{
  "schema_version": "1.0",
  "bundle_kind": "kaos-compliance.package",
  "package": "kaos-source",
  "version": "0.1.4",
  "snapshot_slice": {
    "name": "kaos-source",
    "identity": {
      "pypi_version": "0.1.4",
      "pypi_url": "https://pypi.org/project/kaos-source/0.1.4/",
      "main_head_sha": "d05f0bbf0fcdb92c88f3060a739524f24e75219d",
      "latest_tag": "v0.1.4",
      "latest_tag_sha": "d05f0bbf0fcdb92c88f3060a739524f24e75219d",
      "tag_at_head": true,
      "commits_past_tag": null,
      "repo_visibility": "public",
      "last_commit_at": "2026-06-23T20:21:06Z"
    },
    "ci": {
      "workflow_conclusion": "success",
      "workflow_run_id": 28054449990,
      "workflow_run_url": "https://github.com/273v/kaos-source/actions/runs/28054449990",
      "head_sha": "d05f0bbf0fcdb92c88f3060a739524f24e75219d",
      "run_completed_at": "2026-06-23T20:28:57Z",
      "matrix": [
        {
          "name": "test (macos-arm64 / Python 3.13)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:04:02Z",
          "completed_at": "2026-06-22T07:04:17Z",
          "duration_seconds": 15
        },
        {
          "name": "test (linux-x64 / Python 3.15)",
          "conclusion": "failure",
          "status": "completed",
          "started_at": "2026-06-22T07:05:48Z",
          "completed_at": "2026-06-22T07:05:57Z",
          "duration_seconds": 9
        },
        {
          "name": "test (linux-x64 / Python 3.14t)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:04:55Z",
          "completed_at": "2026-06-22T07:05:11Z",
          "duration_seconds": 16
        },
        {
          "name": "test (windows-x64 / Python 3.13)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:04:03Z",
          "completed_at": "2026-06-22T07:04:47Z",
          "duration_seconds": 44
        },
        {
          "name": "test (linux-x64 / Python 3.14)",
          "conclusion": "success",
          "status": "completed",
          "started_at": "2026-06-22T07:05:40Z",
          "completed_at": "2026-06-22T07:05:52Z",
          "duration_seconds": 12
        }
      ]
    },
    "security": {
      "workflow_conclusion": "success",
      "workflow_run_id": 28054449996,
      "workflow_run_url": "https://github.com/273v/kaos-source/actions/runs/28054449996",
      "jobs": [
        {
          "name": "gitleaks (incremental)",
          "conclusion": "success",
          "status": "completed",
          "completed_at": "2026-06-23T20:21:23Z"
        },
        {
          "name": "bandit (static security)",
          "conclusion": "success",
          "status": "completed",
          "completed_at": "2026-06-23T20:21:24Z"
        },
        {
          "name": "vulture (dead-code scan)",
          "conclusion": "success",
          "status": "completed",
          "completed_at": "2026-06-23T20:21:24Z"
        }
      ],
      "run_completed_at": "2026-06-23T20:21:25Z"
    },
    "open_prs": {
      "count": 1,
      "titles": [
        "#45 chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the actions-all group"
      ]
    },
    "freshness": {
      "days_since_last_commit": 0,
      "days_since_last_release": 0,
      "days_since_last_security_scan": 0
    },
    "supply_chain": {
      "pypi_version": "0.1.4",
      "pypi_release_iso": "2026-06-23T20:35:55.002118Z",
      "wheel_platforms": [
        "any"
      ],
      "wheel_sha256s": {
        "kaos_source-0.1.4-py3-none-any.whl": "837f31b2ab16d6f483bf05053dce4f32937b119637a049556965fdc27a594be7",
        "kaos_source-0.1.4.tar.gz": "397876066ff326c5eca2ebd8a6ca001f65aa7421894e0ddccb214d581697cd04"
      },
      "is_abi3": false,
      "has_musllinux_wheel": false,
      "license_expression": "Apache-2.0",
      "license_files_in_wheel": [
        "LICENSE",
        "NOTICE"
      ],
      "attestations": {
        "pep740_present": true,
        "publisher_kind": "GitHub",
        "publisher_source_repo": "273v/kaos-source",
        "publisher_workflow_ref": "release.yml@pypi",
        "rekor_log_index": 1931294176,
        "verified_count": 2,
        "total_count": 2
      },
      "sbom": {
        "components_count": 59,
        "license_breakdown": {
          "MIT": 30,
          "MPL-2.0": 1,
          "BSD-3-Clause": 11,
          "Apache-2.0": 7,
          "Apache-2.0 OR BSD-3-Clause": 1,
          "MIT AND PSF-2.0": 1,
          "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0": 1,
          "Apache-2.0 OR BSD-2-Clause": 1,
          "MIT-CMU": 1,
          "LicenseRef-unknown-e3b0c442": 1,
          "BSD-2-Clause": 1,
          "Python-2.0": 1,
          "ISC": 1,
          "PSF-2.0": 1
        },
        "weak_copyleft": [
          "certifi"
        ],
        "strong_copyleft": [],
        "unknown_license": [
          "playwright"
        ],
        "sbom_artifact_path": "data/sbom/kaos-source-0.1.4.cdx.json"
      },
      "errors": []
    },
    "governance": {
      "dco_signoff_rate_90d": 0.427,
      "conventional_commits_rate_90d": 0.728,
      "verified_commit_ratio_90d": 0.379,
      "commits_90d": 103,
      "unique_committers_90d": 2,
      "branch_protection_enabled": true,
      "branch_protection_summary": {
        "source": "branches_api",
        "required_status_checks": {
          "enforcement_level": "everyone",
          "contexts": [
            "bandit (static security)",
            "vulture (dead-code scan)",
            "quality",
            "test",
            "build",
            "gitleaks (incremental)"
          ],
          "checks": [
            {
              "context": "bandit (static security)",
              "app_id": 15368
            },
            {
              "context": "vulture (dead-code scan)",
              "app_id": 15368
            },
            {
              "context": "quality",
              "app_id": 15368
            },
            {
              "context": "test",
              "app_id": 15368
            },
            {
              "context": "build",
              "app_id": 15368
            },
            {
              "context": "gitleaks (incremental)",
              "app_id": 15368
            }
          ]
        },
        "required_pull_request_reviews": null,
        "required_signatures": null
      },
      "codeowners_path": ".github/CODEOWNERS",
      "security_md_present": true,
      "security_md_disclosure_window_days": 90,
      "notice_present": true,
      "license_files_in_sdist": [
        "LICENSE",
        "NOTICE"
      ],
      "releases_90d": 16,
      "median_pr_age_days": 1.338,
      "open_pr_count": 1,
      "open_issue_count": 0,
      "time_to_pypi_seconds_median": 536,
      "errors": []
    },
    "code_metrics": {
      "python": {
        "src_loc": 9910,
        "tests_loc": 6417,
        "src_files": 93,
        "tests_files": 34,
        "tests_count": 569
      },
      "rust": {
        "src_loc": 0,
        "tests_loc": 0,
        "src_files": 0,
        "tests_files": 0,
        "tests_count": 0
      },
      "errors": []
    },
    "errors": []
  },
  "sbom": {
    "mirror_path": "api/v1/sbom/kaos-source-0.1.4.cdx.json",
    "github_release_url": "https://github.com/273v/kaos-source/releases/download/v0.1.4/kaos-source-0.1.4.cdx.json"
  },
  "attestation": {
    "present": true,
    "publisher_kind": "GitHub",
    "publisher_source_repo": "273v/kaos-source",
    "publisher_workflow_ref": "release.yml@pypi",
    "rekor_log_index": 1931294176,
    "verified_count": 2,
    "total_count": 2,
    "pypi_simple_index_url": "https://pypi.org/simple/kaos-source/"
  }
}