithub.com/hashicorp/serfv0.10.1间接
Gogithub.com/influxdata/influxdb1-clientv0.0.0-20220302092344-a9ab5670611c间接
Gogithub.com/jtacoma/uritemplatesv1.0.0间接
Gogithub.com/klauspost/compressv1.19.0间接
Gogithub.com/lestrrat-go/blackmagicv1.0.4间接
Gogithub.com/lestrrat-go/httpccv1.0.1间接
Gogithub.com/lestrrat-go/httprcv1.0.6间接
Gogithub.com/lestrrat-go/iterv1.0.2间接
Gogithub.com/lestrrat-go/jwx/v2v2.1.7间接
Gogithub.com/lestrrat-go/optionv1.0.1间接
Gogithub.com/lufia/plan9statsv0.0.0-20211012122336-39d0f177ccd0间接
Gogithub.com/magiconair/propertiesv1.8.10间接
Gogithub.com/mattn/go-colorablev0.1.13间接
Gogithub.com/mattn/go-isattyv0.0.20间接
Gogithub.com/microsoft/go-winiov0.6.2间接
Gogithub.com/mitchellh/go-homedirv1.1.0间接
Gogithub.com/moby/docker-image-specv1.3.1间接
Gogithub.com/moby/go-archivev0.2.0间接
Gogithub.com/moby/moby/apiv1.54.2间接
Gogithub.com/moby/moby/clientv0.4.0间接
Gogithub.com/moby/patternmatcherv0.6.1间接
Gogithub.com/moby/sys/sequentialv0.6.0间接
Gogithub.com/moby/sys/userv0.4.0间接
Gogithub.com/moby/sys/usernsv0.1.0间接
Gogithub.com/moby/termv0.5.2间接
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822间接
Gogithub.com/opencontainers/go-digestv1.0.0间接
Gogithub.com/opencontainers/image-specv1.1.1间接
Gogithub.com/openzipkin/zipkin-gov0.4.3间接
Gogithub.com/pelletier/go-toml/v2v2.2.4间接
Gogithub.com/philhofer/fwdv1.2.0间接
Gogithub.com/pierrec/lz4/v4v4.1.26间接
Gogithub.com/pkg/errorsv0.9.1间接
Gogithub.com/pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2间接
Gogithub.com/power-devops/perfstatv0.0.0-20240221224432-82ca36839d55间接
Gogithub.com/prometheus/commonv0.70.0间接
Gogithub.com/prometheus/procfsv0.21.1间接
Gogithub.com/sagikazarmark/locaferov0.11.0间接
Gogithub.com/segmentio/asmv1.2.1间接
Gogithub.com/shirou/gopsutil/v4v4.26.5间接
Gogithub.com/sirupsen/logrusv1.9.4间接
Gogithub.com/sourcegraph/concv0.3.1-0.20240121214520-5f936abd7ae8间接
Gogithub.com/spaolacci/murmur3v1.1.0间接
Gogithub.com/spf13/aferov1.15.0间接
Gogithub.com/stretchr/objxv0.5.3间接
Gogithub.com/subosito/gotenvv1.6.0间接
Gogithub.com/tinylib/msgpv1.6.4间接
Gogithub.com/tklauser/go-sysconfv0.3.16间接
Gogithub.com/tklauser/numcpusv0.11.0间接
Gogithub.com/twmb/franz-go/pkg/kmsgv1.13.1间接
Gogithub.com/twmb/franz-go/plugin/kpromv1.5.0间接
Gogithub.com/ugorji/go/codecv1.2.14间接
Gogithub.com/vividcortex/gohistogramv1.0.0间接
Gogithub.com/xmidt-org/chrononv0.1.13间接
Gogithub.com/xmidt-org/eventorv1.0.49间接
Gogithub.com/yusufpapurcu/wmiv1.2.4间接
Gogo.opentelemetry.io/auto/sdkv1.2.1间接
Gogo.opentelemetry.io/contrib/instrumentation/net/http/otelhttpv0.65.0间接
Gogo.opentelemetry.io/otelv1.44.0间接
Gogo.opentelemetry.io/otel/exporters/jaegerv1.17.0间接
Gogo.opentelemetry.io/otel/exporters/otlp/otlptracev1.44.0间接
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.44.0间接
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpv1.44.0间接
Gogo.opentelemetry.io/otel/exporters/stdout/stdouttracev1.44.0间接
Gogo.opentelemetry.io/otel/exporters/zipkinv1.44.0间接
Gogo.opentelemetry.io/otel/metricv1.44.0间接
Gogo.opentelemetry.io/otel/sdkv1.44.0间接
Gogo.opentelemetry.io/otel/tracev1.44.0间接
Gogo.opentelemetry.io/proto/otlpv1.10.0间接
Gogo.uber.org/digv1.19.0间接
Gogo.uber.org/fxv1.24.0间接
Gogo.uber.org/multierrv1.11.0间接
Gogo.yaml.in/yaml/v3v3.0.4间接
Gogolang.org/x/cryptov0.54.0间接
Gogolang.org/x/expv0.0.0-20250808145144-a408d31f581a间接
Gogolang.org/x/modv0.37.0间接
Gogolang.org/x/netv0.56.0间接
Gogolang.org/x/sysv0.47.0间接
Gogolang.org/x/textv0.40.0间接
Gogoogle.golang.org/genproto/googleapis/apiv0.0.0-20260622175928-b703f567277d间接
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20260622175928-b703f567277d间接
Gogoogle.golang.org/grpcv1.82.1间接
Gogoogle.golang.org/protobufv1.36.11间接
Gogopkg.in/natefinch/lumberjack.v2v2.2.1间接
Gogopkg.in/yaml.v3v3.0.1间接
依赖安全公告 2

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 157 个包，其中也包含从不交付的开发与测试版本固定：2 个存在已知公告，1 个为直接依赖。

软件包版本关系严重程度公告数修复版本
github.com/golang-jwt/jwtv3.2.2+incompatible直接高25.2.2
golang.org/x/cryptov0.54.0间接未知1—

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 7281,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 395163,
        "Shell": 999,
        "Makefile": 1482,
        "Dockerfile": 1512
      },
      "pushed_at": "2026-07-29T05:25:58Z",
      "created_at": "2016-03-07T11:18:37Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-29T05:26:41Z",
      "description": "The Xmidt routing agent.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://xmidt.io",
      "name": "Xmidt",
      "type": "Organization",
      "login": "xmidt-org",
      "company": null,
      "location": null,
      "followers": 12,
      "avatar_url": "https://avatars.githubusercontent.com/u/52305442?v=4",
      "created_at": "2019-06-28T02:50:58Z",
      "is_verified": null,
      "public_repos": 122,
      "account_age_days": 2591
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.20.7",
          "kind": "patch",
          "published_at": "2026-07-24T13:54:14Z"
        },
        {
          "tag": "v0.20.6",
          "kind": "patch",
          "published_at": "2026-07-23T19:52:11Z"
        },
        {
          "tag": "v0.20.5",
          "kind": "patch",
          "published_at": "2026-07-22T14:06:49Z"
        },
        {
          "tag": "v0.20.4",
          "kind": "patch",
          "published_at": "2026-07-21T14:03:19Z"
        },
        {
          "tag": "v0.20.3",
          "kind": "patch",
          "published_at": "2026-07-10T14:37:19Z"
        },
        {
          "tag": "v0.20.2",
          "kind": "patch",
          "published_at": "2026-07-07T19:49:48Z"
        },
        {
          "tag": "v0.19.30",
          "kind": "patch",
          "published_at": "2026-07-02T14:14:40Z"
        },
        {
          "tag": "v0.19.29",
          "kind": "patch",
          "published_at": "2026-07-01T20:44:35Z"
        },
        {
          "tag": "v0.20.1",
          "kind": "patch",
          "published_at": "2026-07-01T02:06:46Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2026-06-17T16:38:34Z"
        },
        {
          "tag": "v0.19.28",
          "kind": "patch",
          "published_at": "2026-06-16T00:11:13Z"
        },
        {
          "tag": "v0.19.27",
          "kind": "patch",
          "published_at": "2026-06-11T18:06:22Z"
        },
        {
          "tag": "v0.19.25",
          "kind": "patch",
          "published_at": "2026-06-08T16:03:00Z"
        },
        {
          "tag": "v0.19.24",
          "kind": "patch",
          "published_at": "2026-06-01T17:51:26Z"
        },
        {
          "tag": "v0.19.23",
          "kind": "patch",
          "published_at": "2026-05-28T23:45:37Z"
        },
        {
          "tag": "v0.19.22",
          "kind": "patch",
          "published_at": "2026-05-28T14:58:18Z"
        },
        {
          "tag": "v0.19.17",
          "kind": "patch",
          "published_at": "2026-04-30T14:09:37Z"
        },
        {
          "tag": "v0.19.16",
          "kind": "patch",
          "published_at": "2026-04-29T14:11:34Z"
        },
        {
          "tag": "v0.19.15",
          "kind": "patch",
          "published_at": "2026-04-28T14:26:04Z"
        },
        {
          "tag": "v0.19.14",
          "kind": "patch",
          "published_at": "2026-04-27T14:06:48Z"
        },
        {
          "tag": "v0.19.13",
          "kind": "patch",
          "published_at": "2026-04-24T13:48:36Z"
        },
        {
          "tag": "v0.19.12",
          "kind": "patch",
          "published_at": "2026-04-23T13:56:37Z"
        },
        {
          "tag": "v0.19.11",
          "kind": "patch",
          "published_at": "2026-04-22T13:54:30Z"
        },
        {
          "tag": "v0.19.10",
          "kind": "patch",
          "published_at": "2026-04-21T13:53:47Z"
        },
        {
          "tag": "v0.19.9",
          "kind": "patch",
          "published_at": "2026-04-20T20:49:29Z"
        },
        {
          "tag": "v0.19.7",
          "kind": "patch",
          "published_at": "2026-04-17T13:30:33Z"
        },
        {
          "tag": "v0.19.6",
          "kind": "patch",
          "published_at": "2026-04-16T17:37:57Z"
        },
        {
          "tag": "v0.19.5",
          "kind": "patch",
          "published_at": "2026-04-16T13:59:01Z"
        },
        {
          "tag": "v0.19.4",
          "kind": "patch",
          "published_at": "2026-04-15T13:49:36Z"
        },
        {
          "tag": "v0.19.3",
          "kind": "patch",
          "published_at": "2026-04-14T22:16:22Z"
        },
        {
          "tag": "v0.19.2",
          "kind": "patch",
          "published_at": "2026-04-14T13:56:00Z"
        },
        {
          "tag": "v0.19.1",
          "kind": "patch",
          "published_at": "2026-04-13T21:36:04Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-04-13T21:21:01Z"
        },
        {
          "tag": "v0.18.1",
          "kind": "patch",
          "published_at": "2026-04-13T13:50:38Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-04-10T19:04:31Z"
        },
        {
          "tag": "v0.17.9",
          "kind": "patch",
          "published_at": "2026-04-10T13:13:38Z"
        },
        {
          "tag": "v0.17.8",
          "kind": "patch",
          "published_at": "2026-04-09T13:31:12Z"
        },
        {
          "tag": "v0.17.7",
          "kind": "patch",
          "published_at": "2026-04-08T16:11:25Z"
        },
        {
          "tag": "v0.17.6",
          "kind": "patch",
          "published_at": "2026-04-08T13:23:51Z"
        },
        {
          "tag": "v0.17.5",
          "kind": "patch",
          "published_at": "2026-04-07T23:10:36Z"
        },
        {
          "tag": "v0.17.4",
          "kind": "patch",
          "published_at": "2026-04-07T13:23:05Z"
        },
        {
          "tag": "v0.17.3",
          "kind": "patch",
          "published_at": "2026-04-06T13:14:41Z"
        },
        {
          "tag": "v0.17.2",
          "kind": "patch",
          "published_at": "2026-04-01T18:42:20Z"
        },
        {
          "tag": "v0.17.1",
          "kind": "patch",
          "published_at": "2026-03-27T13:09:51Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-02-10T23:09:01Z"
        },
        {
          "tag": "v0.15.7",
          "kind": "patch",
          "published_at": "2026-02-09T21:42:36Z"
        },
        {
          "tag": "v0.15.5",
          "kind": "patch",
          "published_at": "2026-01-28T16:47:39Z"
        },
        {
          "tag": "v0.15.4",
          "kind": "patch",
          "published_at": "2026-01-06T02:23:36Z"
        },
        {
          "tag": "v0.15.3",
          "kind": "patch",
          "published_at": "2025-12-09T12:47:09Z"
        },
        {
          "tag": "v0.15.2",
          "kind": "patch",
          "published_at": "2025-11-20T12:44:06Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2025-09-10T15:18:56Z"
        },
        {
          "tag": "v0.9.9",
          "kind": "patch",
          "published_at": "2025-08-22T02:18:34Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2025-04-29T22:06:01Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2025-04-25T00:28:24Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2025-04-01T01:15:01Z"
        },
        {
          "tag": "v0.9.8",
          "kind": "patch",
          "published_at": "2025-03-18T19:14:52Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2025-02-03T17:39:37Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2024-12-05T19:50:52Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2024-12-04T19:21:37Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2024-11-11T20:30:52Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2024-10-22T19:09:18Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2024-10-22T19:08:57Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2024-10-21T13:11:48Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2024-10-14T18:37:22Z"
        },
        {
          "tag": "v0.9.7",
          "kind": "patch",
          "published_at": "2024-09-23T15:45:03Z"
        },
        {
          "tag": "v0.9.6",
          "kind": "patch",
          "published_at": "2024-09-19T19:47:24Z"
        },
        {
          "tag": "v0.9.4",
          "kind": "patch",
          "published_at": "2024-09-09T17:45:23Z"
        },
        {
          "tag": "v0.9.3",
          "kind": "patch",
          "published_at": "2024-03-13T16:02:52Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2024-03-05T15:33:40Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2024-02-27T17:27:35Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2023-12-08T15:10:24Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2023-12-08T03:36:33Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2023-12-07T23:48:58Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2023-12-07T21:27:58Z"
        },
        {
          "tag": "v0.7.7",
          "kind": "patch",
          "published_at": "2023-10-30T15:13:32Z"
        },
        {
          "tag": "v0.7.6",
          "kind": "patch",
          "published_at": "2023-09-14T17:34:45Z"
        },
        {
          "tag": "v0.7.5",
          "kind": "patch",
          "published_at": "2023-07-20T12:26:20Z"
        },
        {
          "tag": "v0.6.11",
          "kind": "patch",
          "published_at": "2023-03-06T18:09:18Z"
        },
        {
          "tag": "v0.6.10",
          "kind": "patch",
          "published_at": "2022-10-31T19:21:45Z"
        },
        {
          "tag": "v0.6.9",
          "kind": "patch",
          "published_at": "2022-10-27T23:52:36Z"
        },
        {
          "tag": "v0.6.8",
          "kind": "patch",
          "published_at": "2022-09-06T20:24:46Z"
        },
        {
          "tag": "v0.6.7",
          "kind": "patch",
          "published_at": "2022-08-27T20:54:03Z"
        },
        {
          "tag": "v0.6.6dev3",
          "kind": "other",
          "published_at": "2022-07-29T12:51:09Z"
        },
        {
          "tag": "v0.6.6dev1.sha.5af3819",
          "kind": "other",
          "published_at": "2022-07-28T03:00:31Z"
        },
        {
          "tag": "v0.6.6dev.sha.5af3819",
          "kind": "other",
          "published_at": "2022-07-28T01:59:09Z"
        },
        {
          "tag": "v0.6.6dev.sha.ac01f28",
          "kind": "other",
          "published_at": "2022-07-27T19:36:21Z"
        },
        {
          "tag": "v0.6.6dev2",
          "kind": "other",
          "published_at": "2022-07-28T16:08:39Z"
        },
        {
          "tag": "v0.6.6dev.sha.51a3d9c",
          "kind": "other",
          "published_at": "2022-07-21T22:32:04Z"
        },
        {
          "tag": "v0.6.6_dev.sha.51a3d9c",
          "kind": "other",
          "published_at": "2022-07-20T21:42:29Z"
        },
        {
          "tag": "v0.6.6+dev.sha.51a3d9c",
          "kind": "patch",
          "published_at": "2022-07-20T20:39:03Z"
        },
        {
          "tag": "v0.6.6-dev.1",
          "kind": "prerelease",
          "published_at": "2022-07-20T16:53:24Z"
        },
        {
          "tag": "v0.6.5",
          "kind": "patch",
          "published_at": "2022-05-02T18:49:47Z"
        },
        {
          "tag": "v0.6.4",
          "kind": "patch",
          "published_at": "2022-04-13T20:09:08Z"
        },
        {
          "tag": "v0.6.3",
          "kind": "patch",
          "published_at": "2021-12-08T19:17:42Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2021-12-08T17:19:26Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2021-12-06T20:29:49Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2021-12-02T19:21:23Z"
        },
        {
          "tag": "v0.5.13",
          "kind": "patch",
          "published_at": "2021-08-30T17:32:54Z"
        },
        {
          "tag": "v0.5.12",
          "kind": "patch",
          "published_at": "2021-07-09T01:48:50Z"
        },
        {
          "tag": "v0.5.11",
          "kind": "patch",
          "published_at": "2021-05-05T02:25:48Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9a230268086f788bef73690509a35933039645b6",
          "body": "…dabot.yml (#811)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.20 to 4.13.0.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3ee264166a90ca457e80f9\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T05:25:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e56982268b65b6b481264b2211b263b9ec270e1e",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.20 to 4.13.0.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3ee264166a90ca457e80f94bc56d1099dbce2e8e...ec035dbc93dc\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#813)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T05:21:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54c14e287ef96462cd2034886140ccaa37e68a9d",
          "body": "….yml (#812)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.20 to 4.13.0.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3ee264166a90ca457e80f94bc56d1099\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T05:18:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d9d79cfc7d69475fc736bbd7e6cba17a2f95b52f",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.20 to 4.13.0.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3ee264166a90ca457e80f94bc56d1099dbce2e8e...ec035dbc93dc30\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#810)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T05:14:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23b37d14b234bb4d0559e19876edc496bb0502dc",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.19 to 4.12.20.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/ef773fbb98140fe8752522f4c59013969ea51020...3ee264166a90c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#805)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T05:25:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c62c99d6d888570fbee26633e9253132a199343",
          "body": "….yml (#808)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.19 to 4.12.20.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/ef773fbb98140fe8752522f4c590139\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T05:22:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a096513eac7a0f88c1a53f8543a73c41628e920",
          "body": "…dabot.yml (#807)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.19 to 4.12.20.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/ef773fbb98140fe875252\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T05:18:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f288e134b55c8fb8df439abc4ab22b3ed3a6226",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.18 to 4.12.20.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/57505bfdc2bd28ba66344c0531aa7770a4728939...3ee264166a9\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#806)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T05:14:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c7813a96622ba2d9cf05102ea9ca20076941085",
          "body": "…dabot.yml (#803)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.18 to 4.12.19.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/57505bfdc2bd28ba66344\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-27T05:22:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c83292f13f603206a3ea5c1022fdbfaf2fe18e1",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.18 to 4.12.19.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/57505bfdc2bd28ba66344c0531aa7770a4728939...ef773fbb98140\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#801)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-27T05:19:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "81d7e0e681ab2dbbe4535549aad76ec611459eb9",
          "body": "….yml (#800)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.18 to 4.12.19.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/57505bfdc2bd28ba66344c0531aa777\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-27T05:15:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "03060f18a989e8cec886d3e798c3ea9e1acefeb4",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.17 to 4.12.18.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3341540dc7bd064cba31ac1c2ba527b729412d6d...57505bfdc2b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#798)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T05:25:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b29bcab9ee3592aca5155386f3be7f813cf4cdee",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.17 to 4.12.18.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3341540dc7bd064cba31ac1c2ba527b729412d6d...57505bfdc2bd2\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#797)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T05:21:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8c5008f17ab752b5bfb5ad0e5e0d2ef7d4324e75",
          "body": "…dabot.yml (#799)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.17 to 4.12.18.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3341540dc7bd064cba31a\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T05:18:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6cbfc72465ad8ec27a3daaf71bca861c93efd481",
          "body": "….yml (#796)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.17 to 4.12.18.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/3341540dc7bd064cba31ac1c2ba527b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T05:14:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b1a8c9e712b4fff514f9321a6aaabee870c9658",
          "body": "* initial check in of metric and tests\n\n* updated test to verify .Inc() is called just once.\n\n---------\n\nCo-authored-by: Owen Cabalceta <denopink@gmail.com>",
          "is_bot": false,
          "headline": "Add api error metric (#790)",
          "author_name": "Ivan Law",
          "author_login": "ilawjr",
          "committed_at": "2026-07-23T19:37:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5145d495ad43e8e4f2fb1c4a8d5f75c7d842e337",
          "body": "….15 (#795)\n\nBumps [github.com/xmidt-org/candlelight](https://github.com/xmidt-org/candlelight) from 0.2.14 to 0.2.15.\n- [Release notes](https://github.com/xmidt-org/candlelight/releases)\n- [Changelog](https://github.com/xmidt-org/candlelight/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xm\n[…]\nr-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Owen Cabalceta <denopink@gmail.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/candlelight from 0.2.14 to 0.2…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T18:59:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a563b3765cfe8583b5fc7007bd38d77d4760605",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.15 to 4.12.17.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/bfcee2e5632b9b052e8176a73a9523f226ba7ef4...3341540dc7bd0\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#793)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T05:25:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "656e7aa197b78407640061d1631eac68002a402c",
          "body": "…dabot.yml (#794)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.15 to 4.12.17.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/bfcee2e5632b9b052e817\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T05:22:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "15167b8f68172947ed67fff71df94e29b7b328ee",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.15 to 4.12.17.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/bfcee2e5632b9b052e8176a73a9523f226ba7ef4...3341540dc7b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#792)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T05:18:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c04ef0e56e1283a823b3ef99a5d42aeb742906a",
          "body": "….yml (#791)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.16 to 4.12.17.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/addd969b1833260e1193fcd77ab1a6d\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T05:14:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93209b1f60ee1ff77e908c3b1468e142d4f31c6c",
          "body": "… (#788)\n\nBumps [github.com/xmidt-org/wrpkafka](https://github.com/xmidt-org/wrpkafka) from 0.1.23 to 0.1.24.\n- [Release notes](https://github.com/xmidt-org/wrpkafka/releases)\n- [Commits](https://github.com/xmidt-org/wrpkafka/compare/v0.1.23...v0.1.24)\n\n---\nupdated-dependencies:\n- dependency-name: g\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/wrpkafka from 0.1.23 to 0.1.24…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T05:26:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "24bb0a54607c2d4621cdb73960c1f4c702efa8cb",
          "body": "…(#787)\n\nBumps [github.com/xmidt-org/clortho](https://github.com/xmidt-org/clortho) from 0.1.14 to 0.1.15.\n- [Release notes](https://github.com/xmidt-org/clortho/releases)\n- [Changelog](https://github.com/xmidt-org/clortho/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/clortho/comp\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/clortho from 0.1.14 to 0.1.15 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T05:22:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c76cc740c9ef8499b831e17ef88c8dcf42806e4",
          "body": "Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.0 to 1.82.1.\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.82.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#789)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T05:17:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "432edf50a3cb4581618a9676f3b56bd413bf0b61",
          "body": "….yml (#785)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.15 to 4.12.16.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/bfcee2e5632b9b052e8176a73a9523f\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T05:14:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d14b1f50e5a74fd584b9442608d62a1aa1c749a0",
          "body": "…781)\n\nBumps [github.com/xmidt-org/bascule](https://github.com/xmidt-org/bascule) from 1.1.5 to 1.1.6.\n- [Release notes](https://github.com/xmidt-org/bascule/releases)\n- [Changelog](https://github.com/xmidt-org/bascule/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/bascule/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/bascule from 1.1.5 to 1.1.6 (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T05:19:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d16ac52f9b84d00b28e49cc1cb4edf3bde6da96",
          "body": "Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.23.2 to 1.24.0.\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.0/CHANGELOG.md)\n- [Commits](https://github.com/\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/prometheus/client_golang (#782)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T05:15:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9491d3cd78d3fa523fcdcce43500305983dae758",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.14 to 4.12.15.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/d26ceee0eda9b968c3a43e68bc13024582de9d2f...bfcee2e5632\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#780)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T05:26:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "200fee702cdfe7a6709f811bbdb8b0d15456acbe",
          "body": "…dabot.yml (#778)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.14 to 4.12.15.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/d26ceee0eda9b968c3a43\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T05:22:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37cff398065548bf8e6e9c531894261ecbdd02eb",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.14 to 4.12.15.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/d26ceee0eda9b968c3a43e68bc13024582de9d2f...bfcee2e5632b9\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#779)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T05:19:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1a9dbc22b1c6735d7e48733dea42e7f3fc95097",
          "body": "….yml (#777)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.14 to 4.12.15.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/d26ceee0eda9b968c3a43e68bc13024\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T05:14:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e4afbe35623ed5f4ea367fc672cc08f6de827bc",
          "body": "….yml (#773)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.13 to 4.12.14.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7784bd625f0c7ea53db2c857f9ab33e\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T05:25:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dd02c447f5020ab40aace6876ea30762fecd6f5b",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.13 to 4.12.14.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7784bd625f0c7ea53db2c857f9ab33e42ad77b95...d26ceee0eda9b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#776)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T05:21:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e2420c3956d28ee34237d7922a2b1c2658c6da3a",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.13 to 4.12.14.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7784bd625f0c7ea53db2c857f9ab33e42ad77b95...d26ceee0eda\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#774)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T05:17:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb01e5a5715e0b6170d33add67671bcf35a5ff35",
          "body": "…dabot.yml (#775)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.13 to 4.12.14.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7784bd625f0c7ea53db2c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T05:14:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "334a47df5584f273e2e79f1e92bc3f8b666743a0",
          "body": "….yml (#769)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.12 to 4.12.13.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/5d62fa26c844e4cdfeccaf18f558d72\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T05:25:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94c9e40f6eeb8aca7a596a0ef6afd04826ecd96e",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.12 to 4.12.13.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/5d62fa26c844e4cdfeccaf18f558d727d1ab6e62...7784bd625f0\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#772)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T05:21:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a53eacdc241a09a5577a3311fa8bd601696322f4",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.12 to 4.12.13.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/5d62fa26c844e4cdfeccaf18f558d727d1ab6e62...7784bd625f0c7\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#771)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T05:18:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b1ba9a0588e484aa80561c222de31ebf6316eeb",
          "body": "…dabot.yml (#770)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.12 to 4.12.13.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/5d62fa26c844e4cdfecca\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T05:14:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "24b92bd6a5820630cc3ea85b277716db7c9ba0a4",
          "body": "…768)\n\nBumps [github.com/xmidt-org/bascule](https://github.com/xmidt-org/bascule) from 1.1.4 to 1.1.5.\n- [Release notes](https://github.com/xmidt-org/bascule/releases)\n- [Changelog](https://github.com/xmidt-org/bascule/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/bascule/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/bascule from 1.1.4 to 1.1.5 (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T05:14:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "78633e2def9611e5f58faaf849b500673d7816a2",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.11 to 4.12.12.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/c05113f618ca31623ed98e8d4f294fc274a1f357...5d62fa26c84\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#765)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T05:25:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3ea220fd07883b1502f57bee790b6f653e07cbce",
          "body": "…dabot.yml (#766)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.11 to 4.12.12.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/c05113f618ca31623ed98\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T05:21:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "83018c0a4c588b0f24c960f7a2629c23a74c96b4",
          "body": "….yml (#767)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.11 to 4.12.12.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/c05113f618ca31623ed98e8d4f294fc\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T05:18:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d0b856a2f2eb397d32d733977f80ae125d2c351",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.11 to 4.12.12.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/c05113f618ca31623ed98e8d4f294fc274a1f357...5d62fa26c844e\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#764)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T05:14:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33d6185a5ee10f3a517a206a6ed5ae67d02d6bc8",
          "body": "…dabot.yml (#763)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.10 to 4.12.11.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/2e5fe19fdcc697e09d0e2\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T05:26:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "858e99a647699fb83ee03326022ca34ef61eef21",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.10 to 4.12.11.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/2e5fe19fdcc697e09d0e24483569d4835d540ecf...c05113f618ca3\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#761)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T05:23:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "309ffd77fb2b9c39d7b74de60a2ed3365d6dce31",
          "body": "….yml (#762)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.10 to 4.12.11.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/2e5fe19fdcc697e09d0e24483569d48\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T05:18:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "767912c525a6fdf2de3a72e75d8b4676c1e2c885",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.10 to 4.12.11.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/2e5fe19fdcc697e09d0e24483569d4835d540ecf...c05113f618c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#760)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T05:15:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e744a47a3a0c594c2f9bc4f4867bc50294699c7b",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.9 to 4.12.10.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/033446d5cadab01c9396852cada03720c3ff1815...2e5fe19fdcc697\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#759)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T05:25:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0d5ac5007628a99c4265dec821f16653fd223fb1",
          "body": "….yml (#756)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.9 to 4.12.10.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/033446d5cadab01c9396852cada03720\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T05:22:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4430df50fd7c50915217638f2d3d941df12f58ff",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.9 to 4.12.10.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/033446d5cadab01c9396852cada03720c3ff1815...2e5fe19fdcc6\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#758)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T05:18:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44bdfac03a9dcc0bd09605846532b9df4d5d3e1f",
          "body": "…dabot.yml (#757)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.9 to 4.12.10.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/033446d5cadab01c939685\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T05:14:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae3f41b071d7cf2f87e50ec7e1f13fdae0b4abae",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.8 to 4.12.9.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/fe1aac86f0c6b5070e7bda262d3c31cb53cc510c...033446d5cadab\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#752)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T05:25:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a28d4e5d92c1f415a45bb5681a7dda006994f1fa",
          "body": "…dabot.yml (#754)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.8 to 4.12.9.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/fe1aac86f0c6b5070e7bda2\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T05:21:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47e9e6bbb18a6ea050b3827323cdef9cd1c7a141",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.8 to 4.12.9.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/fe1aac86f0c6b5070e7bda262d3c31cb53cc510c...033446d5cadab01\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#755)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T05:17:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2754022307cff17ff74aa1d0d917d56d866f4fde",
          "body": "….yml (#753)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.8 to 4.12.9.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/fe1aac86f0c6b5070e7bda262d3c31cb5\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T05:14:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ba295cb6d97d55f6bcf710539a8576f6106b714",
          "body": "…/kafka (#732)\n\nBumps [github.com/testcontainers/testcontainers-go/modules/kafka](https://github.com/testcontainers/testcontainers-go) from 0.42.0 to 0.43.0.\n- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)\n- [Commits](https://github.com/testcontainers/testcontainers-g\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/testcontainers/testcontainers-go/modules…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T21:04:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c0b76b2921825874ab1c47a437394bd0956bec6",
          "body": "….14 (#750)\n\nBumps [github.com/xmidt-org/candlelight](https://github.com/xmidt-org/candlelight) from 0.2.12 to 0.2.14.\n- [Release notes](https://github.com/xmidt-org/candlelight/releases)\n- [Changelog](https://github.com/xmidt-org/candlelight/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xm\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/candlelight from 0.2.12 to 0.2…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T21:00:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ccd52f33d75dd4a35ace303d09476a56789001b0",
          "body": "Bumps [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) from 0.42.0 to 0.43.0.\n- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)\n- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0)\n\n\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/testcontainers/testcontainers-go (#730)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:56:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77c4601700c87cf8fe0133335f4af3652fb66cda",
          "body": "…(#746)\n\nBumps [github.com/xmidt-org/clortho](https://github.com/xmidt-org/clortho) from 0.1.13 to 0.1.14.\n- [Release notes](https://github.com/xmidt-org/clortho/releases)\n- [Changelog](https://github.com/xmidt-org/clortho/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/clortho/comp\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/clortho from 0.1.13 to 0.1.14 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:52:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "afd3380bc795e7c55c3a45c66705eef0c8b6f916",
          "body": "Bumps [github.com/twmb/franz-go](https://github.com/twmb/franz-go) from 1.21.3 to 1.21.5.\n- [Changelog](https://github.com/twmb/franz-go/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/twmb/franz-go/compare/v1.21.3...v1.21.5)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/twmb/fra\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/twmb/franz-go from 1.21.3 to 1.21.5 (#749)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:48:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "544f02134245910ba4491bebe85eff4939dc51b4",
          "body": "…743)\n\nBumps [github.com/xmidt-org/bascule](https://github.com/xmidt-org/bascule) from 1.1.3 to 1.1.4.\n- [Release notes](https://github.com/xmidt-org/bascule/releases)\n- [Changelog](https://github.com/xmidt-org/bascule/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/bascule/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/bascule from 1.1.3 to 1.1.4 (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:44:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bba87f571bcdf66aa50721fe892df3211966162b",
          "body": "…(#731)\n\nBumps [github.com/xmidt-org/wrp-go/v5](https://github.com/xmidt-org/wrp-go) from 5.4.2 to 5.4.3.\n- [Release notes](https://github.com/xmidt-org/wrp-go/releases)\n- [Changelog](https://github.com/xmidt-org/wrp-go/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/wrp-go/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/wrp-go/v5 from 5.4.2 to 5.4.3 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:41:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "660df58739c6393188feb6dedf412184aa51dd17",
          "body": "update wrpkafka library",
          "is_bot": false,
          "headline": "Merge pull request #751 from xmidt-org/wrpkafka",
          "author_name": "marcia-piccione",
          "author_login": "piccione99",
          "committed_at": "2026-07-01T20:37:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49dfff06eb6162c79ab8d920d9f4f16646e07dc6",
          "body": null,
          "is_bot": false,
          "headline": "update wrpkafka library",
          "author_name": "piccione99",
          "author_login": "piccione99",
          "committed_at": "2026-07-01T20:24:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bfe3a8bf9a56c53d4c2204d265349457f31bd9f",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.7 to 4.12.8.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/60c01237da42e1936c02aa4c38b2ef901003d41e...fe1aac86f0c6b50\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#748)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T05:25:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "afb69613b55c90742fe3ebb326af1da6c335f32c",
          "body": "…dabot.yml (#747)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.7 to 4.12.8.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/60c01237da42e1936c02aa4\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T05:22:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e056f72dfc9bb8f077198579206c7ef2bee9058c",
          "body": "….yml (#745)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.7 to 4.12.8.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/60c01237da42e1936c02aa4c38b2ef901\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T05:18:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a7d3bbd881ba208daf9ceecea43a3a59fb83028",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.7 to 4.12.8.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/60c01237da42e1936c02aa4c38b2ef901003d41e...fe1aac86f0c6b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#744)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T05:15:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "78a9186fb81d79616c4ee70161dbb2acba229e44",
          "body": "add recordDeliveryTimeout option to publisher client",
          "is_bot": false,
          "headline": "Merge pull request #742 from xmidt-org/delivery",
          "author_name": "marcia-piccione",
          "author_login": "piccione99",
          "committed_at": "2026-06-30T19:11:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8256215be4740c973a160ef977ad3082100ff50",
          "body": null,
          "is_bot": false,
          "headline": "add recordDeliveryTimeout option to publisher client",
          "author_name": "piccione99",
          "author_login": "piccione99",
          "committed_at": "2026-06-30T19:07:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfc433cc37450716042c02f4e27a7ea2e9e78bf2",
          "body": "…dabot.yml (#740)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.6 to 4.12.7.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/f885637b73cac69a721dde8\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T05:25:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67c67a16c9707ec43149352cf9c89b92d37d2d59",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.6 to 4.12.7.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/f885637b73cac69a721dde8494c81db06ca600f1...60c01237da42e19\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#738)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T05:21:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee9caa59784bf770600cb6ae7584fa70602a880e",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.6 to 4.12.7.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/f885637b73cac69a721dde8494c81db06ca600f1...60c01237da42e\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#739)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T05:18:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59868fffabd89d2d11b17c801b17a0b5d41ddced",
          "body": "….yml (#737)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.6 to 4.12.7.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/f885637b73cac69a721dde8494c81db06\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T05:14:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "07388b772b6dcd424ea7efdbffeee387ac68f472",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.5 to 4.12.6.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/a0bb9aa6abbab3aedfbaecd4625c6949495c63df...f885637b73cac\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#735)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T05:25:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c789c2737e6520ac921edf85aa499dcce7d59365",
          "body": "…dabot.yml (#733)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.4 to 4.12.6.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/22e2a0c03b721abb18f4482\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T05:21:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3565bcded450a050f8b9fab17c4d9e36c9c1324",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.5 to 4.12.6.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/a0bb9aa6abbab3aedfbaecd4625c6949495c63df...f885637b73cac69\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#736)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T05:18:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2133c14be19cafb247b34862aa6177a59ccc451",
          "body": "….yml (#734)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.5 to 4.12.6.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/a0bb9aa6abbab3aedfbaecd4625c69494\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T05:14:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "606790c412891fb11139a9263f4573c1eefb1999",
          "body": "….yml (#727)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.4 to 4.12.5.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/22e2a0c03b721abb18f44828d67e41b5b\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T05:21:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "faf478676944bb83ceb0bc0c1fbdb29c94b1f4cb",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.4 to 4.12.5.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/22e2a0c03b721abb18f44828d67e41b5b3ed9f94...a0bb9aa6abbab\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#729)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T05:18:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad390c412ea0be26d149dc508aebf70748bc1150",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.4 to 4.12.5.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/22e2a0c03b721abb18f44828d67e41b5b3ed9f94...a0bb9aa6abbab3a\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#726)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T05:14:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "996575cdd4ee826cdad51aa67320db349be30702",
          "body": "feat: when available source device id from themis' JWT claims instead from the request headers",
          "is_bot": false,
          "headline": "Merge pull request #725 from xmidt-org/denopink/feat/device-id-hardening",
          "author_name": "Owen Cabalceta",
          "author_login": "denopink",
          "committed_at": "2026-06-17T16:32:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1eaf34704f21a9733f22ab94c5fa7189a44a640d",
          "body": "… from the request headers\n\ndevice id is used to manage devices in talaria, using the device id from themis' JWT claims will ensure future device identity hardening (i.e. mac provided via device cert) will be inherited by talaria by default",
          "is_bot": false,
          "headline": "feat: when available source device id from themis' JWT claims instead…",
          "author_name": "Owen Cabalceta",
          "author_login": "denopink",
          "committed_at": "2026-06-17T16:28:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb9e31d3f0e8c6fe2e3742eda9c8aaf364bbd776",
          "body": "update wrpkafka and fix breaking change",
          "is_bot": false,
          "headline": "Merge pull request #724 from xmidt-org/wrpkafka",
          "author_name": "marcia-piccione",
          "author_login": "piccione99",
          "committed_at": "2026-06-15T23:54:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3091a1cdfe152aa40e86f2e2bc8a637a787ac7cd",
          "body": null,
          "is_bot": false,
          "headline": "update wrpkafka and fix breaking change",
          "author_name": "piccione99",
          "author_login": "piccione99",
          "committed_at": "2026-06-15T23:17:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "725e17fc2ce083f80a384a197043db831abff284",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.3 to 4.12.4.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7b10cbd74790a5af49be5755ff835a229d2896af...22e2a0c03b721ab\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#722)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T05:29:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ef89591347bd6415f689a967a9641dc1853162e0",
          "body": "….yml (#721)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.3 to 4.12.4.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7b10cbd74790a5af49be5755ff835a229\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T05:25:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d856c89911774dc7b3cc13a73235ed79db91744b",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/proj.yml](https://github.com/xmidt-org/shared-go) from 4.12.3 to 4.12.4.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7b10cbd74790a5af49be5755ff835a229d2896af...22e2a0c03b721\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/proj.yml (#723)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T05:21:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a583b338377636e7b0cb65d06704047e78fb4109",
          "body": "…dabot.yml (#720)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.3 to 4.12.4.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/7b10cbd74790a5af49be575\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T05:18:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7962e6e773ab3f9e75fabc5845f35a9cc9caaa3e",
          "body": "Fix Linter Issues",
          "is_bot": false,
          "headline": "Merge pull request #718 from xmidt-org/fixLinterIssues",
          "author_name": "Serena Zam",
          "author_login": "renaz6",
          "committed_at": "2026-06-11T17:43:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1767e311b06aef8c4c4776127a520381d2086e6",
          "body": null,
          "is_bot": false,
          "headline": "removed unused code",
          "author_name": "Serena Zamarripa",
          "author_login": "renaz6",
          "committed_at": "2026-06-11T17:38:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73153b81b1a70713eb010fc1158854450cb69580",
          "body": "…717)\n\nBumps [github.com/xmidt-org/bascule](https://github.com/xmidt-org/bascule) from 1.1.1 to 1.1.3.\n- [Release notes](https://github.com/xmidt-org/bascule/releases)\n- [Changelog](https://github.com/xmidt-org/bascule/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/xmidt-org/bascule/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/bascule from 1.1.1 to 1.1.3 (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-11T05:15:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f39c1de73af4cd04e99ac463ea883a38f6b9942",
          "body": "… (#712)\n\nBumps [github.com/xmidt-org/wrpkafka](https://github.com/xmidt-org/wrpkafka) from 0.1.20 to 0.1.21.\n- [Release notes](https://github.com/xmidt-org/wrpkafka/releases)\n- [Commits](https://github.com/xmidt-org/wrpkafka/compare/v0.1.20...v0.1.21)\n\n---\nupdated-dependencies:\n- dependency-name: g\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/xmidt-org/wrpkafka from 0.1.20 to 0.1.21…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T18:04:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21009de40b7813d7f60af4086424b894d2e4f1ec",
          "body": "Update to bascule v1",
          "is_bot": false,
          "headline": "Merge pull request #702 from xmidt-org/updateBascule",
          "author_name": "Serena Zam",
          "author_login": "renaz6",
          "committed_at": "2026-06-10T17:59:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d750ebe0de16c46552d737da18d0076ac9b389d",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into updateBascule",
          "author_name": "Serena Zam",
          "author_login": "renaz6",
          "committed_at": "2026-06-10T17:56:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5d8c3e5acfbcc074e05798bca286d86986b56a6",
          "body": null,
          "is_bot": false,
          "headline": "More unit tests for primary handler",
          "author_name": "Serena Zamarripa",
          "author_login": "renaz6",
          "committed_at": "2026-06-10T17:50:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b63182247a302d2d08a009735658ae3c4ba0cc7c",
          "body": "….yml (#714)\n\nBumps [xmidt-org/shared-go/.github/workflows/auto-releaser.yml](https://github.com/xmidt-org/shared-go) from 4.12.2 to 4.12.3.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/aacf75acd5f8ac6f3c704d5d6dc1c95dd\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/auto-releaser…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T05:26:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4efcc5f2aa04b5b00237ae08e2cdbbf2e991b8c5",
          "body": "…dabot.yml (#716)\n\nBumps [xmidt-org/shared-go/.github/workflows/approve-dependabot.yml](https://github.com/xmidt-org/shared-go) from 4.12.2 to 4.12.3.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/aacf75acd5f8ac6f3c704d5\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/approve-depen…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T05:22:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "85a9c8c85c4f2b304628fb88239b1a3070fac1df",
          "body": "Bumps [xmidt-org/shared-go/.github/workflows/ci.yml](https://github.com/xmidt-org/shared-go) from 4.12.1 to 4.12.3.\n- [Release notes](https://github.com/xmidt-org/shared-go/releases)\n- [Commits](https://github.com/xmidt-org/shared-go/compare/57ba143c955a78f7ff52b7f902e11b3f6b39b19a...7b10cbd74790a5a\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump xmidt-org/shared-go/.github/workflows/ci.yml (#713)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-10T05:18:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 365,
      "latest_release_at": "2026-07-24T13:54:14Z",
      "latest_release_tag": "v0.20.7",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 43,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 4.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/xmidt-org/talaria",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/xmidt-org/talaria",
          "is_deprecated": false,
          "latest_version": "v0.20.7",
          "repository_url": "https://github.com/xmidt-org/talaria",
          "versions_count": 134,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-24T05:25:33Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 24,
      "stars": 11,
      "watchers": 21,
      "fork_history": {
        "days": [
          {
            "date": "2018-05-14",
            "count": 1
          },
          {
            "date": "2018-08-16",
            "count": 1
          },
          {
            "date": "2018-08-30",
            "count": 1
          },
          {
            "date": "2018-09-27",
            "count": 1
          },
          {
            "date": "2019-02-02",
            "count": 1
          },
          {
            "date": "2019-08-09",
            "count": 1
          },
          {
            "date": "2019-10-23",
            "count": 1
          },
          {
            "date": "2020-10-14",
            "count": 1
          },
          {
            "date": "2021-04-29",
            "count": 1
          },
          {
            "date": "2021-08-12",
            "count": 1
          },
          {
            "date": "2022-04-20",
            "count": 1
          },
          {
            "date": "2022-05-24",
            "count": 1
          },
          {
            "date": "2022-06-18",
            "count": 1
          },
          {
            "date": "2022-08-17",
            "count": 1
          },
          {
            "date": "2023-04-26",
            "count": 1
          },
          {
            "date": "2023-05-18",
            "count": 1
          },
          {
            "date": "2023-07-25",
            "count": 1
          },
          {
            "date": "2024-04-16",
            "count": 1
          },
          {
            "date": "2024-08-12",
            "count": 1
          },
          {
            "date": "2024-09-22",
            "count": 1
          },
          {
            "date": "2025-03-27",
            "count": 1
          },
          {
            "date": "2026-01-14",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 22,
        "total_forks": 24
      },
      "star_history": null,
      "open_issues_and_prs": 38
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "cmd/device-simulator/go.mod",
        "go.mod"
      ],
      "largest_source_bytes": 47128,
      "source_files_sampled": 40,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/golang-jwt/jwt",
            "direct": true,
            "version": "v3.2.2+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh63-6h87-95cp",
              "GO-2025-3553"
            ],
            "fixed_version": "5.2.2",
            "advisory_count": 2,
            "oldest_advisory_days": 498
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 25
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1,
          "unknown": 1
        },
        "advisory_count": 3,
        "affected_count": 2,
        "assessed_count": 157,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/fatih/structs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/go-kit/kit",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.13.0"
        },
        {
          "name": "github.com/golang-jwt/jwt",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.2.2+incompatible"
        },
        {
          "name": "github.com/goph/emperror",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.17.3-0.20190703203600-60a8d9faa17b"
        },
        {
          "name": "github.com/gorilla/mux",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/gorilla/websocket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.3"
        },
        {
          "name": "github.com/justinas/alice",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.24.0"
        },
        {
          "name": "github.com/prometheus/client_model",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "github.com/segmentio/ksuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.4"
        },
        {
          "name": "github.com/spf13/cast",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/spf13/pflag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.10"
        },
        {
          "name": "github.com/spf13/viper",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.0"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/kafka",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        },
        {
          "name": "github.com/thedevsaddam/gojsonq/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.5.2"
        },
        {
          "name": "github.com/twmb/franz-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.5"
        },
        {
          "name": "github.com/xmidt-org/bascule",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.6"
        },
        {
          "name": "github.com/xmidt-org/candlelight",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.15"
        },
        {
          "name": "github.com/xmidt-org/clortho",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.15"
        },
        {
          "name": "github.com/xmidt-org/httpaux",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.3"
        },
        {
          "name": "github.com/xmidt-org/sallust",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.8"
        },
        {
          "name": "github.com/xmidt-org/touchstone",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.8"
        },
        {
          "name": "github.com/xmidt-org/webpa-common/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.9.0"
        },
        {
          "name": "github.com/xmidt-org/wrp-go/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.7.0"
        },
        {
          "name": "github.com/xmidt-org/wrp-go/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.4.3"
        },
        {
          "name": "github.com/xmidt-org/wrpkafka",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.24"
        },
        {
          "name": "go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.69.0"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/fatih/structs",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-kit/kit",
            "direct": true,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt",
            "direct": true,
            "version": "v3.2.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goph/emperror",
            "direct": true,
            "version": "v0.17.3-0.20190703203600-60a8d9faa17b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": true,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": true,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/justinas/alice",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/ksuid",
            "direct": true,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": true,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": true,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go",
            "direct": true,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/kafka",
            "direct": true,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/thedevsaddam/gojsonq/v2",
            "direct": true,
            "version": "v2.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/twmb/franz-go",
            "direct": true,
            "version": "v1.21.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/bascule",
            "direct": true,
            "version": "v1.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/candlelight",
            "direct": true,
            "version": "v0.2.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/clortho",
            "direct": true,
            "version": "v0.1.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/httpaux",
            "direct": true,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/sallust",
            "direct": true,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/touchstone",
            "direct": true,
            "version": "v0.1.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/webpa-common/v2",
            "direct": true,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/wrp-go/v3",
            "direct": true,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/wrp-go/v5",
            "direct": true,
            "version": "v5.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/wrpkafka",
            "direct": true,
            "version": "v0.1.24",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux",
            "direct": true,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/armon/go-metrics",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/billhathaway/consistenthash",
            "direct": false,
            "version": "v0.0.0-20140718022140-addea16d2229",
            "ecosystem": "go"
          },
          {
            "name": "github.com/c9s/goprocinfo",
            "direct": false,
            "version": "v0.0.0-20210130143923-c95fcf8c64a8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/dockercfg",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
            "direct": false,
            "version": "v4.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-kit/log",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logfmt/logfmt",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.2.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-zookeeper/zk",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/schema",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/consul/api",
            "direct": false,
            "version": "v1.33.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-hclog",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-immutable-radix",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-rootcerts",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru",
            "direct": false,
            "version": "v0.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/serf",
            "direct": false,
            "version": "v0.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/influxdata/influxdb1-client",
            "direct": false,
            "version": "v0.0.0-20220302092344-a9ab5670611c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jtacoma/uritemplates",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/blackmagic",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/httpcc",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/httprc",
            "direct": false,
            "version": "v1.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/iter",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/jwx/v2",
            "direct": false,
            "version": "v2.1.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/option",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20211012122336-39d0f177ccd0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/go-archive",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/api",
            "direct": false,
            "version": "v1.54.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/client",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/openzipkin/zipkin-go",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/philhofer/fwd",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.26",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.70.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.26.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spaolacci/murmur3",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tinylib/msgp",
            "direct": false,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.3.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/twmb/franz-go/pkg/kmsg",
            "direct": false,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/twmb/franz-go/plugin/kprom",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ugorji/go/codec",
            "direct": false,
            "version": "v1.2.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vividcortex/gohistogram",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/chronon",
            "direct": false,
            "version": "v0.1.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xmidt-org/eventor",
            "direct": false,
            "version": "v1.0.49",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.65.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/jaeger",
            "direct": false,
            "version": "v1.17.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/zipkin",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/dig",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/fx",
            "direct": false,
            "version": "v1.24.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20250808145144-a408d31f581a",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260622175928-b703f567277d",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260622175928-b703f567277d",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/natefinch/lumberjack.v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 157,
        "direct_count": 30,
        "indirect_count": 127
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 3,
        "merged_prs": 613,
        "open_issues": 35,
        "closed_ratio": 0.739,
        "closed_issues": 99,
        "closed_unmerged_prs": 64
      },
      "bus_factor": 3,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "johnabass",
          "commits": 220,
          "avatar_url": "https://avatars.githubusercontent.com/u/14283200?v=4"
        },
        {
          "type": "User",
          "login": "denopink",
          "commits": 151,
          "avatar_url": "https://avatars.githubusercontent.com/u/12867159?v=4"
        },
        {
          "type": "User",
          "login": "piccione99",
          "commits": 102,
          "avatar_url": "https://avatars.githubusercontent.com/u/2779769?v=4"
        },
        {
          "type": "User",
          "login": "schmidtw",
          "commits": 70,
          "avatar_url": "https://avatars.githubusercontent.com/u/698825?v=4"
        },
        {
          "type": "User",
          "login": "renaz6",
          "commits": 46,
          "avatar_url": "https://avatars.githubusercontent.com/u/35239392?v=4"
        },
        {
          "type": "User",
          "login": "maurafortino",
          "commits": 43,
          "avatar_url": "https://avatars.githubusercontent.com/u/36904159?v=4"
        },
        {
          "type": "User",
          "login": "kcajmagic",
          "commits": 30,
          "avatar_url": "https://avatars.githubusercontent.com/u/5015672?v=4"
        },
        {
          "type": "User",
          "login": "joe94",
          "commits": 29,
          "avatar_url": "https://avatars.githubusercontent.com/u/5404231?v=4"
        },
        {
          "type": "User",
          "login": "kristinapathak",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/17073792?v=4"
        },
        {
          "type": "User",
          "login": "njharter",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/17053033?v=4"
        }
      ],
      "contributors_sampled": 25,
      "top_contributor_share": 0.293
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "approve-dependabot.yml",
        "auto-releaser.yml",
        "ci.yml",
        "proj.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 6,
            "reason": "dependency not pinned by hash detected -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 9,
            "reason": "SAST tool is not run on all commits -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9a230268086f788bef73690509a35933039645b6",
        "ran_at": "2026-08-02T00:56:52Z",
        "aggregate_score": 6.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-08-01T13:26:12Z",
      "oldest_open_prs": [
        {
          "number": 804,
          "created_at": "2026-07-27T05:14:14Z",
          "last_comment_at": "2026-07-27T05:16:12Z",
          "last_comment_author": "codecov"
        },
        {
          "number": 809,
          "created_at": "2026-07-28T05:12:40Z",
          "last_comment_at": "2026-07-28T05:15:13Z",
          "last_comment_author": "codecov"
        },
        {
          "number": 814,
          "created_at": "2026-07-29T05:12:50Z",
          "last_comment_at": "2026-07-29T05:14:46Z",
          "last_comment_author": "codecov"
        }
      ],
      "last_merged_pr_at": "2026-07-29T05:25:57Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 54,
          "created_at": "2018-09-13T00:25:50Z",
          "last_comment_at": "2019-05-02T20:42:41Z",
          "last_comment_author": "githubsands"
        },
        {
          "number": 79,
          "created_at": "2018-11-21T23:08:06Z",
          "last_comment_at": "2020-04-13T22:23:11Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 87,
          "created_at": "2019-03-26T23:02:48Z",
          "last_comment_at": "2020-04-13T22:32:06Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 90,
          "created_at": "2019-04-04T22:58:01Z",
          "last_comment_at": "2020-06-04T21:43:30Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 91,
          "created_at": "2019-04-04T23:02:33Z",
          "last_comment_at": "2020-04-20T21:44:57Z",
          "last_comment_author": "schmidtw"
        },
        {
          "number": 103,
          "created_at": "2019-09-04T17:34:54Z",
          "last_comment_at": "2020-04-06T22:17:54Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 104,
          "created_at": "2019-09-25T21:03:30Z",
          "last_comment_at": "2020-04-06T22:30:28Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 111,
          "created_at": "2019-11-06T21:43:54Z",
          "last_comment_at": "2020-05-04T22:21:53Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 113,
          "created_at": "2019-12-02T19:27:28Z",
          "last_comment_at": "2023-12-06T09:00:22Z",
          "last_comment_author": "Sachin4403"
        },
        {
          "number": 128,
          "created_at": "2020-05-08T19:01:59Z",
          "last_comment_at": "2020-05-11T21:54:17Z",
          "last_comment_author": "joe94"
        },
        {
          "number": 152,
          "created_at": "2020-08-07T19:33:20Z",
          "last_comment_at": "2020-08-10T18:26:34Z",
          "last_comment_author": "kristinapathak"
        },
        {
          "number": 153,
          "created_at": "2020-08-24T22:54:55Z",
          "last_comment_at": "2022-04-22T21:14:24Z",
          "last_comment_author": "kristinapathak"
        },
        {
          "number": 157,
          "created_at": "2020-08-27T18:25:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 165,
          "created_at": "2020-12-08T22:06:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 174,
          "created_at": "2021-03-25T23:02:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 240,
          "created_at": "2022-08-03T15:41:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 241,
          "created_at": "2022-08-03T15:44:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 243,
          "created_at": "2022-08-08T20:47:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 244,
          "created_at": "2022-08-08T20:48:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 250,
          "created_at": "2022-08-26T19:44:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/xmidt-org/talaria",
    "host": "github.com",
    "name": "talaria",
    "owner": "xmidt-org"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 75,
      "inputs": {
        "security": 66,
        "vitality": 92,
        "community": 51,
        "governance": 79,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "commits_last_year": 365,
              "human_commit_share": 0.14,
              "days_since_last_push": 3,
              "active_weeks_last_year": 43
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "43/52 weeks with commits",
                "points": 29.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 43
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "365 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 365
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v0.20.7",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 4.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~4.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 4.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 9,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 9 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 51,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "forks": 24,
              "stars": 11,
              "watchers": 21,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "11 stars",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "24 forks",
                "points": 11.3,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "21 watchers",
                "points": 7.2,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 79,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 25,
              "top_contributor_share": 0.293
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 29% of commits",
                "points": 15.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 29
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "25 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 25
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "merged_prs": 613,
              "open_issues": 35,
              "closed_issues": 99,
              "issue_closed_ratio": 0.739,
              "closed_unmerged_prs": 64
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "74% of issues closed",
                "points": 34.5,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 74
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "613/677 decided PRs merged",
                "points": 34.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 613,
                      "decided": 677
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "followers": 12,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "xmidt-org",
              "public_repos": 122,
              "account_age_days": 2591
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "12 followers of xmidt-org",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 12,
                      "login": "xmidt-org"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "122 public repos, account ~7 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 122
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/xmidt-org/talaria"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "134 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 134
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 6",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 157 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 157
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 2,
              "assessed_packages": 157,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1, unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: github.com/golang-jwt/jwt v3.2.2+incompatible (high 7.5)",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "github.com/golang-jwt/jwt v3.2.2+incompatible (high 7.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 498 days ago",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 498
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 157,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": "Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "legible_commit_history"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": null,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 86,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "cmd/device-simulator/go.mod",
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.86
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "86 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 86,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 47128,
              "source_files_sampled": 40,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/40 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 40,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-02T00:57:16.371235Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/x/xmidt-org/talaria.svg",
  "full_name": "xmidt-org/talaria",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

相关记录

与 xmidt-org/talaria 共享目录标签或生态系统的已检测仓库。 并排阅读 →

94wandb/wandbThe AI developer platform. Use Weights & Biases to train and fine-tune models, and manage models from experimentation to production.优秀93apache/airflowApache Airflow - A platform to programmatically author, schedule, and monitor workflows优秀92moby/mobyThe Moby Project - a collaborative project for the container ecosystem to assemble container-based systems优秀92envoyproxy/envoyCloud-native high-performance edge/middle/service proxy优秀91pingcap/tidbTiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.优秀91hashicorp/consulConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.优秀

评分是信号，而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计，也不是安全保证。

缺失数据将被剔除并重新归一化权重，绝不按零分计。方法论已版本化并公开：指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置： 汇总统计 — Go.