{
  "schema_version": "1.0",
  "bundle_kind": "kaos-compliance.package",
  "package": "kaos-citations",
  "version": "0.1.2",
  "snapshot_slice": {
    "name": "kaos-citations",
    "identity": {
      "pypi_version": "0.1.2",
      "pypi_url": "https://pypi.org/project/kaos-citations/0.1.2/",
      "main_head_sha": "bdfe50f870c0590088bb8b43aa458f6f4ba96492",
      "latest_tag": "v0.1.2",
      "latest_tag_sha": "0be92bc4dc478ab4fdf24b24958c16af8c0d2272",
      "tag_at_head": false,
      "commits_past_tag": null,
      "repo_visibility": "public",
      "last_commit_at": "2026-06-22T15:49:11Z"
    },
    "ci": {
      "workflow_conclusion": "success",
      "workflow_run_id": 27965431294,
      "workflow_run_url": "https://github.com/273v/kaos-citations/actions/runs/27965431294",
      "head_sha": "bdfe50f870c0590088bb8b43aa458f6f4ba96492",
      "run_completed_at": "2026-06-22T15:52:56Z",
      "matrix": [
        {
          "name": "test (macos-arm64 / Python 3.13)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:03:45Z",
          "completed_at": "2026-06-22T07:04:08Z",
          "duration_seconds": 23
        },
        {
          "name": "test (linux-x64 / Python 3.14t)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:04:43Z",
          "completed_at": "2026-06-22T07:04:59Z",
          "duration_seconds": 16
        },
        {
          "name": "test (linux-x64 / Python 3.14)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:04:44Z",
          "completed_at": "2026-06-22T07:04:58Z",
          "duration_seconds": 14
        },
        {
          "name": "test (windows-x64 / Python 3.13)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:03:45Z",
          "completed_at": "2026-06-22T07:04:37Z",
          "duration_seconds": 52
        },
        {
          "name": "test (linux-x64 / Python 3.15)",
          "conclusion": "failure",
          "status": "completed",
          "started_at": "2026-06-22T07:04:49Z",
          "completed_at": "2026-06-22T07:04:59Z",
          "duration_seconds": 10
        }
      ]
    },
    "security": {
      "workflow_conclusion": "success",
      "workflow_run_id": 27965431346,
      "workflow_run_url": "https://github.com/273v/kaos-citations/actions/runs/27965431346",
      "jobs": [
        {
          "name": "gitleaks (incremental)",
          "conclusion": "success",
          "status": "completed",
          "completed_at": "2026-06-22T15:49:28Z"
        },
        {
          "name": "bandit (static security)",
          "conclusion": "success",
          "status": "completed",
          "completed_at": "2026-06-22T15:49:31Z"
        },
        {
          "name": "vulture (dead-code scan)",
          "conclusion": "success",
          "status": "completed",
          "completed_at": "2026-06-22T15:49:36Z"
        }
      ],
      "run_completed_at": "2026-06-22T15:49:37Z"
    },
    "open_prs": {
      "count": 0,
      "titles": []
    },
    "freshness": {
      "days_since_last_commit": 1,
      "days_since_last_release": 29,
      "days_since_last_security_scan": 1
    },
    "supply_chain": {
      "pypi_version": "0.1.2",
      "pypi_release_iso": "2026-05-25T18:25:48.977327Z",
      "wheel_platforms": [
        "any"
      ],
      "wheel_sha256s": {
        "kaos_citations-0.1.2-py3-none-any.whl": "1fa9db06ca591ca274d1656c2c14be1b0d7c1c7000b1fefc2341508d81c4fbe5",
        "kaos_citations-0.1.2.tar.gz": "49acfedf10d17903981a4eef90ae6d8a0ed485a77dc0f0b8503f8e4bad7a0715"
      },
      "is_abi3": false,
      "has_musllinux_wheel": false,
      "license_expression": "Apache-2.0",
      "license_files_in_wheel": [
        "LICENSE",
        "NOTICE"
      ],
      "attestations": {
        "pep740_present": true,
        "publisher_kind": "GitHub",
        "publisher_source_repo": "273v/kaos-citations",
        "publisher_workflow_ref": "release.yml@pypi",
        "rekor_log_index": 1630612340,
        "verified_count": 2,
        "total_count": 2
      },
      "sbom": {
        "components_count": 61,
        "license_breakdown": {
          "MIT": 29,
          "MPL-2.0": 1,
          "BSD-3-Clause": 12,
          "BSD-2-Clause": 4,
          "Apache-2.0": 8,
          "Apache-2.0 OR BSD-3-Clause": 1,
          "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0": 1,
          "Apache-2.0 OR BSD-2-Clause": 1,
          "Python-2.0": 1,
          "LicenseRef-unknown-df4fa55c": 1,
          "ISC": 1,
          "PSF-2.0": 1
        },
        "weak_copyleft": [
          "certifi"
        ],
        "strong_copyleft": [],
        "unknown_license": [
          "regex"
        ],
        "sbom_artifact_path": "data/sbom/kaos-citations-0.1.2.cdx.json"
      },
      "errors": []
    },
    "governance": {
      "dco_signoff_rate_90d": 0.85,
      "conventional_commits_rate_90d": 0.8,
      "verified_commit_ratio_90d": 0.8,
      "commits_90d": 40,
      "unique_committers_90d": 2,
      "branch_protection_enabled": true,
      "branch_protection_summary": {
        "source": "branches_api",
        "required_status_checks": {
          "enforcement_level": "everyone",
          "contexts": [
            "bandit (static security)",
            "vulture (dead-code scan)",
            "quality",
            "test",
            "build",
            "gitleaks (incremental)"
          ],
          "checks": [
            {
              "context": "bandit (static security)",
              "app_id": 15368
            },
            {
              "context": "vulture (dead-code scan)",
              "app_id": 15368
            },
            {
              "context": "quality",
              "app_id": 15368
            },
            {
              "context": "test",
              "app_id": 15368
            },
            {
              "context": "build",
              "app_id": 15368
            },
            {
              "context": "gitleaks (incremental)",
              "app_id": 15368
            }
          ]
        },
        "required_pull_request_reviews": null,
        "required_signatures": null
      },
      "codeowners_path": ".github/CODEOWNERS",
      "security_md_present": true,
      "security_md_disclosure_window_days": 90,
      "notice_present": true,
      "license_files_in_sdist": [
        "LICENSE",
        "NOTICE"
      ],
      "releases_90d": 8,
      "median_pr_age_days": null,
      "open_pr_count": 0,
      "open_issue_count": 0,
      "time_to_pypi_seconds_median": 190,
      "errors": []
    },
    "code_metrics": {
      "python": {
        "src_loc": 7788,
        "tests_loc": 2486,
        "src_files": 30,
        "tests_files": 22,
        "tests_count": 282
      },
      "rust": {
        "src_loc": 0,
        "tests_loc": 0,
        "src_files": 0,
        "tests_files": 0,
        "tests_count": 0
      },
      "errors": []
    },
    "errors": []
  },
  "sbom": {
    "mirror_path": "api/v1/sbom/kaos-citations-0.1.2.cdx.json",
    "github_release_url": "https://github.com/273v/kaos-citations/releases/download/v0.1.2/kaos-citations-0.1.2.cdx.json"
  },
  "attestation": {
    "present": true,
    "publisher_kind": "GitHub",
    "publisher_source_repo": "273v/kaos-citations",
    "publisher_workflow_ref": "release.yml@pypi",
    "rekor_log_index": 1630612340,
    "verified_count": 2,
    "total_count": 2,
    "pypi_simple_index_url": "https://pypi.org/simple/kaos-citations/"
  }
}