✨ Add archived field to depsdev.project using GitHub API

The deps.dev API does not expose whether a project repository is archived,
so the new `archived` field queries the GitHub API directly. It extracts
owner/repo from the project ID (e.g. github.com/owner/repo/subpath) and
calls GET /repos/{owner}/{repo}. Authentication via the GITHUB_TOKEN env
var is supported to avoid GitHub's 60 req/hour unauthenticated rate limit.

Also fixes nil pointer dereference when project() returns nil by properly
setting the null state on the resource field.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: czunker

providers/depsdev/config/config.go

@@ -15,9 +15,9 @@ var Config = plugin.Provider{
 	ConnectionTypes: []string{provider.DefaultConnectionType},
 	Connectors: []plugin.Connector{
 		{
-			Name:    "depsdev",
-			Use:     "depsdev [path-to-go.mod]",
-			Short:   "deps.dev dependency analysis",
+			Name:  "depsdev",
+			Use:   "depsdev [path-to-go.mod]",
+			Short: "deps.dev dependency analysis",
 			Long: `Use the depsdev provider to query Go module dependency information from the deps.dev API.
 
 Point it at a go.mod file to check all direct dependencies:
@@ -29,8 +29,8 @@ Or use it without arguments and query individual packages:
   mql shell depsdev
   > depsdev.package("github.com/rs/zerolog") { latestVersion latestPublished }
 `,
-			MinArgs: 0,
-			MaxArgs: 1,
+			MinArgs:   0,
+			MaxArgs:   1,
 			Discovery: []string{},
 			Flags: []plugin.Flag{
 				{

providers/depsdev/resources/api.go

@@ -9,10 +9,13 @@ import (
 	"io"
 	"net/http"
 	"net/url"
+	"os"
+	"strings"
 	"time"
 )
 
 const depsDevBaseURL = "https://api.deps.dev/v3"
+const githubAPIBaseURL = "https://api.github.com"
 
 // API response structs for deps.dev v3
 
@@ -40,14 +43,14 @@ type depsDevVersionResponse struct {
 		Name    string `json:"name"`
 		Version string `json:"version"`
 	} `json:"versionKey"`
-	IsDefault    bool      `json:"isDefault"`
-	PublishedAt  time.Time `json:"publishedAt"`
-	Licenses     []string  `json:"licenses"`
+	IsDefault       bool      `json:"isDefault"`
+	PublishedAt     time.Time `json:"publishedAt"`
+	Licenses        []string  `json:"licenses"`
 	RelatedProjects []struct {
 		ProjectKey struct {
 			ID string `json:"id"`
 		} `json:"projectKey"`
-		RelationType    string `json:"relationType"`
+		RelationType       string `json:"relationType"`
 		RelationProvenance string `json:"relationProvenance"`
 	} `json:"relatedProjects"`
 }
@@ -56,19 +59,19 @@ type depsDevProjectResponse struct {
 	ProjectKey struct {
 		ID string `json:"id"`
 	} `json:"projectKey"`
-	OpenIssuesCount int    `json:"openIssuesCount"`
-	StarsCount      int    `json:"starsCount"`
-	ForksCount      int    `json:"forksCount"`
-	License         string `json:"license"`
-	Description     string `json:"description"`
-	Homepage        string `json:"homepage"`
+	OpenIssuesCount int                       `json:"openIssuesCount"`
+	StarsCount      int                       `json:"starsCount"`
+	ForksCount      int                       `json:"forksCount"`
+	License         string                    `json:"license"`
+	Description     string                    `json:"description"`
+	Homepage        string                    `json:"homepage"`
 	Scorecard       *depsDevScorecardResponse `json:"scorecard"`
 }
 
 type depsDevScorecardResponse struct {
-	Date            time.Time `json:"date"`
-	OverallScore    float64   `json:"overallScore"`
-	Checks          []depsDevScorecardCheck `json:"checks"`
+	Date         time.Time               `json:"date"`
+	OverallScore float64                 `json:"overallScore"`
+	Checks       []depsDevScorecardCheck `json:"checks"`
 }
 
 type depsDevScorecardCheck struct {
@@ -153,3 +156,48 @@ func fetchProject(client *http.Client, projectID string) (*depsDevProjectRespons
 
 	return &result, nil
 }
+
+type githubRepoResponse struct {
+	Archived bool `json:"archived"`
+}
+
+// fetchGitHubRepo retrieves repository info from the GitHub API.
+// The projectID is expected to be in the format "github.com/owner/repo" or
+// "github.com/owner/repo/subpath" (only owner/repo is used).
+func fetchGitHubRepo(client *http.Client, projectID string) (*githubRepoResponse, error) {
+	// Extract owner/repo from "github.com/owner/repo[/...]"
+	parts := strings.Split(projectID, "/")
+	if len(parts) < 3 || parts[0] != "github.com" {
+		return nil, fmt.Errorf("project %q is not a GitHub repository", projectID)
+	}
+	ownerRepo := parts[1] + "/" + parts[2]
+
+	u := fmt.Sprintf("%s/repos/%s", githubAPIBaseURL, ownerRepo)
+	req, err := http.NewRequest("GET", u, nil)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create GitHub API request: %w", err)
+	}
+
+	// Use GITHUB_TOKEN for authentication if available to avoid rate limiting
+	if token := os.Getenv("GITHUB_TOKEN"); token != "" {
+		req.Header.Set("Authorization", "Bearer "+token)
+	}
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return nil, fmt.Errorf("GitHub API request failed: %w", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		body, _ := io.ReadAll(resp.Body)
+		return nil, fmt.Errorf("GitHub API returned %d for %s: %s", resp.StatusCode, ownerRepo, string(body))
+	}
+
+	var result githubRepoResponse
+	if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
+		return nil, fmt.Errorf("failed to decode GitHub API response: %w", err)
+	}
+
+	return &result, nil
+}

providers/depsdev/resources/depsdev.lr

@@ -56,6 +56,8 @@ depsdev.project @defaults("id starsCount forksCount") {
   description() string
   // Project homepage URL
   homepage() string
+  // Whether the project repository is archived
+  archived() bool
   // OpenSSF Scorecard data
   scorecard() depsdev.scorecard
 }

providers/depsdev/resources/depsdev.lr.go

@@ -16,6 +16,7 @@ depsdev.packageVersion.publishedAt 11.0.1
 depsdev.packageVersion.version 11.0.1
 depsdev.packages 11.0.1
 depsdev.project 11.0.1
+depsdev.project.archived 11.0.1
 depsdev.project.description 11.0.1
 depsdev.project.forksCount 11.0.1
 depsdev.project.homepage 11.0.1

providers/depsdev/resources/depsdev.lr.versions

@@ -111,6 +111,7 @@ func (r *mqlDepsdevPackage) project() (*mqlDepsdevProject, error) {
 	}
 
 	if version == "" {
+		r.Project.State = plugin.StateIsNull | plugin.StateIsSet
 		return nil, nil
 	}
 
@@ -135,6 +136,7 @@ func (r *mqlDepsdevPackage) project() (*mqlDepsdevProject, error) {
 		return res.(*mqlDepsdevProject), nil
 	}
 
+	r.Project.State = plugin.StateIsNull | plugin.StateIsSet
 	return nil, nil
 }
 

providers/depsdev/resources/package.go

@@ -121,6 +121,19 @@ func (r *mqlDepsdevProject) scorecard() (*mqlDepsdevScorecard, error) {
 	return nil, r.fetchProjectInfo()
 }
 
+func (r *mqlDepsdevProject) archived() (bool, error) {
+	conn := r.MqlRuntime.Connection.(*connection.DepsDevConnection)
+
+	repo, err := fetchGitHubRepo(conn.HttpClient, r.Id.Data)
+	if err != nil {
+		// If it's not a GitHub project, we can't determine archived status
+		r.Archived = plugin.TValue[bool]{Data: false, State: plugin.StateIsSet | plugin.StateIsNull}
+		return false, nil
+	}
+
+	return repo.Archived, nil
+}
+
 // depsdev.scorecard
 
 func (r *mqlDepsdevScorecard) id() (string, error) {