Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
322 commits sit in this repo's top risk tercile, which is 34% of the 957scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 3.0 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
Began other-led, now leaning deps.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Review priority | Top driver |
|---|---|---|---|---|---|---|
| 1 | 4bd04418Adding experimental `lsp` command (#528) | Lasse Gaardsholtcopilotassisted | 3mo ago | +1.6K -23 | 100thElevated | more lines added than baseline |
| 2 | b501af31ES-2205: Enable automerge (#124) | Lasse Gaardsholt | 3y ago | +1.6K -90 | 100thElevated | more lines added than baseline |
| 3 | 838c4ec1go mod stuff | Gaardsholt | 5y ago | +959 -207 | 100thElevated | more lines added than baseline |
| 4 | 213b8dfbES-2946: Migrating from `github.com/mitchellh/mapstructure` to `github.com/go-viper/mapstructure` (#285) | Lasse Gaardsholt | 2y ago | +771 -945 | 99thElevated | more lines added than baseline |
| 5 | a8f09718Fixing format stuff (#89) | Lasse Gaardsholt | 4y ago | +1.1K -23 | 99thElevated | more lines added than baseline |
| 6 | 914d62cdnot sure this even works, but updated dependencies | Peter Brøndum | 4y ago | +622 -755 | 99thElevated | more lines added than baseline |
| 7 | fc5fb4f5Inital commit | Lasse Gaardsholt | 6y ago | +847 -0 | 99thElevated | more lines added than baseline |
| 8 | 53454ce2Bump github.com/hashicorp/vault from 1.13.2 to 1.14.0 (#181) | dependabot[bot] | 3y ago | +556 -289 | 99thElevated | more lines added than baseline |
| 9 | ce69a2f9added unit test for extract secrets and rewrite of a lot :D | Peter Brøndum | 6y ago | +916 -45 | 99thElevated | more lines added than baseline |
| 10 | ebec2678Bump github.com/hashicorp/vault from 1.17.1 to 1.18.1 (#309) | dependabot[bot] | 1y ago | +416 -445 | 99thElevated | more lines added than baseline |
| 11 | 8625bcf0Bump github.com/hashicorp/vault from 1.18.2 to 1.18.5 (#334) | dependabot[bot] | 1y ago | +378 -326 | 99thElevated | more lines added than baseline |
| 12 | b9a7d6fbwork! | Lasse Gaardsholt | 3y ago | +520 -12 | 99thElevated | more lines added than baseline |
| 13 | 981113bcBump github.com/hashicorp/vault from 1.12.2 to 1.13.0 (#157) | dependabot[bot] | 3y ago | +286 -639 | 99thElevated | more lines added than baseline |
| 14 | bc378a8eAll my test crap | Oliver Karstoft | 4y ago | +276 -7 | 99thElevated | more lines added than baseline |
| 15 | 165e664aBOSS-1452: Local secrets (#439) | René Mikkelsen | 9mo ago | +176 -7 | 98thElevated | more lines added than baseline |
| 16 | d6e45ac6DEV-125: Local secrets mode (#425) | Lasse Gaardsholt | 10mo ago | +315 -144 | 98thElevated | more lines added than baseline |
| 17 | cbc9e098DEV-314: Add support for fetching nested keys from JSON secrets (#469) | Lasse Gaardsholtcopilotassisted | 6mo ago | +333 -57 | 98thElevated | more lines added than baseline |
| 18 | a86ad97cSidecar option (#113) | Lasse Gaardsholt | 4y ago | +284 -38 | 98thElevated | more lines added than baseline |
| 19 | ae015cd4Adding goreleaser workflow (#502) | Lasse Gaardsholt | 5mo ago | +249 -126 | 98thElevated | more lines added than baseline |
| 20 | bbae21b4Added schema and function to validate secrets file | Oliver Karstoft | 4y ago | +159 -0 | 98thElevated | more lines added than baseline |
| 21 | a7ed7aabPOC on some kind of validation | Gaardsholt | 4y ago | +157 -0 | 98thElevated | more lines added than baseline |
| 22 | 6cc2993dMigrate from CircleCI to GitHub Actions (#362) | Tom van Greevenbroek | 1y ago | +211 -269 | 98thElevated | more lines added than baseline |
| 23 | 2fad3eb3Add support for overriding secret key names and fix key-level uppercase bug (#492) | Lasse Gaardsholtcopilotassisted | 5mo ago | +292 -22 | 98thElevated | more lines added than baseline |
| 24 | 953b0097Added circleci config | Lasse Gaardsholt | 6y ago | +130 -0 | 98thElevated | more lines added than baseline |
| 25 | ae6d94d5GCP Workload ID (#182) | Andrei Predoiu | 3y ago | +167 -134 | 97thElevated | more lines added than baseline |
| 26 | 9f779e4athere was some dependency issues which caused `go mod tidy` to not work - so removing this test case will solve it for now. See https://github.com/hashicorp/vault/issues/9575 for more about the issue | Gaardsholt | 4y ago | +174 -915 | 97thElevated | more lines added than baseline |
| 27 | 631d5ce9cobra stuff with file input | Lasse Gaardsholt | 6y ago | +180 -25 | 97thElevated | more lines added than baseline |
| 28 | 49de4384Bump github.com/hashicorp/vault from 1.19.0 to 1.19.3 (#360) | dependabot[bot] | 1y ago | +127 -119 | 97thElevated | more lines added than baseline |
| 29 | f5e95768bump go 1.21 | Lasse Gaardsholt | 3y ago | +162 -1 | 97thElevated | more lines added than baseline |
| 30 | eca473ecadded vault oidc | Christian Grøntved Andersen | 3y ago | +119 -7 | 97thElevated | more lines added than baseline |
| 31 | 77d751abInitial test to loop through yaml | Christian Grøntved Andersen | 4y ago | +100 -0 | 97thElevated | more lines added than baseline |
| 32 | 23151ecaMark secrets a `optional` (#609) | Lasse Gaardsholt | 2mo ago | +198 -0 | 96thElevated | more lines added than baseline |
| 33 | d52e5cf0Fixing output colors and window resizing (#527) | Lasse Gaardsholt | 5mo ago | +155 -21 | 96thElevated | more lines added than baseline |
| 34 | 084b2928Fix vault tests (#395) | Lasse Gaardsholtjulesassisted | 1y ago | +212 -1.8K | 96thElevated | more lines added than baseline |
| 35 | 56a08d6f[StepSecurity] Apply security best practices (#349) | StepSecurity Bot | 1y ago | +112 -7 | 96thElevated | more lines added than baseline |
| 36 | 2d227e40upgrading go version and go mod tidy | Peter Brøndum | 4y ago | +147 -2 | 96thElevated | more lines added than baseline |
| 37 | 578d2462Remove gotest.tools/v3 dependency in favor of native Go assertions (#466) | Copilotcopilotautonomous | 7mo ago | +91 -82 | 96thElevated | more lines added than baseline |
| 38 | 8b3da800some readme | Peter Brøndum | 6y ago | +90 -1 | 96thElevated | more lines added than baseline |
| 39 | 4d9fcf84Create codeql.yml (#293) | Lasse Gaardsholt | 2y ago | +93 -0 | 96thElevated | more lines added than baseline |
| 40 | 976cda95Added more logging in json format (#66) | Lasse Gaardsholt | 4y ago | +159 -14 | 96thElevated | more lines added than baseline |
| 41 | 0a7a80aftotally untested | Peter Brøndum | 6y ago | +68 -6 | 96thElevated | more lines added than baseline |
| 42 | c5b959bbDEV-130: Implement `go-vault` functionality directly in Harpocrates (#468) | Oliver Karstoft | 7mo ago | +107 -37 | 96thElevated | more lines added than baseline |
| 43 | 91357d6aAdding release drafter | Oliver Karstoft | 4y ago | +67 -0 | 96thElevated | more lines added than baseline |
| 44 | c29ddcacAlmost perfect schema | Oliver Karstoft | 4y ago | +72 -30 | 95thElevated | more lines added than baseline |
| 45 | 10d01419more readme | Peter Brøndum | 6y ago | +72 -75 | 95thElevated | more lines added than baseline |
| 46 | b4d2d0daAdded json test files | Oliver Karstoft | 4y ago | +62 -0 | 95thElevated | more lines added than baseline |
| 47 | 7406ca60Bump github.com/hashicorp/vault from 1.13.1 to 1.13.2 (#169) | dependabot[bot] | 3y ago | +64 -60 | 95thElevated | more lines added than baseline |
| 48 | 44bf652dBump github.com/testcontainers/testcontainers-go/modules/vault from 0.40.0 to 0.41.0 (#503) | dependabot[bot] | 5mo ago | +65 -66 | 95thElevated | more lines added than baseline |
| 49 | 6f7a8082automerge (#191) | Andrei Predoiu | 3y ago | +53 -0 | 95thElevated | more lines added than baseline |
| 50 | 976eb554ES-1038: simplified tests and added test_data | Peter Brøndum | 6y ago | +65 -46 | 95thElevated | more lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 200 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
bestseller/harpocrates has 1,046 commits in its history from 24 contributors, the first of them Dec 11, 2019. In the last 90 days 17 files were touched, 28 times in total, most often dev.go. Every commit is scored for change risk from its size, spread and the history of the files it touches.
