{"id":22768653,"url":"https://github.com/whitesource/merge-confidence","last_synced_at":"2025-07-15T22:10:00.623Z","repository":{"id":38397903,"uuid":"311597701","full_name":"whitesource/merge-confidence","owner":"whitesource","description":"The home of Mend's Merge Confidence feature, for Renovate and Mend Remediate","archived":false,"fork":false,"pushed_at":"2024-05-16T07:25:56.000Z","size":230,"stargazers_count":69,"open_issues_count":13,"forks_count":14,"subscribers_count":10,"default_branch":"main","last_synced_at":"2025-07-12T10:57:41.405Z","etag":null,"topics":["dependencies","dependency","dependency-analysis","dependency-manager"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/whitesource.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2020-11-10T08:46:03.000Z","updated_at":"2025-03-03T06:29:16.000Z","dependencies_parsed_at":"2024-05-16T08:53:37.167Z","dependency_job_id":null,"html_url":"https://github.com/whitesource/merge-confidence","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/whitesource/merge-confidence","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/whitesource%2Fmerge-confidence","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/whitesource%2Fmerge-confidence/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/whitesource%2Fmerge-confidence/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/whitesource%2Fmerge-confidence/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/whitesource","download_url":"https://codeload.github.com/whitesource/merge-confidence/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/whitesource%2Fmerge-confidence/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":265464148,"owners_count":23770315,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dependencies","dependency","dependency-analysis","dependency-manager"],"created_at":"2024-12-11T14:12:12.540Z","updated_at":"2025-07-15T22:10:00.603Z","avatar_url":"https://github.com/whitesource.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Repository Deprecation Notice\n\n**Deprecation Notice:** Although still supported, the method specified in the rest of this `README.md` file for enabling Merge Confidence badges is no longer the preferred approach.\n\nFor up-to-date instructions, we highly recommend referring to the official [documentation](https://docs.renovatebot.com/merge-confidence/).\n\n# Merge Confidence\n\nLook at the Merge Confidence badges before merging to:\n\n- Prevent updates which break in production\n- See at a glance if you should update\n\nMerge Confidence finds and flags undeclared breaking releases.\nIt analyzes test and release adoption data across Mend Renovate’s early-adopting user base.\n\n![Renovate PR with Merge Confidence badges](https://raw.githubusercontent.com/whitesource/merge-confidence/main/assets/merge-confidence.png)\n\n## Pull request badges\n\nMerge Confidence adds the following badges to your pull requests:\n\n- **Age**: The age of the package\n- **Adoption**: The percentage of this package's users (within Renovate) which are using this release\n- **Passing**: The percentage of updates which have passing tests for this package\n- **Confidence**: The confidence level for this update\n\n## Supported platforms\n\nMerge Confidence badges for pull requests are available in beta on any supported Renovate platform, including Mend Remediate.\n\n## Supported languages\n\nData is available for packages from:\n\n- npm\n- Maven\n- PyPI\n\nWe plan to support more languages soon.\n\n## Enabling and disabling\n\nIf you use the Mend Renovate App (formerly WhiteSource Renovate App) then the badges are enabled automatically.\n\nIf you don't use the app, you can enable the badges by adding this to your Renovate config:\n\n```json\n\"extends\": [\"github\u003ewhitesource/merge-confidence:beta\"]\n```\n\nIf you want to disable the badges in the app, add this to your config:\n\n```json\n\"ignorePresets\": [\"github\u003ewhitesource/merge-confidence:beta\"]\n```\n\n## Confidence levels and their meaning\n\nMerge Confidence uses the following confidence levels:\n\n- **Low**: We think the update contains breaking changes. Often this is expected because it's a Major version update, but updates can have unknown breaking changes.\n\n- **Neutral**: We don't have enough data about the update, or we can't decide if the update should be Low or High confidence.\n\n- **High**: We rank updates as High confidence when the combination of `Age`, `Adoption` and `Passing` tests means there's a very low chance of breaking changes.\n\n- **Very High**: We only use this for updates which are months old and have either high `Adoption` or have very high test `Passing` scores.\n\n## How it works\n\nMend's hosted Renovate App has created millions of pull requests on `github.com` to help developers update their dependencies since 2017.\nWe bundle and analyze metrics such as package `Age`, package `Adoption`, and `Passing` tests.\nThis way we can find packages that have undeclared breaking changes.\n\n### Algorithm\n\nThe algorithm that decides on the values is private and is not something we plan to share.\nSimilar to a search engine's algorithm, we plan to adjust and improve it over time, for example by using historical data to set a baseline confidence level for packages.\n\n### Data\n\nWe plan to expose much more of the data via a companion website, such as number of users of a package and popular repositories which already updated to the version in question.\n\n## Explanations\n\n### npm package ranking\n\nnpm packages less than three days old can be [unpublished](https://docs.npmjs.com/unpublishing-packages-from-the-registry/), which can result in a service impact if you have updated to a package that gets unpublished.\nThis is why npm packages can only get the **High** Confidence badge when they are at least three days old.\n\n### Percentage values weighting\n\nThe percentages for `Adoption` and `Passing` are weighted towards Organizations, private repositories, and projects with high test reliability.\nThis means those values aren't _raw_ percentages.\n\n## Roadmap\n\nHigh-level information on planned improvements is available in the [Merge Confidence Roadmap Project](https://github.com/whitesource/merge-confidence/projects/1) on GitHub.\n\n## Questions and feedback\n\nYou are invited to [create an Issue](https://github.com/whitesource/merge-confidence/issues/new) if you have anything you'd like to discuss.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwhitesource%2Fmerge-confidence","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwhitesource%2Fmerge-confidence","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwhitesource%2Fmerge-confidence/lists"}