Open-source Terraform Enterprise replacement
Terrapod shipped a major security audit this week, addressing thirteen vulnerabilities across authentication, authorization, and credential handling—including fixes for identity keying, SAML strictness, token scoping, and verification of release artifacts. Alongside security work, the team improved…
Get this in your inbox every Monday →A deterministic 0–100 hygiene score — README, license, CI, tests, docs, and freshness.
Who ships this repo — author concentration and the bus factor across the last 300 mainline commits.
How welcoming this repo is to contributors — issue throughput, close time, responsiveness, and good-first-issue count.
What this project is built on — dependency count by ecosystem, the license mix, and anything worth a legal look before you adopt it.
Whether this project's CI can be trusted — pass rate, run times, flaky runs, and which workflow is the weak link.
Grounded in terrapod's README, structure, and recent commits — answers won't invent code they haven't seen.
A Monday email with what shipped, in plain English — no account needed.
Showing raw commit titles for the newest commits. Sign in to generate AI summaries.
fix(1981): a replicated role change reaches the follower's own sessions (#2000)
fix(ci): Go Audit downloads the Trivy DB once, and names a DB failure as one (#1999)
fix(runner): the package-cache shim cannot be walked out of its prefix (#1996)
refactor(auth): the token signing key is app-generated and database-persisted (#1995)
A floor, not a guess: counts only commits whose author, co-author trailer, or message explicitly credits an AI tool (Claude, Copilot, Cursor, aider, Codex…). Based on 30 mainline commits. Unattributed AI code isn't counted here — the full audit estimates that separately.