{ "schema_version": "1.0", "bundle_kind": "kaos-compliance.package", "package": "kaos-graph", "version": "0.1.4", "snapshot_slice": { "name": "kaos-graph", "identity": { "pypi_version": "0.1.4", "pypi_url": "https://pypi.org/project/kaos-graph/0.1.4/", "main_head_sha": "86e8136fc2a2e708be05516e718549a8710ed66a", "latest_tag": "v0.1.4", "latest_tag_sha": "cf3b8cb658c69415f9c924334b1dd902d151ae27", "tag_at_head": false, "commits_past_tag": null, "repo_visibility": "public", "last_commit_at": "2026-06-22T15:47:41Z" }, "ci": { "workflow_conclusion": "success", "workflow_run_id": 27965338389, "workflow_run_url": "https://github.com/273v/kaos-graph/actions/runs/27965338389", "head_sha": "86e8136fc2a2e708be05516e718549a8710ed66a", "run_completed_at": "2026-06-22T15:52:18Z", "matrix": [ { "name": "test (linux-x64 / Python 3.14t)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:07:28Z", "completed_at": "2026-06-22T07:08:58Z", "duration_seconds": 90 }, { "name": "test (macos-arm64 / Python 3.13)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:05:13Z", "completed_at": "2026-06-22T07:06:53Z", "duration_seconds": 100 }, { "name": "test (windows-x64 / Python 3.13)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:04:51Z", "completed_at": "2026-06-22T07:08:42Z", "duration_seconds": 231 }, { "name": "test (linux-x64 / Python 3.15)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:08:14Z", "completed_at": "2026-06-22T07:10:08Z", "duration_seconds": 114 }, { "name": "test (linux-x64 / Python 3.14)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:07:44Z", "completed_at": "2026-06-22T07:09:36Z", "duration_seconds": 112 } ] }, "security": { "workflow_conclusion": "success", "workflow_run_id": 27965338444, "workflow_run_url": "https://github.com/273v/kaos-graph/actions/runs/27965338444", "jobs": [ { "name": "bandit (static security)", "conclusion": "success", "status": "completed", "completed_at": "2026-06-22T15:47:57Z" }, { "name": "gitleaks (incremental)", "conclusion": "success", "status": "completed", "completed_at": "2026-06-22T15:47:54Z" }, { "name": "vulture (dead-code scan)", "conclusion": "success", "status": "completed", "completed_at": "2026-06-22T15:48:00Z" } ], "run_completed_at": "2026-06-22T15:48:00Z" }, "open_prs": { "count": 0, "titles": [] }, "freshness": { "days_since_last_commit": 1, "days_since_last_release": 21, "days_since_last_security_scan": 1 }, "supply_chain": { "pypi_version": "0.1.4", "pypi_release_iso": "2026-06-02T15:23:46.490409Z", "wheel_platforms": [ "macos-arm64", "linux-aarch64-manylinux_2_28", "linux-x86_64-manylinux_2_28", "win-amd64", "win-arm64" ], "wheel_sha256s": { "kaos_graph-0.1.4-cp313-abi3-macosx_11_0_arm64.whl": "48534a7a531e64d1150467a4074ddaf32f6accc1ec782c3ad21635bd9a542f87", "kaos_graph-0.1.4-cp313-abi3-manylinux_2_28_aarch64.whl": "4dcd6c67fbd715c3625e9e9648f3949480a632d5be2fa06b0c3ae58a740a3bf5", "kaos_graph-0.1.4-cp313-abi3-manylinux_2_28_x86_64.whl": "5c7c828ec83383f88b21993a8d4b8cbb4214922ada4da4d0776073b366b02a4a", "kaos_graph-0.1.4-cp313-abi3-win_amd64.whl": "c0ec983ef730128bb1a52b6aebbdf7a06d3defaa2a2acedd72c8dd5d1092510f", "kaos_graph-0.1.4-cp313-abi3-win_arm64.whl": "dfe84c6ab06babb0dea4b743cbaac81cb95a0215b26b911d9cb749de902a72da", "kaos_graph-0.1.4.tar.gz": "84f628fb517acb38b7f2f91953b4e505e66f4b5890af8028fd1b43ef2a4688d6" }, "is_abi3": true, "has_musllinux_wheel": false, "license_expression": "Apache-2.0", "license_files_in_wheel": [ "LICENSE", "NOTICE" ], "attestations": { "pep740_present": true, "publisher_kind": "GitHub", "publisher_source_repo": "273v/kaos-graph", "publisher_workflow_ref": "release.yml@pypi", "rekor_log_index": 1704310564, "verified_count": 6, "total_count": 6 }, "sbom": { "components_count": 114, "license_breakdown": { "MIT": 35, "MPL-2.0": 1, "BSD-3-Clause": 11, "Apache-2.0": 9, "Apache-2.0 OR BSD-3-Clause": 1, "Python-2.0": 2, "MIT OR Apache-2.0": 37, "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0": 1, "Apache-2.0 OR BSD-2-Clause": 1, "BSD-2-Clause": 1, "ISC": 1, "PSF-2.0": 1, "Apache-2.0 OR MIT": 3, "Zlib": 1, "Unlicense OR MIT": 1, "MIT OR Apache-2.0 OR LGPL-2.1-or-later": 1, "Apache-2.0 OR BSL-1.0": 1, "Apache-2.0 WITH LLVM-exception": 1, "(MIT OR Apache-2.0) AND Unicode-3.0": 1, "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT": 2, "BSD-2-Clause OR Apache-2.0 OR MIT": 2 }, "weak_copyleft": [ "certifi", "r-efi" ], "strong_copyleft": [], "unknown_license": [], "sbom_artifact_path": "data/sbom/kaos-graph-0.1.4.cdx.json" }, "errors": [] }, "governance": { "dco_signoff_rate_90d": 0.809, "conventional_commits_rate_90d": 0.787, "verified_commit_ratio_90d": 0.617, "commits_90d": 47, "unique_committers_90d": 2, "branch_protection_enabled": true, "branch_protection_summary": { "source": "branches_api", "required_status_checks": { "enforcement_level": "everyone", "contexts": [ "bandit (static security)", "vulture (dead-code scan)", "quality", "test", "rust-test (no PyO3)", "build", "gitleaks (incremental)" ], "checks": [ { "context": "bandit (static security)", "app_id": 15368 }, { "context": "vulture (dead-code scan)", "app_id": 15368 }, { "context": "quality", "app_id": 15368 }, { "context": "test", "app_id": 15368 }, { "context": "rust-test (no PyO3)", "app_id": 15368 }, { "context": "build", "app_id": 15368 }, { "context": "gitleaks (incremental)", "app_id": 15368 } ] }, "required_pull_request_reviews": null, "required_signatures": null }, "codeowners_path": ".github/CODEOWNERS", "security_md_present": true, "security_md_disclosure_window_days": 90, "notice_present": true, "license_files_in_sdist": [ "LICENSE", "NOTICE" ], "releases_90d": 10, "median_pr_age_days": null, "open_pr_count": 0, "open_issue_count": 0, "time_to_pypi_seconds_median": 604, "errors": [] }, "code_metrics": { "python": { "src_loc": 3656, "tests_loc": 4563, "src_files": 32, "tests_files": 21, "tests_count": 417 }, "rust": { "src_loc": 6516, "tests_loc": 0, "src_files": 20, "tests_files": 0, "tests_count": 177 }, "errors": [] }, "errors": [] }, "sbom": { "mirror_path": "api/v1/sbom/kaos-graph-0.1.4.cdx.json", "github_release_url": "https://github.com/273v/kaos-graph/releases/download/v0.1.4/kaos-graph-0.1.4.cdx.json" }, "attestation": { "present": true, "publisher_kind": "GitHub", "publisher_source_repo": "273v/kaos-graph", "publisher_workflow_ref": "release.yml@pypi", "rekor_log_index": 1704310564, "verified_count": 6, "total_count": 6, "pypi_simple_index_url": "https://pypi.org/simple/kaos-graph/" } }