| # | Action | Effort | Impact |
|---|---|---|---|
| 1 | Fix 1 high vulnerability alerts | moderate | high impact |
| Criteria | Required | Detail | |
|---|---|---|---|
| ✓ | Has CI workflows (2+) | Gold | 8 workflows, 88% pass |
| ✓ | Has a license | Silver | MIT |
| ✓ | Fewer than 10 open bugs | Gold | 0 bugs |
| ✗ | Release in the last 90 days | Gold | v1.1.0 |
| ✓ | Community health above 80% | Gold | 100% |
| ✓ | Security scanning configured | Gold | Dependabot + Code Scanning + Secret Scanning |
| ✗ | Zero critical/high security findings | Gold | 1 vuln, 0 code, 0 secret |
| ✓ | Has CI workflows | Silver | 8 workflows |
| ✓ | Community health above 50% | Silver | 100% |
| ✓ | Activity in the last 6 months | Silver | pushed 0d ago |
| ✓ | Some activity (within 1 year) | Bronze | pushed 0d ago |
| PR | Title | Author | Age | Labels |
|---|---|---|---|---|
| #265 | build(deps): bump the cli-minor-patch group across 1 direc… | dependabot[bot] | 0d | — |
| #264 | build(deps): bump the github-actions group across 1 direct… | dependabot[bot] | 0d | — |
| #263 | build(deps): bump the dashboard-minor-patch group across 1… | dependabot[bot] | 0d | — |
| #262 | build(deps): bump @grpc/grpc-js from 1.14.4 to 1.14.5 | dependabot[bot] | 5d | — |