Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-25 02:39 UTC
BRF-Tech / filex
filex - self-hosted file manager. Go backend + Vue 3 / React / Web Component frontend. Pluggable storage (local, S3, SFTP, WebDAV, FTP), auth (local, OIDC, LDAP, proxy-header) and DB drivers. Single binary or container. MIT.
BRF-Tech/filex erreicht einen Gesundheitsindex von 58 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Engineering Quality (89/100) ab, am schwächsten bei Security (29/100). Zuletzt vor 5 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
58
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
58
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
BRF TechOrganisation
1 Follower2 öffentliche Reposseit Feb. 2024
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht |
|---|---|---|---|---|---|
| Go | github.com/BRF-Tech/filex | v0.7.5 | - | 41 | vor 5 Tagen |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
69
Entwicklungsaktivität
55Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 5 Tagen |
| 2.8/36 | Commit-Rhythmus — 4/52 Wochen mit Commits |
| 16/18 | Commit-Volumen — 59 Commits im letzten Jahr |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Verwendete Eingangsdaten
| commits_last_year | 59 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 4 |
Release-Disziplin
90Exzellent
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 41 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 5 Tagen |
| 27/27 | Release-Rhythmus — ein Release etwa alle 0,2 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Verwendete Eingangsdaten
| releases_count | 41 |
| latest_release_tag | v0.7.5 |
| releases_from_tags | nein |
| days_since_latest_release | 5 |
| mean_days_between_releases | 0,2 |
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
43
Popularität & Verbreitung
1Kritisch
Wie die Bewertung erfolgt
| 0/60 | Stars — 2 Stars |
| 0/25 | Forks — 0 Forks |
| 0/15 | Watcher — 0 Watcher |
Verwendete Eingangsdaten
| forks | 0 |
| stars | 2 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
92Exzellent
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (MIT) |
| 18/18 | CONTRIBUTING-Leitfaden |
| 13.5/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 6.3/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | ja |
| has_issue_template | nein |
| has_code_of_conduct | ja |
| has_pull_request_template | ja |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
54
Maintainer-Resilienz (Bus-Faktor)
10Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 0/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits |
| 1.4/13.5 | Breite der Beitragenden — 1 Beitragende |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Reaktionsfähigkeit bei Issues & PRs
85Exzellent
Wie die Bewertung erfolgt
| 46.8/46.8 | Issue-Lösungsquote — 100 % der Issues geschlossen |
| 38.2/38.3 | PR-Annahme — 1/1 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 1 |
| open_issues | 0 |
| closed_issues | 4 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 0 |
Eigentümerschaft & Trägerschaft
41Gefährdet
Wie die Bewertung erfolgt
| 30/30 | Organisatorische Trägerschaft — im Besitz einer Organisation |
| 0/20 | Verifizierte Domain |
| 2.2/25 | Reichweite des Inhabers — 1 Follower von BRF-Tech |
| 8.4/25 | Kontohistorie — 2 öffentliche Repos, Kontoalter ca. 2 Jahre |
Verwendete Eingangsdaten
| followers | 1 |
| owner_type | Organization |
| is_verified | — |
| owner_login | BRF-Tech |
| public_repos | 2 |
| account_age_days | 892 |
Paketpflege
100Exzellent
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf go |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen |
| 20/20 | Versionshistorie — 41 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | github.com/BRF-Tech/filex |
| ecosystems | go |
| any_deprecated | nein |
| min_days_since_publish | 5 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
89
Engineering-Praktiken
88Exzellent
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 2 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — eslint.config.js |
| 0/9.6 | Pre-Commit-Hooks |
| 6.4/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — keine Daten |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | ja |
| has_linter_config | ja |
| has_precommit_config | nein |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.
Dokumentation
90Exzellent
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — https://filex.sh |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 14 Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | docker, file-browser, file-manager, file-sharing, golang, mcp, multi-tenant, react, s3, self-hosted, sftp, vue, web-components, webdav |
| has_wiki | nein |
| homepage | https://filex.sh |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
29
Sicherheitslage
29Kritisch
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — keine Daten |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 101 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 2,9 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
67
AI-Agentenkontext & Leitlinien
40Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 40/40 | Lesbare Commit-Historie — 59 von 59 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Wie die Bewertung erfolgt
| 12.6/18 | Bootstrap mit einem Befehl — backend/go.mod (Toolchain-Konvention, kein Task-Runner) |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — eslint.config.js |
| 11/11 | Statische Typprüfung — e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json |
| 10/10 | Reproduzierbare Umgebung — Dockerfile, lockfile |
| 10/10 | Belegte Agentenpraxis — 32 der letzten 59 Commits von Agenten verfasst oder ihnen zugeschrieben |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | go.sum, pnpm-lock.yaml |
| has_dockerfile | ja |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json |
| agent_commit_share | 0,542 |
| toolchain_manifests | backend/go.mod |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
100Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Go (statisch typisiert) |
| 54.8/55 | Handhabbare Dateigrößen — 2/453 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Go |
| largest_source_bytes | 117.418 |
| source_files_sampled | 453 |
| oversized_source_files | 2 |
Wie die Bewertung erfolgt
| 0/40 | API-Schema (OpenAPI/GraphQL/proto) |
| 20/20 | MCP-Server |
| 40/40 | Lauffähige Beispiele — notebooks |
Verwendete Eingangsdaten
| example_dirs | notebooks |
| has_mcp_signal | ja |
| api_schema_files | — |
Eckdaten
2GitHub-Sterne
1Mitwirkende
59Commits, letzte 12 Monate
5Tage seit letztem Push
41Releases
1Bus-Faktor
0offene Issues
Go, npmPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
OpenSSF Scorecard 2.9 / 10
2.9Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| k. A. | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 101 existing vulnerabilities detected |
Direkte Abhängigkeiten 43
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Go | github.com/aws/aws-sdk-go-v2 | v1.30.3 | backend/go.mod |
| Go | github.com/aws/aws-sdk-go-v2/config | v1.27.27 | backend/go.mod |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.17.27 | backend/go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/s3 | v1.58.2 | backend/go.mod |
| Go | github.com/blevesearch/bleve/v2 | v2.4.2 | backend/go.mod |
| Go | github.com/blevesearch/bleve_index_api | v1.1.10 | backend/go.mod |
| Go | github.com/coder/websocket | v1.8.15 | backend/go.mod |
| Go | github.com/coreos/go-oidc/v3 | v3.11.0 | backend/go.mod |
| Go | github.com/fatih/color | v1.17.0 | backend/go.mod |
| Go | github.com/fsnotify/fsnotify | v1.7.0 | backend/go.mod |
| Go | github.com/getsentry/sentry-go | v0.47.0 | backend/go.mod |
| Go | github.com/go-chi/chi/v5 | v5.1.0 | backend/go.mod |
| Go | github.com/go-chi/cors | v1.2.1 | backend/go.mod |
| Go | github.com/go-ldap/ldap/v3 | v3.4.8 | backend/go.mod |
| Go | github.com/go-sql-driver/mysql | v1.8.1 | backend/go.mod |
| Go | github.com/google/uuid | v1.6.0 | backend/go.mod |
| Go | github.com/jackc/pgx/v5 | v5.6.0 | backend/go.mod |
| Go | github.com/jlaffaye/ftp | v0.2.0 | backend/go.mod |
| Go | github.com/ledongthuc/pdf | v0.0.0-20250511090121-5959a4027728 | backend/go.mod |
| Go | github.com/modelcontextprotocol/go-sdk | v1.6.1 | backend/go.mod |
| Go | github.com/pkg/sftp | v1.13.6 | backend/go.mod |
| Go | github.com/pquerna/otp | v1.4.0 | backend/go.mod |
| Go | github.com/pressly/goose/v3 | v3.21.1 | backend/go.mod |
| Go | github.com/redis/go-redis/v9 | v9.19.0 | backend/go.mod |
| Go | github.com/robfig/cron/v3 | v3.0.1 | backend/go.mod |
| Go | github.com/skip2/go-qrcode | v0.0.0-20200617195104-da1b6568686e | backend/go.mod |
| Go | github.com/spf13/cobra | v1.8.1 | backend/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | backend/go.mod |
| Go | golang.org/x/crypto | v0.50.0 | backend/go.mod |
| Go | golang.org/x/image | v0.39.0 | backend/go.mod |
| Go | golang.org/x/net | v0.52.0 | backend/go.mod |
| Go | golang.org/x/oauth2 | v0.35.0 | backend/go.mod |
| Go | golang.org/x/term | v0.45.0 | backend/go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | backend/go.mod |
| Go | modernc.org/sqlite | v1.30.2 | backend/go.mod |
| npm | @brftech/filex-core | workspace:* | web/package.json |
| npm | @headlessui/vue | ^1.7.23 | web/package.json |
| npm | axios | ^1.7.7 | web/package.json |
| npm | lucide-vue-next | ^0.453.0 | web/package.json |
| npm | pinia | ^2.2.4 | web/package.json |
| npm | vue | ^3.5.12 | web/package.json |
| npm | vue-i18n | ^9.14.0 | web/package.json |
| npm | vue-router | ^4.4.5 | web/package.json |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"docker",
"file-browser",
"file-manager",
"file-sharing",
"golang",
"mcp",
"multi-tenant",
"react",
"s3",
"self-hosted",
"sftp",
"vue",
"web-components",
"webdav"
],
"is_fork": false,
"size_kb": 7295,
"has_wiki": false,
"homepage": "https://filex.sh",
"languages": {
"Go": 2152570,
"CSS": 92373,
"Vue": 878811,
"HTML": 2358,
"Shell": 4423,
"Python": 20885,
"Mermaid": 755,
"Dockerfile": 8388,
"JavaScript": 7374,
"TypeScript": 600678,
"Go Template": 948,
"Jupyter Notebook": 3873
},
"pushed_at": "2026-07-19T04:55:52Z",
"created_at": "2026-07-03T20:42:30Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T20:00:25Z",
"description": "filex - self-hosted file manager. Go backend + Vue 3 / React / Web Component frontend. Pluggable storage (local, S3, SFTP, WebDAV, FTP), auth (local, OIDC, LDAP, proxy-header) and DB drivers. Single binary or container. MIT.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go",
"Vue",
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "BRF Tech",
"type": "Organization",
"login": "BRF-Tech",
"company": null,
"location": null,
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/159972728?v=4",
"created_at": "2024-02-14T01:21:38Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 892
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.5",
"kind": "patch",
"published_at": "2026-07-19T05:03:52Z"
},
{
"tag": "v0.7.4",
"kind": "patch",
"published_at": "2026-07-18T19:30:28Z"
},
{
"tag": "v0.7.3",
"kind": "patch",
"published_at": "2026-07-18T15:16:52Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2026-07-18T14:18:57Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-07-18T09:26:10Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-07-17T22:09:51Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-07-17T20:19:22Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-17T17:41:07Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-07-17T16:06:06Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-07-17T13:51:23Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-17T12:20:25Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-17T11:15:40Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-17T08:06:24Z"
},
{
"tag": "v0.1.84",
"kind": "patch",
"published_at": "2026-07-17T06:40:15Z"
},
{
"tag": "v0.1.83",
"kind": "patch",
"published_at": "2026-07-16T21:56:06Z"
},
{
"tag": "v0.1.82",
"kind": "patch",
"published_at": "2026-07-10T13:31:47Z"
},
{
"tag": "v0.1.81",
"kind": "patch",
"published_at": "2026-07-09T11:03:12Z"
},
{
"tag": "v0.1.80",
"kind": "patch",
"published_at": "2026-07-09T09:32:12Z"
},
{
"tag": "v0.1.79",
"kind": "patch",
"published_at": "2026-07-09T07:08:12Z"
},
{
"tag": "v0.1.78",
"kind": "patch",
"published_at": "2026-07-08T23:26:03Z"
},
{
"tag": "v0.1.77",
"kind": "patch",
"published_at": "2026-07-08T22:20:36Z"
},
{
"tag": "v0.1.76",
"kind": "patch",
"published_at": "2026-07-08T21:58:05Z"
},
{
"tag": "v0.1.75",
"kind": "patch",
"published_at": "2026-07-08T17:30:31Z"
},
{
"tag": "v0.1.74",
"kind": "patch",
"published_at": "2026-07-08T15:42:36Z"
},
{
"tag": "v0.1.73",
"kind": "patch",
"published_at": "2026-07-07T15:08:30Z"
},
{
"tag": "v0.1.72",
"kind": "patch",
"published_at": "2026-07-07T13:28:01Z"
},
{
"tag": "v0.1.71",
"kind": "patch",
"published_at": "2026-07-07T00:22:13Z"
},
{
"tag": "v0.1.70",
"kind": "patch",
"published_at": "2026-07-07T00:05:43Z"
},
{
"tag": "v0.1.69",
"kind": "patch",
"published_at": "2026-07-06T23:38:11Z"
},
{
"tag": "v0.1.68",
"kind": "patch",
"published_at": "2026-07-06T11:50:04Z"
},
{
"tag": "v0.1.67",
"kind": "patch",
"published_at": "2026-07-05T23:52:21Z"
},
{
"tag": "v0.1.66",
"kind": "patch",
"published_at": "2026-07-05T22:11:36Z"
},
{
"tag": "v0.1.65",
"kind": "patch",
"published_at": "2026-07-05T21:36:41Z"
},
{
"tag": "v0.1.64",
"kind": "patch",
"published_at": "2026-07-05T21:09:31Z"
},
{
"tag": "v0.1.63",
"kind": "patch",
"published_at": "2026-07-05T21:09:21Z"
},
{
"tag": "v0.1.62",
"kind": "patch",
"published_at": "2026-07-05T12:50:38Z"
},
{
"tag": "v0.1.61",
"kind": "patch",
"published_at": "2026-07-05T09:30:47Z"
},
{
"tag": "v0.1.60",
"kind": "patch",
"published_at": "2026-07-05T00:42:29Z"
},
{
"tag": "v0.1.59",
"kind": "patch",
"published_at": "2026-07-05T00:21:39Z"
},
{
"tag": "v0.1.58",
"kind": "patch",
"published_at": "2026-07-04T23:44:48Z"
},
{
"tag": "v0.1.57",
"kind": "patch",
"published_at": "2026-07-04T11:44:17Z"
}
],
"recent_commits": [
{
"oid": "62fde6c74fcf050fce26c0997ed6d3f9ae5ea150",
"body": "…no behavior change\n\nmd5(cleaned path)+NUL+LE storage id was copy-pasted across nine call sites;\nnow a single internal/pathkey.Hash() (byte-identical output, existing\npath_hash values unaffected; hash-equivalence test pins it).",
"is_bot": false,
"headline": "chore(release): v0.7.5 — path-hash single source (internal/pathkey), …",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-19T04:54:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6c836f3f120ae7372abeacecea3d2f7183cdb28",
"body": "Split view: virtual Trash row was injected only by the main panel, so the\nsecondary pane's rows were offset. Trash-row synthesis + internal-entry\nfilter are now a shared source (lib/listing.ts) used by both panes.\nStandalone Explore page: min-h-screen -> h-screen so tall listings scroll\ninside each pane instead of the whole page.",
"is_bot": false,
"headline": "fix(ui): v0.7.4 split view trash-row parity + standalone page-scroll",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-18T19:21:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7c900ed4ef3a9a572cd7f4c61a5f3fb02853eea",
"body": "…rumb alignment\n\nSecondary pane right-click menu now renders the single selectionActionList\nsource; pane actions incl. rename/delete/new-folder route to the focused\npane. Dropping a file onto its own folder is a silent no-op instead of an\nS3 copy-to-itself 400. Secondary pane breadcrumb shares identical padding/\nfont/height with the main breadcrumb.",
"is_bot": false,
"headline": "fix(ui): v0.7.3 split view menu parity + same-dir drop no-op + breadc…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-18T15:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f59732571aecd3eeb9e85f618ad3e1f6397d0e1d",
"body": "…menu\n\nSplit view: main panel breadcrumb (+ presence/lock strips) moved into a\n.fe__primary wrapper so it occupies only the left half instead of the\nfull width, mirroring the secondary pane. Right-click in the secondary\npane now opens a pane-routed menu (open/download/copy/cut/paste); empty\nspace shows a paste-only menu for pasting into an empty folder.",
"is_bot": false,
"headline": "fix(ui): v0.7.2 split view breadcrumb width + secondary pane context …",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-18T14:10:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e68ce34ec5660c445564a56d4cec408e0b401626",
"body": null,
"is_bot": false,
"headline": "docs: fresh v0.7.1 screenshot set + runtipi logo",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-18T09:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "335efb6d0ad73d535bbfaea82a401bfdb4fb9606",
"body": "Host overflow (content-box borders) + outer scrollbar/toast drift, tab\nstrip scrollbar hidden, split pane renders real list/grid/gallery views\nwith per-pane view mode + focused-pane view switcher + focused-pane\ncontext-menu paste, single-line toolbar with overflow folding, shortcut\nsuppression while a context menu is open, AA accent contrast.",
"is_bot": false,
"headline": "fix(ui): v0.7.1 polish round",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-18T09:17:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe4b0391bc6a4899b397cf8fdd1736a4eb581758",
"body": "Settings-driven tenant-aware branding for public pages + login,\nend-to-end encrypted folders (client-side WebCrypto MVP, server-blind,\ndocs/E2E-ENCRYPTION.md), and a flag-gated cloud readiness skeleton\n(FILEX_CLOUD default off, docs/CLOUD.md).",
"is_bot": false,
"headline": "feat(kimlik): v0.7.0 identity & trust wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T22:00:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f9c3cfffcd1e279ad6bf696ef39a0ffa683d443",
"body": "Tabs (persistent, remappable shortcuts), per-tab split view with\ncross-pane drag move/copy, gallery view mode, browsable public folder\nshares with auto gallery layout, per-file comments (migration 00020)\nwith comment.added webhook.",
"is_bot": false,
"headline": "feat(calisma): v0.6.0 workspace wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T20:10:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9548de8e37c1aef8ee577793b0b17308d7d9141",
"body": "Theme gallery (8 themes, light+dark variants, token engine), customizable\nkeyboard shortcuts + Space quick look, unified operations center,\nonboarding tour, a11y pass (grid roles, keyboard context menu, focus\ntraps, reduced motion), drag-drop polish, palette settings commands.",
"is_bot": false,
"headline": "feat(gorunum): v0.5.0 appearance wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T17:32:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07499ab112b3f9b9a0a6fa88790f914c5834f844",
"body": "Trash child-path retag + soft-delete-aware unique index (#5), WebDAV\nDELETE lands in trash, keep_n>20 honored, writehook post-write gate\n(AV + webhooks on ai/sharex/dav/ops), webhook last-delivery status,\nrecursive CLI upload, grid view search snippets.",
"is_bot": false,
"headline": "feat(temizlik): v0.4.2 cleanup wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T15:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89a0ddafe029310fbd4b1a60fca2c4df95496665",
"body": "App-store packaging (Umbrel/CasaOS/Runtipi/Unraid/Portainer + Helm\nfix), VitePress docs site, capability probe health paths + short fail\nTTL, dead deep-link hash cleanup.",
"is_bot": false,
"headline": "feat(vitrin): v0.4.1 showcase wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T13:43:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57542c1e38558c4bc1ee299f5a6d24da8ff874e4",
"body": "Inspector panel with version history, optional ClamAV quarantine with\nfile.infected events, protection settings API + admin page, version\nretention cron, admin quota UI + endpoint fixes, share stats; wires\nthe never-started daily trash purge loop.",
"is_bot": false,
"headline": "feat(koru): v0.4.0 protection wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T12:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c59bf2897483d69f79b38529a1b3cb052bb2cc35",
"body": "WebDAV server (Basic auth, RBAC, DB/index sync), filex client CLI,\nwebhook targets with HMAC signing + file events + admin UI, narrow\nembed mini mode.",
"is_bot": false,
"headline": "feat(baglan): v0.3.0 connectivity wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T11:06:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b43c916ef04ee8514e53b2d2fe8c677a899039",
"body": "Async content extraction (text/code/PDF/Office) into the Bleve index,\nscoped search with highlighted snippets, optional tesseract OCR,\nadmin duplicate report + view, palette global search with saved\nsearches, MCP file_search content flag.",
"is_bot": false,
"headline": "feat(bul): v0.2.0 content search wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T07:58:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9393f3a2f05bc7f89552dd2f7ec63b46655afaf",
"body": "Custom SVG file-type icons, date grouping + sortable columns, density\ntoggle, command palette (Ctrl+K), shortcuts help (?), breadcrumb\noverflow, skeleton loading, illustrated empty/error states, undo\nsnackbar, connection badge, public share/PIN/drop page redesign with\n'Shared with filex' footer, login polish.",
"is_bot": false,
"headline": "feat(cila): v0.1.84 design wave",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-17T06:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de9258dbc6cf4b7472b5e46d765dd0ab293275e2",
"body": null,
"is_bot": false,
"headline": "docs: 0.1.83 changelog entry (embedded scroll fix)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-16T21:50:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b47b73abec7a0cca5c2a238386457bd191ed4d0",
"body": "- core: .fe__body gains min-height:0 — flexbox's default min-height:auto\n kept the body at content height in height-constrained embeds, so its\n overflow:auto never engaged and everything past the fold was clipped\n (unreachable) by .fe's overflow:hidden.\n- core: default filex-explorer{display:bloc\n[…]\nd-height dummy host using the OLD broken\nembed pattern (inline display:block on the host): .fe stays flex, body\nconstrained and scrollable, 69-item listing fully reachable.\n\nPackages bumped to 0.1.83.",
"is_bot": false,
"headline": "fix(embed): height-constrained embeds could not scroll",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-16T21:48:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "63628b96251e3b403dd2e9989440ce7e44685508",
"body": "…next publish)",
"is_bot": false,
"headline": "docs: logo mark atop main + package READMEs (npm pages pick it up on …",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-10T14:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73acd405d8d503d88763549fb65347d1eb578e99",
"body": null,
"is_bot": false,
"headline": "docs: official logo mark (1024px, rendered from web LogoMark)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-10T14:14:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5078872ff9c2cb8fa05e4e541813f613be1380c1",
"body": "…tch, fresh demo landing card (#2 #3 #4)\n\n- viewer save chip / Edit / Close / Download / read-only / no-preview labels and\n the presence toggle tooltip now go through the locale catalogue (new\n viewer.* + presence.* keys, tr+en)\n- aiOps.cacheUpsertFile dispatches async thumbnail generation (manage\n[…]\nhareX (routes.go)\n- demo landing: 'Open source (soon)' -> 'Open source - MIT', canonical\n github.com/BRF-Tech/filex link\n- CHANGELOG entries 0.1.69-0.1.82, SECURITY.md e-mail contact, packages 0.1.82",
"is_bot": false,
"headline": "fix: locale-clean viewer/presence strings, AI-surface thumbnail dispa…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-10T13:24:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb47471c800a8f009eb135264ea1970633ffd484",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: tighter screenshots — cropped hero, modal-only share/viewer shots",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-10T10:27:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "80177c79ec92f55f468a53133f60ed80047da215",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: social preview image (1280x640 @2x)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-10T09:53:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ff4299a74900cdb62b5869c14e3f60a14c8ced57",
"body": "…ealtime/RBAC sections\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README showcase rewrite — badges, live demo, screenshots, MCP/r…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-10T09:52:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "074c29c69bf70235bc6a016c687c8a56c9791a38",
"body": "…nce attribution\n\nTokens carry a `usernames` allow-list (first = default, empty = label);\ncallers pick an identity per request via X-Filex-Token-User (unknown → 403).\nThe resolved username is stamped in audit metadata (AI writes are now audited\ntoo), shares.created_via and WS presence (\"Burak (work)\"), with new PATCH\nendpoints + admin UI for editing. Export of v0.1.81.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tokens): per-token username identities — audit, shares and prese…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-09T10:55:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0fb97de9b9c2daaa6c66ac89439cfb5650bb1538",
"body": "Thumbs now load through the same auth machinery as every API call (apiBase +\nheaders + credentials → object-URL cache), fixing empty images in embedded /\nproxied hosts. PresenceBar gains a persisted toggle between the compact\navatar strip and a scrollable row of full-name chips. Export of v0.1.80.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): authenticated grid thumbnails + expandable presence bar",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-09T09:17:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1db5dba7e22493c4eaadb1062ade40f1ba4e749c",
"body": "- API-token tickets show the token LABEL; trusted host proxies stamp the real\n end user via X-Filex-Presence-Name (RFC 2047 for non-ASCII) / -Key, giving\n distinct identities to users behind one shared proxy token.\n- Rosters exclude the recipient (\"who else is here\") and carry a stable uid;\n rena\n[…]\nsence with real names, self-exclusion, live change auto-refresh, focus +\nrename focus-follow, escape rejection. Export of v0.1.79.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ws): real presence identity + confined-subscribe fixes (v0.1.79)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-09T07:00:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49f4de031f00dc4a49ba1782d6efeba94acf3640",
"body": "…per-client frame paths\n\nPrepend the ticket's confine root to a confined client's WS subscribe path so the\nroom key, confine check and RBAC resolve the real folder, and echo each client's own\nsubscribed path in frames. Fixes live-collab in embedded (confined) explorers. Export\nof v0.1.78.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ws): resolve embedded confined subscribes to the absolute room + …",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-08T23:19:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "274c0f356070d9b1f259eec629bdd525aea62276",
"body": "Load the ticket's user into the connection context so folder-subscribe RBAC\nresolves for ticket-authenticated (embedded) connections. Export of v0.1.77.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ws): authorize ticketed subscribes as the ticket's user (RBAC)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-08T22:13:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b54fa5333b14851935a8fab78d6ff7604bd2954a",
"body": "/api/ws moved to an OPTIONAL-auth group so a cookieless ticket-only upgrade from\nthe embedded webcomponent passes through to the handler's ?ticket validation\n(the required-auth group 401'd it before). Native cookie panel unchanged.\n\nExport of gitlab brftech/filemanager @ v0.1.76.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ws): allow ticket-only (embedded/cross-origin) WebSocket connections",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-08T21:50:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "797eed1e4f50eaa709e13d2d10645cd026184b0b",
"body": "…ng fallback)\n\nLive collaboration now lives inside @brftech/filex-core's FileExplorer so every\nconsumer — native panel AND the embedded webcomponent — gets live folder updates\n+ presence, with no per-host wiring. WS ticket auth (POST /api/files/ws-ticket →\n{ticket, ws_url}; /api/ws accepts ?ticket) \n[…]\nen stays server-side.\nFalls back to API polling when no live socket is available.\n\nExport of gitlab brftech/filemanager @ v0.1.75.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(realtime): embed WS live-collab in the core (ticket auth + polli…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-08T17:22:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "987f26df07a20bf1ff35567405bee9fa86a8d26f",
"body": "…r, live-collab WebSocket\n\n- share: on-disk folder-share ZIP cache (keyed by node id + content signature) +\n 5-min background warmer + a \"Dosya hazırlanıyor… %N\" progress page. Downloads hit\n a warm cache (Content-Length) instead of re-walking + re-zipping every time.\n- sharex: POST /api/sharex/up\n[…]\nlder presence\n (who is here / which file each is on). Explore.vue + PresenceBar.\n\nExport of gitlab brftech/filemanager @ v0.1.74.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: folder-share ZIP cache + warmer + progress page, ShareX uploade…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-08T15:32:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ec6c3a0b8e78f40ae0ff55c45c923057d4f953cf",
"body": "… existing links\n\nThe permissions modal's \"Existing links\" section calls GET /api/files/share?path=\nto list (and revoke) an item's share links, but only POST (create) and DELETE\nexisted — so listShares always failed and the list stayed empty (\"no existing\nshare\") even right after creating a link. Ad\n[…]\nid} expects), url built from the token. Missing/unindexed paths return an\nempty list, not an error. Covered by share_list_test.go.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(share): add GET /api/files/share list endpoint so the modal lists…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-07T15:01:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "521679a9b25c72707f645b03026353b75c273f75",
"body": "Adds an OS share-sheet button (navigator.share — Windows share / Android /\niOS) beneath the \"Send\" mail button in both the Link (download) and Request\nfiles (drop) tabs of the permissions modal. Pressing it shares the same text\nthe invite email carries: item name (+ size for files), link, PIN and va\n[…]\nemplates.go. The button is hidden when\nthe browser has no navigator.share (e.g. desktop Linux Chrome) so there is no\ndead control.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(share): native \"Paylaş\" (Web Share API) button under the mail row",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-07T13:19:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8e821ce79f0cf8794c937e7dfdd2a411f5b3b591",
"body": "…ixes 404, denied dirs render as not-found\n\nBackend: blob stores (S3/GCS) list a nonexistent prefix as an empty\nsuccess, so the driver-fallback index rendered phantom folders as\nbrowsable empty dirs (200 + []). Zero objects now triggers a Stat\nconfirmation: a real empty dir (local/SFTP KindDirectory\n[…]\nh fake driver (phantom prefix 404, real children 200,\nempty bucket root 200) + cold-cache empty local dir stays 200 +\nnonexistent local dir 404.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(explorer): 'folder not found' for dead deep links — phantom pref…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-07T00:14:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ac1bcd403e16451fee6ec57141cfee479f6e4ebc",
"body": "On a cold-load deep link vue-router already includes the #<folder> hash in\nfullPath, so appending window.location.hash again produced\n/login?redirect=/explore#x#x and the post-login landing loaded a garbage\npath. Append the hash only when the route doesn't carry one (session expiry\nafter in-app navigation, where the explorer wrote it via replaceState).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(web): don't double the explorer hash in the login redirect",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-06T23:58:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "741f1a211060746b8a07e6cd66499ee03ffddb5c",
"body": "… deep links\n\nNew pathPersist mode 'hash+localStorage': the explorer writes the current\nfolder to the URL hash (#<storage>/<sub>) AND localStorage. Copying the\naddress bar now hands someone a link that opens the explorer directly at\nthat folder; hash-less visits still restore the remembered folder.\n\n[…]\nes ?redirect=<fullPath+hash> so logging in\n lands the user back on the deep link (local login; OIDC bounce stays\n fixed to /admin/ by design).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(explorer): address bar mirrors the current folder for copy-paste…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-06T23:29:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c804f5728fdbd5da91a83695893b7ff343490fe8",
"body": "…ip Set-Cookie\n\nA TLS-terminating CDN strips a Domain-scoped Set-Cookie from a 3xx response\nwhile passing it on a 200 (host-only cookies survive either way), so the\ncallback's 302 lost the session cookie behind the CDN and the SPA looped on\n/api/auth/me 401. The successful callback now writes the se\n[…]\nesh + location.replace + noscript link) to a fixed relative /admin/.\nError/maintenance branches stay 302. No config/DB change; single- and\nmulti-tenant. State cookie is host-only and already survives.",
"is_bot": false,
"headline": "fix(auth): OIDC callback lands via 200 HTML bounce so a CDN can't str…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-06T11:42:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56db733858556d30a51576c6705b94cc227585e5",
"body": "…ti-tenant\n\nRegression guard: multi-tenant + provider explicit cookie_domain + base64url\nOIDC token → callback emits filex_session=<token>; Domain=...; Secure, at both\nhandler-direct and full-router+middleware levels. Adds testutil.NewTestServerWith\nto inject an OIDC driver. No behavior change.",
"is_bot": false,
"headline": "test(auth): prove OIDC callback emits Domain-scoped Set-Cookie in mul…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-06T07:14:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01cc16c60099ec3dc62326157b2e102b9691abb1",
"body": "…rded-Proto aware)\n\nThe session cookie never set Secure; the OIDC state cookie set it only on\nr.TLS != nil, never true behind a TLS-terminating proxy (filex sees plain\nHTTP + X-Forwarded-Proto: https). Both now derive Secure from r.TLS OR\nX-Forwarded-Proto=https. On a Domain-scoped cookie this is what Chrome's\nschemeful-same-site needs to keep the cookie through the OIDC redirect\nchain. Plain-HTTP installs still get a non-Secure cookie.",
"is_bot": false,
"headline": "fix(auth): mark session + OIDC state cookies Secure on HTTPS (X-Forwa…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T23:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60abcb031070cbda2cc35ba0bb4233a787af87ac",
"body": "…der cookie domain\n\nCallback success/error/maintenance redirects derived their base from\nFILEX_PUBLIC_URL — in multi-tenant mode that is the operator host, so\nusers landed on the wrong tenant with no session. The base now comes\nfrom the request host when it resolves to an enabled provider row\n(trust\n[…]\nider.cookie_domain\n(new nullable column, migration 00015) > derived from provider host\n(files.example.com -> .example.com) > global FILEX_COOKIE_DOMAIN.\nSet + clear symmetric. Single-tenant unchanged.",
"is_bot": false,
"headline": "fix(multi-tenant): OIDC callback redirects to tenant host + per-provi…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T22:04:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c06abd7dc3b6dbf09f88676fecc05d845cd362b6",
"body": "Dockerfiles pin build stages to $BUILDPLATFORM and cross-compile the Go\nbinary via TARGETOS/TARGETARCH (CGO=0) — only the runtime stage's apk\ninstalls run per-arch; release workflow now builds both platforms via\nQEMU + buildx. Fix Dockerfile.full's silent no-op -X main.version ldflags\n(full images always reported 0.1.0-dev).",
"is_bot": false,
"headline": "feat(docker): multi-arch images (linux/amd64 + linux/arm64)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T21:29:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f145a0c786447e6a238ea6dc7710ad6abbe5574",
"body": "staticcheck U1000 on a never-referenced admin MCP input type, plus two\nfiles gofmt had drifted on. No runtime changes.",
"is_bot": false,
"headline": "fix(lint): drop unused adminIDFiltersIn + gofmt config/storage",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T20:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12eda646f70dff3c0bafe83e75a059c490cc968f",
"body": "…_DOMAIN\n\nTwo new opt-in knobs for SSO-only installs (both default OFF = behavior\nunchanged):\n\n- FILEX_OIDC_AUTO_REDIRECT: login page starts the OIDC flow immediately;\n password form stays reachable via /admin/login?local=1 (break-glass).\n Loop guards: ?local=1, ?error=oidc, ?maintenance=1, demo m\n[…]\nnd clear.\n\nFix: axios 401 interceptor no longer pushes /login during the initial\nnavigation — that push raced the pending navigation and stripped login\nquery params (?redirect, ?local=1, ?error=oidc).",
"is_bot": false,
"headline": "feat(auth): SSO-first login (FILEX_OIDC_AUTO_REDIRECT) + FILEX_COOKIE…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T20:58:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e46386810b044b3cb620e09fe90fb0d13b24761f",
"body": "- formatSize: a real zero (empty file/folder) renders \"0 B\" — zero is\n information, not absence; only null/negative stays \"—\".\n- index serialization: rows without a backend mtime (empty folders on\n synthetic-dir stores have no descendants to aggregate one from) fall back to\n the node's created_at\n[…]\nm the trash listing, best-effort and non-blocking, and gets a\n proper trash icon in both list and grid views instead of a folder.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(explorer): empty file/folder size+date + real Trash size/date/icon",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T12:43:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "38e0c11869aea10464d7697f7528ed4b3b194adc",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: CHANGELOG 0.1.61 (native multi-tenancy)",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T09:23:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7da0c2dd363593267e1c68f15e3163855a972da9",
"body": "…o-layer isolation\n\nOne filex install serving N tenants: a provider row = an auth realm (OIDC or\nlocal) bound to a host, linked to its storages. Realm X users see only storage\nX (even admins); users of other realms are invisible — including on the\npermission/grant picker. OFF by default: a single-te\n[…]\ns (tenant A\nnever sees tenant B), lifecycle guards, suspend + maintenance lockout — green;\nfull suite unchanged with the flag off.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: native multi-tenancy (FILEX_MULTI_TENANT) — provider=tenant, tw…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T09:23:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a8fb273b1bce66f52d4e36f2e19d8e53cc1ac440",
"body": "…lease job\n\nSync now backfills a missing backend_mtime for nodes first indexed by an older\nversion, so 0.1.59 folder \"last activity\" dates appear after an upgrade without\nwaiting for content to drift (one cheap write per node, only while null).\n\nThe npm publish is now a separate `npm` job, independe\n[…]\nalready-existing release tag). NPM_TOKEN must be an npm\nAutomation/granular token (bypasses 2FA); a Publish token fails with EOTP.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sync): backfill missing backend_mtime + split npm into its own re…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T00:35:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d4dbc7943b3dac6deb9bdee82baf99fd2abc91db",
"body": "Folders now show a date in the explorer alongside the recursive size added in\n0.1.58. The date is each folder's newest descendant mtime (\"last activity\"),\ncomputed in the same end-of-sync aggregation pass (one post-order walk, no extra\nqueries) and cached in nodes.backend_mtime — served from the ind\n[…]\n sidebar icon now reflects its contents: a full bin when the trash\nholds items, the empty bin otherwise (refreshed on navigation).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: folder \"last activity\" date + full/empty trash icon",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-05T00:13:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22df441771c3d566e64d350fc1a11ec0409c3ede",
"body": "…tep if)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release): fix npm step — guard in-script (secrets not allowed in s…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T23:37:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "48f811aa7c6693883a64d93ee1d4faa9ab51afb1",
"body": "…_LOCALE\n\nFolder rows now show their recursive size (cached on the node index, recomputed\neach sync, served without re-scanning the backend) and modified date. Operators\ncan pin the default UI language via FILEX_DEFAULT_LOCALE (overrides browser\ndetection; user switch still wins).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: folder size+date in explorer (cached, N+1-free) + FILEX_DEFAULT…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T23:31:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9bf003ad6e8c7eae86bce303621dbb4679531971",
"body": "…er-filex)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(converter): clean user guide + fix converter image name (convert…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T21:49:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1d6682da0b01d617bcf10efcef04b89f75b27b67",
"body": "…ret)\n\nPublishes @brftech/filex-{core,,react} to npmjs, versions pinned to the tag.\nRuns only when an NPM_TOKEN (npm Automation token) repo secret is set.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release): auto-publish npm packages on tag (gated on NPM_TOKEN sec…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T17:14:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a7c2a83737b452bdc850e0cd0f673296beb6fa61",
"body": "On a v* tag: build the frontend, embed it, and (1) run goreleaser to build\nlinux/macOS/windows x amd64/arm64 binaries + archives and attach them to a\nGitHub Release, and (2) build + push the Docker images to\nghcr.io/brf-tech/filex (:latest + :<tag>, plus :full). ci.yml stays build/test\nonly. goreleaser config validated locally (6 platform archives).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add release workflow — tag -> binaries (goreleaser) + ghcr images",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T11:25:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c5ce26b4d644435ad31ea39b06d3ac7ae671a65d",
"body": "…/s3) + fix JSON port\n\nGeneric FILEX_DEFAULT_STORAGE_CONFIG raw-JSON seed for any driver, surfaced in\nHelm (storage.config) + Compose (.env) with external S3 / SFTP / WebDAV examples.\nFix sftp/ftp custom-port parsing (JSON numbers are float64). STORAGE.md gains a\nclear plain-env / Compose / Helm 'connect a storage at install time' section.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(storage): connect any external storage from env (sftp/webdav/ftp…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T10:59:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a60d65b693fa489a29f6855cae6788a71d1b111a",
"body": "… mermaid\n\nBackend: seed all boot/UI settings from env on first boot (admin, SMTP, branding,\ntrash, an initial local/s3 storage), LDAP/proxy-header env bindings, OIDC redirect\nauto-default + read roles from the access token / dotted claim path so admin-group\nelevation works with a stock Keycloak. Re\n[…]\nO login -> admin elevation), and a Helm install on a kind\ncluster (pod Ready, seeded storage). Go unit tests + helm lint/template.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: zero-touch env config, selectable storage, converter fork, drop…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T10:34:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6abc77ddb602309fb2bc92c72c4b45f0dcd87ede",
"body": "… as toggles\n\nREADME: point Quick start at deploy/compose (minimal + full) and deploy/helm,\nlist them under Subdirectories, fix the releases URL + clone dir.\n\nFull Compose: all external integrations as opt-in profiles (onlyoffice, drawio,\nconvert, minio) toggled via COMPOSE_PROFILES + FILEX_*_URL; C\n[…]\nconvert as enabled+url integration toggles wired into filex env. So an add-on\nlike OnlyOffice can be dropped by flipping one flag.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "deploy: reference deploy/ from README + add all external integrations…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-04T09:08:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "11cf094feb3a585908012b1cea70b74f6fe86560",
"body": "… to GitHub private reporting\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: set license holder to BRF Tech + point security/conduct reports…",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-03T23:51:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e480a491190965c5e68024d7a3cba361312200bc",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add GitHub Actions build/test workflow",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-03T22:12:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f39f40ac4548ca40a9defee08979af475a55cad9",
"body": "filex is a self-hosted file manager: a single Go binary (or Docker\ncontainer) with a Vue 3 / React / Web Component frontend and pluggable\nstorage, auth, database and queue drivers.\n\n- Storage: local, S3, SFTP, WebDAV, FTP\n- Auth: local (TOTP), OIDC / SSO, LDAP / AD, reverse-proxy header, API tokens\n\n[…]\n for agents\n\nShips with full documentation (docs/), Docker Compose stacks\n(deploy/compose/) and a Helm chart (deploy/helm/filex/).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Initial public release",
"author_name": "Burak Karatay",
"author_login": "brkfun",
"committed_at": "2026-07-03T22:00:07Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 41,
"commits_last_year": 59,
"latest_release_at": "2026-07-19T05:03:52Z",
"latest_release_tag": "v0.7.5",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 4,
"days_since_latest_release": 5,
"mean_days_between_releases": 0.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/BRF-Tech/filex",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/BRF-Tech/filex",
"is_deprecated": false,
"latest_version": "v0.7.5",
"repository_url": "https://github.com/BRF-Tech/filex",
"versions_count": 41,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T04:54:20Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"notebooks"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"e2e/tsconfig.json",
"packages/core/tsconfig.json",
"packages/react/tsconfig.json",
"packages/webcomponent/tsconfig.json",
"web/tsconfig.json"
],
"toolchain_manifests": [
"backend/go.mod"
],
"largest_source_bytes": 117418,
"source_files_sampled": 453,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"backend/go.mod",
"docs-site/package.json",
"e2e/package.json",
"package.json",
"web/package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/aws/aws-sdk-go-v2",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.30.3"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.27.27"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.17.27"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.58.2"
},
{
"name": "github.com/blevesearch/bleve/v2",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.2"
},
{
"name": "github.com/blevesearch/bleve_index_api",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.10"
},
{
"name": "github.com/coder/websocket",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.15"
},
{
"name": "github.com/coreos/go-oidc/v3",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v3.11.0"
},
{
"name": "github.com/fatih/color",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.17.0"
},
{
"name": "github.com/fsnotify/fsnotify",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/getsentry/sentry-go",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.47.0"
},
{
"name": "github.com/go-chi/chi/v5",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v5.1.0"
},
{
"name": "github.com/go-chi/cors",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.1"
},
{
"name": "github.com/go-ldap/ldap/v3",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v3.4.8"
},
{
"name": "github.com/go-sql-driver/mysql",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.1"
},
{
"name": "github.com/google/uuid",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/jackc/pgx/v5",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v5.6.0"
},
{
"name": "github.com/jlaffaye/ftp",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/ledongthuc/pdf",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250511090121-5959a4027728"
},
{
"name": "github.com/modelcontextprotocol/go-sdk",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.1"
},
{
"name": "github.com/pkg/sftp",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.13.6"
},
{
"name": "github.com/pquerna/otp",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/pressly/goose/v3",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v3.21.1"
},
{
"name": "github.com/redis/go-redis/v9",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v9.19.0"
},
{
"name": "github.com/robfig/cron/v3",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "github.com/skip2/go-qrcode",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200617195104-da1b6568686e"
},
{
"name": "github.com/spf13/cobra",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.1"
},
{
"name": "github.com/stretchr/testify",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "golang.org/x/crypto",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.50.0"
},
{
"name": "golang.org/x/image",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.39.0"
},
{
"name": "golang.org/x/net",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.52.0"
},
{
"name": "golang.org/x/oauth2",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.0"
},
{
"name": "golang.org/x/term",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v0.45.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "modernc.org/sqlite",
"manifest": "backend/go.mod",
"ecosystem": "go",
"version_constraint": "v1.30.2"
},
{
"name": "@brftech/filex-core",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@headlessui/vue",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.23"
},
{
"name": "axios",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.7"
},
{
"name": "lucide-vue-next",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.453.0"
},
{
"name": "pinia",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.2.4"
},
{
"name": "vue",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.5.12"
},
{
"name": "vue-i18n",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^9.14.0"
},
{
"name": "vue-router",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.5"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 4,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "brkfun",
"commits": 59,
"avatar_url": "https://avatars.githubusercontent.com/u/19393636?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "101 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "62fde6c74fcf050fce26c0997ed6d3f9ae5ea150",
"ran_at": "2026-07-25T02:39:11Z",
"aggregate_score": 2.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T05:15:05Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-05T09:23:10Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/BRF-Tech/filex",
"host": "github.com",
"name": "filex",
"owner": "BRF-Tech"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 29,
"vitality": 69,
"community": 43,
"governance": 54,
"engineering": 89
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 59,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "59 commits in the last year",
"points": 16,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 59
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 41,
"latest_release_tag": "v0.7.5",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 0.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "41 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 41
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 43,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 1,
"open_issues": 0,
"closed_issues": 4,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "BRF-Tech",
"public_repos": 2,
"account_age_days": 892
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of BRF-Tech",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "BRF-Tech"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~2 yr old",
"points": 8.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/BRF-Tech/filex"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "41 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 41
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 89,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"docker",
"file-browser",
"file-manager",
"file-sharing",
"golang",
"mcp",
"multi-tenant",
"react",
"s3",
"self-hosted",
"sftp",
"vue",
"web-components",
"webdav"
],
"has_wiki": false,
"homepage": "https://filex.sh",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://filex.sh",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "14 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 14
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 29,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 29,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 2.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "101 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 67,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "59 of 59 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 59,
"sampled": 59
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"pnpm-lock.yaml"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"e2e/tsconfig.json",
"packages/core/tsconfig.json",
"packages/react/tsconfig.json",
"packages/webcomponent/tsconfig.json",
"web/tsconfig.json"
],
"agent_commit_share": 0.542,
"toolchain_manifests": [
"backend/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "backend/go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "backend/go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "32 of the last 59 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 32,
"sampled": 59
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 117418,
"source_files_sampled": 453,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/453 source files over 60KB",
"points": 54.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 453,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"notebooks"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "notebooks",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "notebooks"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T02:39:22.169743Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/BRF-Tech/filex.svg",
"full_name": "BRF-Tech/filex",
"license_state": "standard",
"license_spdx": "MIT"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.