CryptoLabInc/runed erreicht einen Gesundheitsindex von 50 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (65/100) ab, am schwächsten bei Security (27/100). Zuletzt vor 8 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
50
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
50
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 4 ⇿
0Sterne
4Forks
1Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 1Patch 0
OpenSSF Scorecard 2.7 / 10
2.7Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-28 17:15 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 283,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 261809,
"CMake": 1870,
"Shell": 3537,
"Makefile": 3980
},
"pushed_at": "2026-07-20T07:13:51Z",
"created_at": "2026-05-27T00:51:56Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T07:13:06Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://www.cryptolab.co.kr/",
"name": "CryptoLab Inc.",
"type": "Organization",
"login": "CryptoLabInc",
"company": null,
"location": "Korea, South",
"followers": 58,
"avatar_url": "https://avatars.githubusercontent.com/u/95674138?v=4",
"created_at": "2021-12-07T06:18:45Z",
"is_verified": null,
"public_repos": 37,
"account_age_days": 1694
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-07-20T07:15:40Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-09T04:12:54Z"
}
],
"recent_commits": [
{
"oid": "64722162ddb552cc8f42e0e3b4f3b14fa448a58b",
"body": null,
"is_bot": true,
"headline": "docs: prepare v1.0.0 release badge",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T07:12:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4981a529f5f4b51b504361ec2023fb698dd41d9",
"body": "release: v1.0.0",
"is_bot": false,
"headline": "Merge pull request #23 from CryptoLabInc/release/v1.0.0",
"author_name": "Sanghoon Park",
"author_login": "esifea",
"committed_at": "2026-07-20T07:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08802961700f1d7975c99adedf9aeec234b44e4f",
"body": null,
"is_bot": false,
"headline": "ci: add prepare release badge workflow",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-20T06:24:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2fd2f10034a37d4007e3108a16223280e9b4a23",
"body": null,
"is_bot": false,
"headline": "docs: refine README hero typography",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-20T06:24:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4a67fe3c61095b6cab28315957c2a68bc0864ea",
"body": null,
"is_bot": false,
"headline": "docs: refresh runed README",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-20T06:24:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdb35848cf19a4f67ca1ce73882c7e488d04fc56",
"body": "…rywhere the LICENSE goes\n\n- LICENSE: byte-exact apache.org LICENSE-2.0.txt\n (sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30)\n- NOTICE: Apache-2.0 §4(d) attribution (runed / Copyright 2026 CryptoLab, Inc.)\n- NOTICE rides with the LICENSE at every redistribution point: go:em\n[…]\nerified: go build ./... + full test suite (installLicenses now asserts the\nNOTICE lands verbatim), LICENSE checksum matches the canonical text.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(OPS-90): relicense runed itself MIT → Apache-2.0, ship NOTICE eve…",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-19T17:58:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "60e038d3892ad9dfde7c21aa993cead0bb930427",
"body": null,
"is_bot": false,
"headline": "fix(OPS-90): require notices in installs and release archives",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-19T17:58:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdd40e416856532698d0b1e2ea3aef3ccbeb875b",
"body": "runed redistributes llama-server (llama.cpp, MIT) and the Qwen3-Embedding\nGGUF weights (Apache-2.0) via self-bootstrap, but carried no license text at\nall — not even its own (README said \"LICENSE file forthcoming\"). MIT requires\nthe copyright + permission notice to accompany all copies, and Apache-2\n[…]\nalled copies are byte-identical to the embedded texts and self-heal on\nrerun; upstream texts diff-verified against their sources at fetch time.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(OPS-90): ship the license texts runed's redistribution requires",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-19T17:58:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2c0868e65a6bb7a50e479770956c73e3cb5287d9",
"body": null,
"is_bot": false,
"headline": "docs: keep socket comments implementation-focused",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-19T16:51:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2594f69cf17c4d041aa1b3777d8379f16a816d04",
"body": null,
"is_bot": false,
"headline": "fix(INST-7): isolate long-path socket aliases per user",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-19T16:51:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28978cde1987fd156a8f469eae015cb3cdde6287",
"body": "…E is deep\n\nA UNIX domain socket path must fit sockaddr_un.sun_path — 104 bytes on\nmacOS, 108 on Linux. When $RUNED_HOME sits under a deep directory (long\nscratchpad HOMEs, sandboxes), $RUNED_HOME/embedding.sock exceeds that and\nBOTH sides of the IPC failed: the daemon's bind died with the cryptic\n\"\n[…]\naths stay under the canonical home.\n\nWindows named pipes are unaffected; the resolver is pure and untagged, so\nGOOS=windows compiles as before.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(INST-7): bind the embedding socket at a short path when RUNED_HOM…",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-19T16:51:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "efa6a374c5d89ed401cb6e7bd2ed274530e848d7",
"body": "No Python file has ever existed in this repo's history; the\nscripts/.venv/ and __pycache__/ entries came along with the initial\npublic import.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: drop unused Python entries from .gitignore",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-17T10:10:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "94d6db48d4ae8838f543b9398d4bc77ad0490035",
"body": null,
"is_bot": false,
"headline": "renamed vault to console",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-17T09:29:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e836c571efc4cc81e27eceb3a6a7faa28dfa33b8",
"body": "… (review)\n\nPer review: probeHealthy is now a pure \"does /health answer 200?\" query with\nno side effect, and IsHealthy records proof of life on success. The direct\nprobeHealthy callers that only decide whether to restart (EnsureStarted's\nquick probe, restartIfDead's verdict probe) no longer reset th\n[…]\nf-corrects on the next embed completion, so at most one\nrequest in a rare window sees the extra latency — acceptable for the cleaner\nseparation.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(backend): stamp proof-of-life in IsHealthy, not probeHealthy…",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-17T02:28:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d9a82b09ce92f4df8daad93edcb07fbc008a5fb4",
"body": "…recovery\n\ndoJSON used http.DefaultClient (no timeout) with the caller's ctx, which\ncarries no deadline on the embed path (the server handler forwards the gRPC\nctx unchanged). A llama-server that accepts the TCP connection but never\nresponds — a hang, not a crash, since a crash resets the connection\n[…]\nerver that never responds — the\nembed returns on the timeout and a subsequent inflightMu.Lock drains, proving\nthe recovery path no longer hangs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backend): bound the embed HTTP call so a hung server can't wedge …",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-17T02:28:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d5c7e4d86f5556777d07f76e11bc3dae23398081",
"body": "… test\n\nReview findings on the busy-vs-dead verdict:\n\n1. restartIfDead did not re-check proof of life after acquiring restartMu.\n Followers queued behind a leader (whose drain let embeds complete and\n stamp lastAlive) would each run their own 2s reprobe and — under renewed\n saturation — their \n[…]\nd busy, restarting a\n healthy child and flaking the test. Replace the sleep with the same\n received-channel handshake inflight_test.go uses.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(review): follower fast-path in restartIfDead; deterministic drain…",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-17T02:28:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "85b65ad400a95e0fa9018312d77edc182677939c",
"body": "Under sustained embedding load (20 concurrent capture workers), EnsureStarted\nentered a kill/restart loop: the single-slot llama-server starves its /health\nendpoint while inference saturates it, the per-RPC 500ms probe missed, and one\nmissed probe was treated as death. Worse, the restart path called\n[…]\nleft alone; a child that recovers after the drain is not restarted and the\nin-flight embed completes un-severed; a truly dead child is replaced.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backend): stop mistaking a saturated llama-server for a dead one",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-17T02:28:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3f5006cbd3d6cf9ecaee51a902d1d7b15bef66a2",
"body": "- add installMu guarding the in-memory Store + disk Persist so two\n concurrent pushes of different sets can't leave memory holding one\n set while the cache holds another (a restart would then silently\n serve the stale one); guards only the tail, not the Recv loop\n- comment that header nlist is on\n[…]\npacity hint —\n the authoritative count is len(cs.Vectors) and the content hash\n already pins the exact vectors, so header nlist isn't enforced\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(server): make SetCentroids install atomic; document nlist as a hint",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-15T08:36:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d12b2077653c641b482b596b91b96addcbde44dc",
"body": "- verify_test: TestComputeVersionRecipe now hashes the hand-assembled\n bytes and compares to ComputeVersion, so recipe drift (dim/nlist order,\n endianness, preset NUL) actually fails the test instead of the golden\n buffer being dead\n- centroids_test: TestEmbedWithRouteRequiresCentroids wires a ba\n[…]\nsent, tag\n wrong) to cover the SetCentroids VerifyVersion gate the no-preset cases\n skip\n- add doc comments describing what each test verifies\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(route,server): fix hollow assertions and document each test",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-15T08:36:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "38f43c663acc49fe8dd7665e71d1fe8b8ca0133b",
"body": "Port the engine's exact version recipe (sha256 over dim LE, nlist LE,\npreset+NUL, float32 bits LE in id order — runespace/internal/cluster/\ncentroid.go computeVersion) as route.ComputeVersion, and add\nVerifyVersion to recompute it against the relayed Version tag.\n\nVerification runs at exactly two en\n[…]\nn bitrot\n\nRequires the new 'string preset = 4' header field (the missing hash\ningredient). Empty preset = legacy sender -> verification skipped.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(route): verify centroid content hash at receipt and cache load",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-15T08:36:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ee5c2912eb4718e2ecbbbc6aae067fa714ca0ae1",
"body": "Embed/EmbedBatch return FAILED_PRECONDITION for two opposite conditions:\nthe model is still loading (wait and retry the same call) vs no centroid\nset is loaded (push one via SetCentroids, then retry — §9.2 C4). Clients\ncould only tell them apart by parsing the human message, and rune-mcp\nmisdiagnose\n[…]\ntransport-level\nnon-retry decision (see TestServer_EmbedFailsBeforeBackendSet) and old\nclients are unaffected; new clients branch on the reason.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(server): tag embed preconditions with machine-readable reasons",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-15T08:36:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0f475f44d80eb360164bba2b751c48280802ab99",
"body": "runed never dials the index engine, but inserts need a plaintext IVF\ncluster assignment computed next to the embedding. The centroid set is\nrelayed runespace -> vault -> rune-mcp -> here:\n\n- SetCentroids (client-stream): header + id-ordered batches, validated\n against the daemon's embedding dim, in\n[…]\nrs can detect staleness.\n- internal/route: max-inner-product assignment (lowest-id ties),\n mirroring runespace-go-sdk's insert routing exactly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(routing): receive IVF centroids and return cluster assignments",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-15T08:36:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "93f51ac310a00c9ec6400f2fffb60c28bde82583",
"body": "perf(backend): trim llama-server flags for the embedding-only workload",
"is_bot": false,
"headline": "Merge pull request #15 from couragehong/perf/llama-server-embed-memory",
"author_name": "Yonggi Hong",
"author_login": "couragehong",
"committed_at": "2026-07-14T04:52:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6f47a7672790c9d2eb3c76ede0baca9dc9ca3f5",
"body": "llama-server's defaults are tuned for chat serving and cost an embedding\ndaemon real memory:\n\n- prompt cache (default cap 8 GiB) saves ~14 MiB of state per request at\n a ~0% hit rate, since every embedded text is unique — measured growing\n 1.8 GB -> 3.6 GB during a bulk-capture run. --cache-ram 0 \n[…]\nong/\nKorean/English/code inputs; over-ctx rejection behavior identical.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_014oTj8KKuD2q3feKTaqh81Y",
"is_bot": false,
"headline": "perf(backend): trim llama-server flags for the embedding-only workload",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-07-13T23:35:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5428f4106322d356b10ddc53afc4490d79620396",
"body": "fix(daemon): self-evict when socket is taken over; safe unlink-on-close",
"is_bot": false,
"headline": "Merge pull request #13 from couragehong/fix/runed-orphan-self-heal",
"author_name": "Yonggi Hong",
"author_login": "couragehong",
"committed_at": "2026-06-09T04:01:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e3e11c304d092a63efdd99e4493a72af0115339",
"body": "runed is meant to be a singleton on $RUNED_HOME/embedding.sock, but when\nthe home dir is recreated out from under a running daemon (e.g. a dev\n`rm -rf ~/.runed` + reinstall) the socket path and lock files get new\ninodes, so the single-instance guards fail open and a second daemon\nspawns. The old dae\n[…]\n regression tests: StillOwned transitions, and that an evicted\nlistener's Close does not delete a socket another listener rebound.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(daemon): self-evict when socket is taken over; safe unlink-on-close",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-06-09T03:53:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "42aa3d965581ea41c451140ecbd33667f682c053",
"body": "fix(bootstrap): retry transient manifest fetch failures at boot",
"is_bot": false,
"headline": "Merge pull request #12 from jh-lee-cryptolab/fix/manifest-fetch-retry",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-09T00:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff0d3ab0ecd3cedf849e069f0cbad301ea42f9d4",
"body": "FetchManifest did a single HTTP GET, so a transient GitHub CDN failure\n(e.g. a 504) hard-failed the daemon at boot even though artifact\ndownloads already retry via downloadWithRetry. This wraps the manifest\nfetch in the same bounded exponential-backoff retry (3 attempts, backoff\n5s -> 15s -> 45s, ct\n[…]\n), reusing the existing download retry\nconstants. Only the network fetch is retried; deterministic parse/version\nerrors fail fast.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(bootstrap): retry transient manifest fetch failures at boot",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-08T23:41:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b8f6e5fd1d5332c3a0e9f0aeea7beab5b2e98cc5",
"body": "…rerelease\n\nci(release): make prerelease publish idempotent via action-gh-release",
"is_bot": false,
"headline": "Merge pull request #11 from jh-lee-cryptolab/fix/release-idempotent-p…",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-05T06:24:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4e1f612e3c0971b98de89e813729ff119568487",
"body": "`gh release create` hard-fails when a release with the same tag already\nexists (\"a release with the same tag name already exists\"), breaking\nre-runs of the release workflow.\n\nSwitch to softprops/action-gh-release@v3, matching the rune / rune-mcp\nrelease workflows. The action creates the release if missing and updates\nit otherwise, so re-runs and existing tags no longer fail.",
"is_bot": false,
"headline": "ci(release): make prerelease publish idempotent via action-gh-release",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-05T06:23:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0692f7d6e3c71c67f57d7e81bc34508b7416c7e",
"body": "ci: pin linux build runners to ubuntu-22.04",
"is_bot": false,
"headline": "Merge pull request #9 from jh-lee-cryptolab/ci/pin-ubuntu-2204",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-02T08:04:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab18997b4bd46e717a634bef27aa83b2def23be8",
"body": "feat(health): report idle-suspended embedder as IDLE, not DEGRADED",
"is_bot": false,
"headline": "Merge pull request #10 from couragehong/feat/embedder-idle-status",
"author_name": "Yonggi Hong",
"author_login": "couragehong",
"committed_at": "2026-06-02T08:03:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "815d086459a2d38e9c62de3ccb99ec3c52a7171e",
"body": "Two related cleanups on top of the ubuntu-22.04 runner pin:\n\n1. Encode the build OS in artifact names so the glibc/SDK baseline is\n visible and cacheable, read from the running image (RUNNER_OS +\n /etc/os-release / sw_vers) rather than the runner label (which can be\n a rolling alias like ubunt\n[…]\nlease zip), and drop the\n now-empty `*.zip` from the publish upload glob. Stale Windows comments\n in the Makefile are removed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: name llama-server/runed artifacts by build OS; drop Windows",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-02T07:32:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f82b5b42d3930b1e611acdaca84d790fd57179f0",
"body": "The idle ticker stops llama-server after RUNED_IDLE_TIMEOUT to free model\nmemory; the next Embed RPC resurrects it. Health previously mapped any\ndown backend to STATUS_DEGRADED, so a status check looked broken during a\nnormal idle-suspend instead of signalling a benign, self-healing pause.\n\n- proto:\n[…]\nDEGRADED\n- server: Health maps Serving() -> IDLE/DEGRADED/OK, with an IDLE message\n- test: mapping + real-lifecycle coverage for the new states\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(health): report idle-suspended embedder as IDLE, not DEGRADED",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-06-02T07:31:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "87bfda1280ceea8fcc58f0969971fe9b9def57e9",
"body": "Pin the linux build/release matrix runners from ubuntu-latest (24.04)\nand ubuntu-24.04-arm to ubuntu-22.04 / ubuntu-22.04-arm across the\nllama-server and binary build workflows.\n\nBuilding on 22.04 links against an older glibc, so the shipped\nllama-server and runed binaries stay compatible with older\n[…]\nld allow. The publish job is left on\nubuntu-latest since it only assembles artifacts and creates the\nrelease (no compiled output).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: pin linux build runners to ubuntu-22.04",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-06-02T07:02:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "30dbd8b77e24674b1807f8f8de05d81ef4533eac",
"body": null,
"is_bot": false,
"headline": "feat(ci): add generating manifest step",
"author_name": "shpark",
"author_login": "esifea",
"committed_at": "2026-06-01T05:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad361c6e03f11d37e0a96d2c36f1d6e8a578166c",
"body": null,
"is_bot": false,
"headline": "refactor(bootstrap): change 'ensure*' functions to return installed spec",
"author_name": "shpark",
"author_login": "esifea",
"committed_at": "2026-06-01T02:32:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3c0556743e492487368ffc44388fa516fd53682",
"body": null,
"is_bot": false,
"headline": "feat(bootstrap): add audit installation",
"author_name": "shpark",
"author_login": "esifea",
"committed_at": "2026-06-01T02:32:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80a672d9d3129e7f06e630cd8084892df487344e",
"body": null,
"is_bot": false,
"headline": "feat(bootstrap): implement audit installation helpers",
"author_name": "shpark",
"author_login": "esifea",
"committed_at": "2026-06-01T02:32:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d04f8d3fed035d3e20fb9152c8682832cdc3ac29",
"body": null,
"is_bot": false,
"headline": "fix(runed): route serve-error exit through shared shutdown cleanup",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-31T05:07:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a044a72bfb3aa429089ee2d2ab3d38d598d9d8b",
"body": "The three preceding commits accumulated a lot of explanatory prose\nthat restates what well-named identifiers already convey. This pass\nprunes WHAT-style narration, \"added for X\" meta notes, and historical\ncontext, keeping only the lines that capture a non-obvious WHY:\npublish order in SetBackend, th\n[…]\nge ticks before AcquireLock, etc.\n\nNo behaviour change; ~145 lines net removed across server / bootstrap\n/ runed plus their tests.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(comments): trim verbose docs to WHY-only",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-31T05:07:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "da07205395434c3f34d0d12717ae0acb4d5a11b6",
"body": "The gRPC UDS used to open *after* self-bootstrap completed, so clients\nconnecting during the multi-minute install window only saw dial\nfailures. They now connect immediately and observe STATUS_LOADING with\nthe current Phase + bytes_done / bytes_total / message — exactly what\nthe proto envisioned whe\n[…]\n a child that failed health-probe, leaving an orphan llama-\nserver holding ~470MB; b.Stop is idempotent on never-spawned backends.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(runed): listen before bootstrap + surface progress via Health RPC",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-31T05:07:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "239e3f23ce7516126f211165c55f49b5bf6d152b",
"body": "Threads an optional reporter through EnsureAll / EnsureLlamaServer /\nEnsureModel so download-byte progress and per-stage transitions reach\ncallers without coupling the bootstrap package to a specific status\nsink (e.g. server.SetBootstrapStatus).\n\nCallback shape:\n\n type StatusReporter func(stage s\n[…]\n\nEnsureAll path explicitly issues the llama-server → model transition\nbetween the two internal calls (still inside the same lock).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(bootstrap): StatusReporter callback for download progress",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-31T05:07:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f189f7ea42abbd515a22917dd8e1da2050583616",
"body": "Until self-bootstrap completes, Embed/EmbedBatch return\ncodes.FailedPrecondition rather than dialing into a nil backend, and\nHealth reports STATUS_LOADING with the current Phase / bytes_done /\nbytes_total / message that bootstrap can feed in.\n\nMechanics:\n\n- backend reference moves to atomic.Pointer[\n[…]\n.\n\nTests cover the LOADING / SetBootstrapStatus reflection /\nFAILED_PRECONDITION before-SetBackend / SHUTTING_DOWN priority cases.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(server): bootstrap-aware Server status surface",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-31T05:07:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1988e8049efc879c01166f57c22aab5450dc0af",
"body": "feat: backend idle-suspend (keep runed alive across idle)",
"is_bot": false,
"headline": "Merge pull request #5 from couragehong/feat/backend-idle-suspend",
"author_name": "Yonggi Hong",
"author_login": "couragehong",
"committed_at": "2026-05-28T08:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "783c20b5beda2d9e416fc86c7aa27c21a20e173d",
"body": "Nothing called cmd.Wait on the happy path, so if llama-server crashed\non its own (SEGV, OOM-kill, signal) the child became a zombie until\nthe next stopLocked ran. b.cmd still pointed at the dead PID, so the\nnext EnsureStarted entered the haveCmd=true branch, failed the health\nprobe, and restarted vi\n[…]\nh now wait on the\nwatcher's done channel instead of calling cmd.Wait themselves —\nsingle Wait caller per cmd, as the API requires.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backend): watcher goroutine reaps child + logs unexpected exits",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T08:22:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5e95b98b163970d12a6a432be8b5b8a59fe2ec61",
"body": "http.DefaultClient has no client-side timeout and the idle-suspend\nticker passes a deadline-less daemon ctx, so a hung llama-server\n(GPU stall, swap thrash, kernel D-state, etc.) would block IsHealthy\nforever — wedging the ticker goroutine and silently disabling idle\nsuspend for the rest of the daem\n[…]\nreStarted, Start's health poll, Health RPC) is protected by\ndefault. Drops the now-redundant context.WithTimeout in EnsureStarted.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backend): bound IsHealthy with internal 500ms timeout",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T08:03:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "587cd3f66e9a41e0cab4a4dd1715c3932177427d",
"body": "Without it, the idle ticker could SIGTERM llama-server while an Embed\nHTTP call was in flight and the client would see a connection reset.\nStop now takes an inflightMu writer Lock so it waits for every in-flight\nEmbed/EmbedBatch (RLock readers) to finish before signalling the child.\n\nResidual race w\n[…]\nered in server.Embed/EmbedBatch via a one-shot\nretry on the new backend.ErrNotStarted sentinel, so the client never\nsees the race.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backend): inflightMu protects Embed from idle-ticker Stop",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T07:49:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b492b8f7797ad8c09f50efc479e7955af7096f94",
"body": "The env table entry and the Usage paragraph that described idle timeout\nas \"daemon exit\" no longer match behaviour. Rewritten to reflect:\n\n- runed itself stays up after idle\n- llama-server child is stopped to release model weights\n- next Embed/EmbedBatch transparently resurrects the backend\n- daemon process exits only on SIGINT/SIGTERM/SIGHUP or Shutdown RPC",
"is_bot": false,
"headline": "docs(readme): RUNED_IDLE_TIMEOUT now means backend-suspend",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T07:14:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35bcdbac46fb9775baf08965698a386764ea131",
"body": "The idle ticker now calls backend.Stop instead of srv.TriggerShutdown.\nruned itself stays up — gRPC socket keeps listening, supervisor (if any)\nstays alive, no respawn churn on the next request. Only the llama-server\nchild dies, releasing the ~470MB+ of model weights from memory.\n\nResumption is tran\n[…]\n post-suspend ticks are silent noops rather than redundant\nStop calls.\n\nRUNED_IDLE_TIMEOUT semantics shift from \"daemon exit\" to \"backend\nsuspend\"; doc comment updated accordingly. \"0\" still disables.",
"is_bot": false,
"headline": "feat(runed): idle handler suspends backend, keeps daemon alive",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T07:14:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5dc789ae58089f24703e3df9e3d0bbd1c0f0aa9e",
"body": "Embed and EmbedBatch now call backend.EnsureStarted before delegating to\nthe backend HTTP path. When the backend was suspended by the idle ticker\n(see follow-up commit), the first embed-class RPC after suspend pays the\nllama-server cold-start latency on its own request; subsequent RPCs hit\nthe cheap\n[…]\nstart / rpc done log\nlines for Embed and EmbedBatch only — Health / Info / Shutdown stay\nsilent so monitor polling doesn't drown the log. shortMethod /\nisEmbedMethod helpers keep that filter readable.",
"is_bot": false,
"headline": "feat(server): wake backend on embed RPC + per-RPC logging",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T07:14:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "630350692d910d35709867807f8a03d4f96f9043",
"body": "LlamaBackend now supports resumption after Stop. The first Start records\nits context as daemonCtx; subsequent EnsureStarted calls re-spawn the\nchild under that long-lived ctx instead of any short RPC ctx, so the\nresurrected llama-server outlives the request that woke it.\n\n- lifecycleMu serializes St\n[…]\np a partially-started child\n- Cold-start log line (info + duration_ms on completion, warn when an\n existing process is reaped because it stopped serving) so the daemon\n log shows resumption activity",
"is_bot": false,
"headline": "feat(backend): EnsureStarted + idempotent Stop for idle-suspend",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T07:14:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4ca08b3cb0c6ab18a69148ef2bcb4626e07e40bb",
"body": "feat: runed self-bootstrap with manifest-driven artifact install",
"is_bot": false,
"headline": "Merge pull request #4 from couragehong/feat/self-bootstrap",
"author_name": "Yonggi Hong",
"author_login": "couragehong",
"committed_at": "2026-05-28T07:10:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e5ea433bd71a8757cf386436f5b055edebfb24",
"body": "EnsureAll did both artifacts in one shot, so a caller who set only\nRUNED_LLAMA_SERVER or only RUNED_MODEL still paid for the other side's\ndownload — which the env override on the call site then discarded.\n\nA stricter side effect: ensureLlamaServer's first line is\nm.LlamaServerForCurrentPlatform(), s\n[…]\n manifest has no entry for the current\nplatform, and EnsureModel succeeds in the same setup as long as the\ntarget model is cached.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(bootstrap): split EnsureAll for partial-env-override case",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T06:46:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6f2ee1355a1e256984a100389de9c906cade70ea",
"body": "A transient network blip during a multi-hundred-MB model download\nshouldn't fail the entire boot. downloadWithRetry wraps DownloadAndVerify\nwith up to 3 attempts and 5s/15s exponential backoff; caller cancellation\n(ctx.Err) short-circuits the retry loop so shutdown isn't delayed.\n\nApplied to both ensureModel and ensureLlamaServer for consistency,\nsince both download via the same code path and benefit from the same\nresilience.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(bootstrap): retry artifact downloads with exponential backoff",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T05:47:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e5c822ff1bd4fed0486458e2029bcead503e0776",
"body": "… hold\n\nThe 10m InstallLockTimeout was shorter than the leader's legitimate\nupper bound: ensureLlamaServer and ensureModel each run under\ndownloadTimeout (2h), so a slow-but-healthy install can hold the lock\nfor up to 4h. A trailer arriving during a 15-minute model download\nwould surface a confusing\n[…]\nfort) so a\ntimed-out trailer gets \"another runed instance (pid N) is bootstrapping\n— retry shortly\" instead of a bare flock error.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(bootstrap): widen install lock timeout to match worst-case leader…",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T05:37:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8449a5e2b969b23501dce23ff19d78743e907cdf",
"body": "The old strings.Contains(name, \"..\") prefilter over-rejected legitimate\nfilenames containing literal dots (e.g. \"libllama..1.2.dylib\"), and the\nfollow-up filepath.Rel block was redundant with it. filepath.IsLocal\n(Go 1.20+) judges path-traversal lexically — it accepts dotted names,\nrejects absolute \n[…]\non,\nand handles Windows reserved forms in one call. Sufficient under the\ntrusted-manifest + SHA-256-verified-archive threat model.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(bootstrap): use filepath.IsLocal for tar entry safety check",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T05:19:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1b4519718f2cf59bb33ba2181804f180f385caac",
"body": "Compare resp.ContentLength against the manifest's expectedSize right\nafter the HTTP status check, so a divergence aborts the request before\n~470MB of model bytes hit the partial file. The post-stream size check\nstays as a safety net for chunked transfers (ContentLength == -1) and\nfor servers that lie in their headers.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(bootstrap): reject Content-Length mismatch before streaming",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T04:35:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0c802da780639faf35016499bec92ff7978c9a51",
"body": "Decoder.Decode silently accepts garbage after the JSON document; for a\nchannel where the body must be exactly one manifest, the stricter\nUnmarshal surfaces corruption / MITM as a parse error instead of\nswallowing it. Drops the now-unused bytes import and adds a regression\ntest that pins the trailing-data rejection.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(bootstrap): parse manifest with json.Unmarshal",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T04:26:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79d61737c7319673455ba42341582488df8d2e79",
"body": "Build instructions belong with the rest of the developer setup in\nCONTRIBUTING.md. The README only keeps a one-line pointer for readers\nwho notice the build-time ldflags default in the env table.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: move build-time options from README to CONTRIBUTING",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T04:18:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "07b9b2442dacdf69fd43fd3b7199abfb72d548dd",
"body": "Replace TBD sections with the actual flow:\n\n- Installation: rune install bakes DEFAULT_MANIFEST_URL into the binary;\n scripts/dev_standalone.sh for local testing\n- Usage: spawn-on-Connect via client.Connect, foreground launch for dev\n- Configuration: env var table, build-time ldflags, manifest format\n reference, config.json shared by spawn + bootstrap readers",
"is_bot": false,
"headline": "docs(readme): document self-bootstrap installation/usage/configuration",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T00:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70fa61b10f3dbef1522082213245311e5c49fa50",
"body": "go fmt ./... normalized doc-comment indentation that drifted in the\nfork. No behaviour change.",
"is_bot": false,
"headline": "chore: gofmt comment indentation in test files",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T00:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3bfb3b6d92484f262e85e1c1243fe71907a2dc",
"body": "dev_standalone.sh runs an end-to-end self-bootstrap test against a local\nHTTP server:\n\n- copies scripts/manifest.dev.json into the docroot\n- serves it via python3 -m http.server (background)\n- builds runed + rundemo with DEFAULT_MANIFEST_URL pointing at the\n local server and DEFAULT_RUNED_BINARY=$H\n[…]\n binary\n- --clean wipes ~/.runed/{bin/llama-cpp,models,cache} for fresh-install\n verification\n\nmanifest.dev.json carries the URL/sha256/size metadata so the runner\nscript holds no artifact specifics.",
"is_bot": false,
"headline": "chore(scripts): dev_standalone.sh + manifest.dev.json",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T00:44:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2e7325d87fab51b89fef8590e02348442e81ba74",
"body": "spawn config no longer requires the file or any field. LlamaServer /\nModel staying unset means \"let the daemon self-bootstrap\"; launchDaemon\nno longer forces those values into the child env.\n\nRunedBinary resolution chain:\n config > PATH > DefaultRunedBinary (ldflags) > os.Executable\n (basename==\"r\n[…]\nkefile injects DEFAULT_MANIFEST_URL and DEFAULT_RUNED_BINARY via\n-ldflags. Both runed and rundemo receive the same flags so a client\nauto-spawning the daemon resolves the binary without env or config.",
"is_bot": false,
"headline": "feat(spawn,build): optional spawn config + DefaultRunedBinary",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T00:44:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b0595e1b0ce3ca0bbd1781205a3a5648d2d518a5",
"body": "cmd/runed/main.go calls selfBootstrap when RUNED_LLAMA_SERVER or\nRUNED_MODEL is unset, then proceeds to backend.Start.\n\n- anotherDaemonReachable probe before bootstrap: exit 0 if another\n daemon already serves the socket; clean up stale socket files\n- threads the daemon's *slog.Logger into bootstrap.EnsureAll for\n step-by-step INFO output (manifest fetch, ensure target, cache hit,\n downloading, extracting, install complete)\n- HTTP-not-HTTPS manifest URL warning",
"is_bot": false,
"headline": "feat(runed): wire self-bootstrap on missing env",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T00:39:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c03cad202ad70d66bfe6aba4bc8de1f12a5cc791",
"body": "internal/bootstrap downloads the llama-server tarball and embedding GGUF\ndescribed by a manifest at first boot, so runed can run standalone\nwithout pre-installed dependencies or external setup scripts.\n\n- paths.go: Paths struct, EnsureDirs, model variant filenames\n- config.go: ~/.runed/config.json r\n[…]\ny flock with polling\n- install.go: EnsureAll holds install.lock, ensures llama_server via\n sidecar SHA marker, ensures model via per-file hash compare, emits\n throttled progress through *slog.Logger",
"is_bot": false,
"headline": "feat(bootstrap): introduce self-bootstrap package",
"author_name": "couragehong",
"author_login": "couragehong",
"committed_at": "2026-05-28T00:39:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b23a8f37e9b5d548bd5cd89af812357cb9a97cea",
"body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release): mark tag-triggered releases as prerelease",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T13:42:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b60aa603c42c341565eaf982dd6d513a89d4f679",
"body": "Replace the build-llama stub with the real vendor workflow. Builds\nllama-server for darwin/arm64, linux/amd64, linux/arm64, and\nwindows/amd64. Exposes the binary two ways:\n\n 1. GHCR (ghcr.io/<repo>/llama-server:<ref>-<os>-<arch>) — pushed on\n non-PR events where the runner token has packages:wr\n[…]\nand ref-bump cases — PRs that introduce a new ref or\nthat run before GHCR is populated still produce a binary via fresh\nbuild, and PRs against existing refs skip rebuild but still hand off\nthe binary.",
"is_bot": false,
"headline": "feat(ci): build-llama reusable workflow with GHCR + artifact handoff",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T13:42:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc4c50f1e2f6276fbfaa4f07432fbac81e8be3eb",
"body": "Vendor llama.cpp at a pinned ref and build llama-server as part of the\nrelease pipeline so distributed tarballs are self-contained. Go\nintegration tests in internal/{backend,server} run as both PR and tag\ngates, exercising the full spawn → embed → 1024-dim path.\n\nPins (single source of truth):\n- .ll\n[…]\nauto to 4 and SIGTERMed mid-compile).\n\nbuild.yml/release.yaml consume the vendor artifact produced by the\nbuild-llama reusable workflow added in the next commit; they don't\nbuild llama.cpp themselves.",
"is_bot": false,
"headline": "feat(ci): build llama-server from source + E2E smoke gate",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T13:42:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cea56499e86c53567845a3619d497aea9d03dd5d",
"body": "…OSes\n\nprobeDaemon dialed first and inferred classification from errno. Linux\nreturns ECONNREFUSED when dialing a regular file at the socket path,\nwhich folded into dialAbsent and let EnsureDaemon proceed to spawn —\nrisking clobber. macOS returns ENOTSOCK which fell into dialHostile.\n\nStat first: if the path exists but isn't a socket, classify hostile\nregardless of OS. Mirrors the same check ipc.Listen already performs\nserver-side.",
"is_bot": false,
"headline": "fix(spawn): classify non-socket paths as hostile consistently across …",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T13:42:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "061cc8634cee1b19074b93f4423736bc5a682828",
"body": "Three tests passed nil to server.New, which dereferences the backend\nin int32(b.CtxSize()) during construction and panics. Match the\nconvention used by the Info/Health tests in the same file and pass a\nzero-config LlamaBackend.",
"is_bot": false,
"headline": "fix(server): use zero-config backend instead of nil in server tests",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T13:42:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ec877f50cd202aaac61e9a5c9bfce3a912284af",
"body": "Placeholder file so future PRs can reference this workflow path.\nImplementation (matrix build of llama.cpp + GGUF push to ghcr.io) lands\nin a follow-up PR; this stub only declares the workflow_dispatch surface\nand the packages: write permission scope.",
"is_bot": false,
"headline": "chore(ci): add build-llama workflow stub",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T05:28:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6cc8ce7b3c3fc082436ccb4a18928c58b8f353",
"body": "Shared embedding daemon wrapping llama.cpp's llama-server\nto serve Qwen3-Embedding-0.6B over gRPC on a UNIX domain socket.",
"is_bot": false,
"headline": "init: public import of runed",
"author_name": "Jeonghwan Lee",
"author_login": "jh-lee-cryptolab",
"committed_at": "2026-05-27T01:12:39Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 73,
"latest_release_at": "2026-07-20T07:15:40Z",
"latest_release_tag": "v1.0.0",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 5,
"days_since_latest_release": 8,
"mean_days_between_releases": 41.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": true,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/CryptoLabInc/runed",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/CryptoLabInc/runed",
"is_deprecated": false,
"latest_version": "v1.0.0",
"repository_url": "https://github.com/CryptoLabInc/runed",
"versions_count": 8,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T07:12:04Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 4,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-05-27",
"count": 2
},
{
"date": "2026-05-31",
"count": 1
},
{
"date": "2026-07-11",
"count": 1
}
],
"complete": true,
"collected": 4,
"total_forks": 4
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"proto/runed/v1/runed.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 37625,
"source_files_sampled": 64,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "google.golang.org/genproto/googleapis/rpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260120221211-b8f7ae30c516"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.80.0"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.36.11"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 21,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "couragehong",
"commits": 53,
"avatar_url": "https://avatars.githubusercontent.com/u/138414513?v=4"
},
{
"type": "User",
"login": "jh-lee-cryptolab",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/167725275?v=4"
},
{
"type": "User",
"login": "esifea",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/10397778?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.736
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-llama.yml",
"build.yml",
"prepare-release.yml",
"release.yaml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 4,
"reason": "6 out of 13 merged PRs checked by a CI test -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 7,
"reason": "Found 10/13 approved changesets -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "11 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "64722162ddb552cc8f42e0e3b4f3b14fa448a58b",
"ran_at": "2026-07-28T17:15:55Z",
"aggregate_score": 2.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T07:15:47Z",
"oldest_open_prs": [
{
"number": 17,
"created_at": "2026-07-16T11:39:48Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T07:12:04Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/CryptoLabInc/runed",
"host": "github.com",
"name": "runed",
"owner": "CryptoLabInc"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"security": 27,
"vitality": 65,
"community": 35,
"governance": 64,
"engineering": 50
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 65,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"commits_last_year": 73,
"human_commit_share": 0.986,
"days_since_last_push": 8,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "73 commits in the last year",
"points": 16.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 73
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v1.0.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 41.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~41.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 41.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 35,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 4,
"inputs": {
"forks": 4,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "4 forks",
"points": 4,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 4
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.736
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 74% of commits",
"points": 5.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 74
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 85,
"inputs": {
"merged_prs": 21,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "21/23 decided PRs merged",
"points": 34.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 21,
"decided": 23
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 10/13 approved changesets -- score normalized to 7",
"points": 10.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 58,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "CryptoLabInc",
"public_repos": 37,
"account_age_days": 1694
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "58 followers of CryptoLabInc",
"points": 12.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 58,
"login": "CryptoLabInc"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "37 public repos, account ~4 yr old",
"points": 20.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 37
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/CryptoLabInc/runed"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "8 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 8
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 50,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 13 merged PRs checked by a CI test -- score normalized to 4",
"points": 8,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 27,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 27,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 2.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 13 merged PRs checked by a CI test -- score normalized to 4",
"points": 1,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 10/13 approved changesets -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "11 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 61,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.986,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "71 of 72 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 71,
"sampled": 72
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.466,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "34 of the last 73 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 34,
"sampled": 73
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 37625,
"source_files_sampled": 64,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/64 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 64,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"proto/runed/v1/runed.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "proto/runed/v1/runed.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "proto/runed/v1/runed.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-28T17:16:11.356526Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/CryptoLabInc/runed.svg",
"full_name": "CryptoLabInc/runed",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit CryptoLabInc/runed teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
