Community-driven, simple, yet powerful framework for fast, cost-effective distributed Compute over Data.
A deterministic 0–100 hygiene score — README, license, CI, tests, docs, and freshness.
Who ships this repo — author concentration and the bus factor across the last 300 mainline commits.
How welcoming this repo is to contributors — issue throughput, close time, responsiveness, and good-first-issue count.
What this project is built on — dependency count by ecosystem, the license mix, and anything worth a legal look before you adopt it.
Whether this project's CI can be trusted — pass rate, run times, flaky runs, and which workflow is the weak link.
Grounded in bacalhau's README, structure, and recent commits — answers won't invent code they haven't seen.
A Monday email with what shipped, in plain English — no account needed.
Showing raw commit titles for the newest commits. Sign in to generate AI summaries.
Update containerd dependency
Upgraded the containerd container runtime library from version 2.2.5 to 2.2.8, which includes security patches (CVE-2026-53495, GHSA-rp3h-jf77-q9p4), fixes for Windows temp directory handling, user/group lookup in containers, and snapshot creation improvements.
Update containerd dependency to 2.2.8
Updated the containerd container runtime library from version 2.2.5 to 2.2.8 in test integration dependencies, which includes security patches and bug fixes for snapshot creation, Windows temp directory handling, and user/group lookup in containers.
Update baseline-browser-mapping library
Updated the baseline-browser-mapping dependency from version 2.10.43 to 2.11.21, which includes new timeline features, improved data compression, and security fixes for handling invalid configuration options.
Update Next.js to 16.3.3
Upgraded the Next.js framework dependency to version 16.3.3, which includes critical security fixes for remote code execution vulnerabilities on Windows servers and in the Image Optimization API, along with various bug fixes and improvements.
deps(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /test_integration (#5442)
deps(deps): bump the sdk-python-dependencies group in /python with 3 updates (#5439)
deps(deps): bump the root-python-dependencies group with 2 updates (#5438)
deps(deps): update coverage requirement from >=7.15.4 to >=7.16.0 in /clients/python (#5436)
A floor, not a guess: counts only commits whose author, co-author trailer, or message explicitly credits an AI tool (Claude, Copilot, Cursor, aider, Codex…). Based on 30 mainline commits. Unattributed AI code isn't counted here — the full audit estimates that separately.