{ "schema_version": "1.0", "bundle_kind": "kaos-compliance.package", "package": "kaos-ml-core", "version": "0.1.3", "snapshot_slice": { "name": "kaos-ml-core", "identity": { "pypi_version": "0.1.3", "pypi_url": "https://pypi.org/project/kaos-ml-core/0.1.3/", "main_head_sha": "22960d968d03814842aa368d0ba9ef901a2d9d34", "latest_tag": "v0.1.3", "latest_tag_sha": "22960d968d03814842aa368d0ba9ef901a2d9d34", "tag_at_head": true, "commits_past_tag": null, "repo_visibility": "public", "last_commit_at": "2026-06-23T20:23:12Z" }, "ci": { "workflow_conclusion": "success", "workflow_run_id": 28054578191, "workflow_run_url": "https://github.com/273v/kaos-ml-core/actions/runs/28054578191", "head_sha": "22960d968d03814842aa368d0ba9ef901a2d9d34", "run_completed_at": "2026-06-23T20:36:24Z", "matrix": [ { "name": "test (linux-x64 / Python 3.15)", "conclusion": "failure", "status": "completed", "started_at": "2026-06-22T07:05:40Z", "completed_at": "2026-06-22T07:06:18Z", "duration_seconds": 38 }, { "name": "test (linux-x64 / Python 3.14t)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:06:16Z", "completed_at": "2026-06-22T07:07:53Z", "duration_seconds": 97 }, { "name": "test (linux-x64 / Python 3.14)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:05:45Z", "completed_at": "2026-06-22T07:07:06Z", "duration_seconds": 81 }, { "name": "test (macos-arm64 / Python 3.13)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:03:52Z", "completed_at": "2026-06-22T07:05:16Z", "duration_seconds": 84 }, { "name": "test (windows-x64 / Python 3.13)", "conclusion": "success", "status": "completed", "started_at": "2026-06-22T07:03:51Z", "completed_at": "2026-06-22T07:06:10Z", "duration_seconds": 139 } ] }, "security": { "workflow_conclusion": "success", "workflow_run_id": 28054577288, "workflow_run_url": "https://github.com/273v/kaos-ml-core/actions/runs/28054577288", "jobs": [ { "name": "gitleaks (incremental)", "conclusion": "success", "status": "completed", "completed_at": "2026-06-23T20:23:28Z" }, { "name": "bandit (static security)", "conclusion": "success", "status": "completed", "completed_at": "2026-06-23T20:23:33Z" }, { "name": "vulture (dead-code scan)", "conclusion": "success", "status": "completed", "completed_at": "2026-06-23T20:23:33Z" } ], "run_completed_at": "2026-06-23T20:23:34Z" }, "open_prs": { "count": 0, "titles": [] }, "freshness": { "days_since_last_commit": 0, "days_since_last_release": 0, "days_since_last_security_scan": 0 }, "supply_chain": { "pypi_version": "0.1.3", "pypi_release_iso": "2026-06-23T20:29:02.686707Z", "wheel_platforms": [ "macos-arm64", "linux-aarch64-manylinux_2_28", "linux-x86_64-manylinux_2_28", "win-amd64", "win-arm64" ], "wheel_sha256s": { "kaos_ml_core-0.1.3-cp313-abi3-macosx_11_0_arm64.whl": "827ee0e05d614e78c9df76e48fadac74c35c28d553312d806313a241e4a02069", "kaos_ml_core-0.1.3-cp313-abi3-manylinux_2_28_aarch64.whl": "dd083cd07429a9c6eb49919b233a81ef305f32a94651c90eb89a48e9cdc534aa", "kaos_ml_core-0.1.3-cp313-abi3-manylinux_2_28_x86_64.whl": "55f2383f890cc6ae2d57a6692d22ea7499e8dddfbc0e0edd78da6d65427666bd", "kaos_ml_core-0.1.3-cp313-abi3-win_amd64.whl": "6109a99a13aa4ba21234f9d6ccd9d6f3c009842f4701d3fb29bb49ee4bef1fc7", "kaos_ml_core-0.1.3-cp313-abi3-win_arm64.whl": "36d8533cf9a8e64386cc2cf649992323d95f31a477f0aed3cd203e3f1857803a", "kaos_ml_core-0.1.3.tar.gz": "bf2874e15228485f36469a151f9ad02d09ab7d23cedee748b7887889dfc7ab4c" }, "is_abi3": true, "has_musllinux_wheel": false, "license_expression": "Apache-2.0", "license_files_in_wheel": [ "LICENSE", "NOTICE" ], "attestations": { "pep740_present": true, "publisher_kind": "GitHub", "publisher_source_repo": "273v/kaos-ml-core", "publisher_workflow_ref": "release.yml@pypi", "rekor_log_index": 1931216964, "verified_count": 6, "total_count": 6 }, "sbom": { "components_count": 91, "license_breakdown": { "MIT": 36, "MPL-2.0": 1, "BSD-3-Clause": 16, "Apache-2.0": 13, "Apache-2.0 OR BSD-3-Clause": 1, "MIT OR Apache-2.0": 12, "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0": 1, "Apache-2.0 OR BSD-2-Clause": 1, "MIT-CMU": 1, "BSD-2-Clause": 2, "Python-2.0": 1, "ISC": 1, "MPL-2.0 AND MIT": 1, "PSF-2.0": 1, "Apache-2.0 OR MIT": 1, "Apache-2.0 WITH LLVM-exception": 1, "(MIT OR Apache-2.0) AND Unicode-3.0": 1 }, "weak_copyleft": [ "certifi", "tqdm" ], "strong_copyleft": [], "unknown_license": [], "sbom_artifact_path": "data/sbom/kaos-ml-core-0.1.3.cdx.json" }, "errors": [] }, "governance": { "dco_signoff_rate_90d": 0.547, "conventional_commits_rate_90d": 0.75, "verified_commit_ratio_90d": 0.422, "commits_90d": 64, "unique_committers_90d": 2, "branch_protection_enabled": true, "branch_protection_summary": { "source": "branches_api", "required_status_checks": { "enforcement_level": "everyone", "contexts": [ "bandit (static security)", "vulture (dead-code scan)", "quality", "test", "rust-test (no PyO3)", "build", "gitleaks (incremental)" ], "checks": [ { "context": "bandit (static security)", "app_id": 15368 }, { "context": "vulture (dead-code scan)", "app_id": 15368 }, { "context": "quality", "app_id": 15368 }, { "context": "test", "app_id": 15368 }, { "context": "rust-test (no PyO3)", "app_id": 15368 }, { "context": "build", "app_id": 15368 }, { "context": "gitleaks (incremental)", "app_id": 15368 } ] }, "required_pull_request_reviews": null, "required_signatures": null }, "codeowners_path": ".github/CODEOWNERS", "security_md_present": true, "security_md_disclosure_window_days": 90, "notice_present": true, "license_files_in_sdist": [ "LICENSE", "NOTICE" ], "releases_90d": 9, "median_pr_age_days": null, "open_pr_count": 0, "open_issue_count": 0, "time_to_pypi_seconds_median": 242, "errors": [] }, "code_metrics": { "python": { "src_loc": 2966, "tests_loc": 2789, "src_files": 19, "tests_files": 29, "tests_count": 210 }, "rust": { "src_loc": 45, "tests_loc": 0, "src_files": 5, "tests_files": 0, "tests_count": 1 }, "errors": [] }, "errors": [] }, "sbom": { "mirror_path": "api/v1/sbom/kaos-ml-core-0.1.3.cdx.json", "github_release_url": "https://github.com/273v/kaos-ml-core/releases/download/v0.1.3/kaos-ml-core-0.1.3.cdx.json" }, "attestation": { "present": true, "publisher_kind": "GitHub", "publisher_source_repo": "273v/kaos-ml-core", "publisher_workflow_ref": "release.yml@pypi", "rekor_log_index": 1931216964, "verified_count": 6, "total_count": 6, "pypi_simple_index_url": "https://pypi.org/simple/kaos-ml-core/" } }