RobotWebTools/rclnodejs erreicht einen Gesundheitsindex von 78 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (96/100) ab, am schwächsten bei AI Readiness (59/100). Zuletzt vor 7 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
78
gesamt / 100
Gut
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
78
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Release-Rhythmus — ein Release etwa alle 20,1 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
98
latest_release_tag
2.1.1
releases_from_tags
nein
days_since_latest_release
8
mean_days_between_releases
20,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
46
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:rclnodejs@2.1.1 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 46 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 85 ⇿
0Sterne
85Forks
96Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 2Minor 39Patch 44
Jeder Punkt umfasst 9 Tage.
OpenSSF Scorecard 5.0 / 10
5.0Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-31 02:18 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 10 direkte und 44 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
npm
@rclnodejs/ref-array-di
^1.2.2
direkt
npm
@rclnodejs/ref-struct-di
^1.1.1
direkt
npm
bindings
^1.5.0
direkt
npm
debug
^4.4.0
direkt
npm
json-bigint
^1.0.0
direkt
npm
node-addon-api
^8.3.1
direkt
npm
node-gyp
^12.2.0
direkt
npm
rxjs
^7.8.1
direkt
npm
walk
^2.3.15
direkt
npm
ws
^8.18.0
direkt
npm
@electron-forge/cli
^7.11.1
indirekt
npm
@electron-forge/maker-deb
^7.11.1
indirekt
npm
@electron-forge/maker-rpm
^7.11.1
indirekt
npm
@electron-forge/maker-squirrel
^7.11.1
indirekt
npm
@electron-forge/maker-zip
^7.11.1
indirekt
npm
@electron-forge/plugin-auto-unpack-natives
^7.11.1
indirekt
npm
@electron-forge/plugin-fuses
^7.11.1
indirekt
npm
@electron/rebuild
^4.0.3
indirekt
npm
@eslint/js
^10.0.1
indirekt
npm
@types/node
^22.16.4
indirekt
npm
@types/node
^22.16.5
indirekt
npm
@types/node
^26.0.0
indirekt
npm
@typescript-eslint/eslint-plugin
^8.18.0
indirekt
npm
@typescript-eslint/parser
^8.18.0
indirekt
npm
c8
^12.0.0
indirekt
npm
clang-format
^1.8.0
indirekt
npm
commander
^15.0.0
indirekt
npm
concurrently
^9.2.0
indirekt
npm
coveralls
^3.1.1
indirekt
npm
deep-equal
^2.2.3
indirekt
npm
electron
^41.0.0
indirekt
npm
eslint
^10.0.2
indirekt
npm
eslint-config-prettier
^10.0.2
indirekt
npm
eslint-plugin-prettier
^5.2.1
indirekt
npm
globals
^17.0.0
indirekt
npm
husky
^9.1.7
indirekt
npm
jsdoc
^4.0.4
indirekt
npm
lint-staged
^17.0.0
indirekt
npm
mocha
^11.0.2
indirekt
npm
prebuildify
^6.0.1
indirekt
npm
rclnodejs
^2.0.0
indirekt
npm
rimraf
^6.0.1
indirekt
npm
sinon
^22.0.0
indirekt
npm
three
^0.155.0
indirekt
npm
three
^0.182.0
indirekt
npm
tree-kill
^1.2.2
indirekt
npm
ts-node
^10.9.2
indirekt
npm
tsd
^0.33.0
indirekt
npm
tsup
^8.5.1
indirekt
npm
tsx
^4.19.2
indirekt
npm
typescript
^5.7.2
indirekt
npm
typescript
^5.8.3
indirekt
npm
typescript
^6.0.2
indirekt
npm
vite
^6.0.7
indirekt
Abhängigkeits-Advisories 0
Die Installation von npm:rclnodejs@2.1.1 zieht 46 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"ros",
"nodejs",
"client",
"rcl",
"robotics",
"typescript",
"ros2",
"javascript",
"esm",
"webnative"
],
"is_fork": false,
"size_kb": 44896,
"has_wiki": true,
"homepage": "https://robotwebtools.github.io/rclnodejs/docs/",
"languages": {
"C": 2400,
"C++": 311457,
"CSS": 22484,
"CMake": 2765,
"Shell": 5760,
"Python": 32447,
"Makefile": 154,
"Dockerfile": 1618,
"JavaScript": 1696718,
"TypeScript": 28565,
"Go Template": 37342
},
"pushed_at": "2026-07-23T09:20:37Z",
"created_at": "2017-05-19T14:17:20Z",
"owner_type": "Organization",
"updated_at": "2026-07-26T05:36:55Z",
"description": "Node.js version of ROS 2.0 client ",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "develop",
"license_spdx_raw": "Apache-2.0",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"C++"
]
},
"owner": {
"blog": "https://robotwebtools.github.io/",
"name": "Robot Web Tools",
"type": "Organization",
"login": "RobotWebTools",
"company": null,
"location": null,
"followers": 349,
"avatar_url": "https://avatars.githubusercontent.com/u/1491238?v=4",
"created_at": "2012-03-02T04:49:03Z",
"is_verified": null,
"public_repos": 23,
"account_age_days": 5263
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "2.1.1",
"kind": "patch",
"published_at": "2026-07-22T05:03:48Z"
},
{
"tag": "2.1.0",
"kind": "minor",
"published_at": "2026-06-25T02:03:38Z"
},
{
"tag": "2.1.0-beta.0",
"kind": "prerelease",
"published_at": "2026-06-11T07:43:58Z"
},
{
"tag": "2.0.0",
"kind": "major",
"published_at": "2026-05-25T07:45:46Z"
},
{
"tag": "2.0.0-beta.0",
"kind": "prerelease",
"published_at": "2026-05-06T09:24:56Z"
},
{
"tag": "1.9.0",
"kind": "minor",
"published_at": "2026-04-07T06:12:35Z"
},
{
"tag": "1.9.0-alpha.0",
"kind": "prerelease",
"published_at": "2026-04-01T08:46:46Z"
},
{
"tag": "1.8.3",
"kind": "patch",
"published_at": "2026-03-09T08:03:30Z"
},
{
"tag": "1.8.2",
"kind": "patch",
"published_at": "2026-02-24T08:48:43Z"
},
{
"tag": "1.8.1",
"kind": "patch",
"published_at": "2026-01-22T05:11:51Z"
},
{
"tag": "1.8.0",
"kind": "minor",
"published_at": "2026-01-07T05:39:02Z"
},
{
"tag": "1.7.0",
"kind": "minor",
"published_at": "2025-11-26T05:19:07Z"
},
{
"tag": "1.6.0",
"kind": "minor",
"published_at": "2025-10-30T07:36:12Z"
},
{
"tag": "1.5.2",
"kind": "patch",
"published_at": "2025-10-13T09:29:19Z"
},
{
"tag": "1.5.1",
"kind": "patch",
"published_at": "2025-09-11T08:34:37Z"
},
{
"tag": "1.5.0",
"kind": "minor",
"published_at": "2025-08-18T04:50:53Z"
},
{
"tag": "1.4.2",
"kind": "patch",
"published_at": "2025-07-31T06:25:49Z"
},
{
"tag": "1.4.1",
"kind": "patch",
"published_at": "2025-07-22T06:20:25Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2025-07-07T04:50:38Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2025-07-01T01:46:25Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2025-06-09T05:26:05Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2025-05-23T08:19:56Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2025-05-06T05:27:39Z"
},
{
"tag": "0.33.0",
"kind": "minor",
"published_at": "2025-04-08T10:35:20Z"
},
{
"tag": "0.32.5",
"kind": "patch",
"published_at": "2025-03-31T06:29:06Z"
},
{
"tag": "0.32.4",
"kind": "patch",
"published_at": "2025-03-13T08:45:57Z"
},
{
"tag": "0.32.3",
"kind": "patch",
"published_at": "2025-03-11T07:59:39Z"
},
{
"tag": "0.32.2",
"kind": "patch",
"published_at": "2025-03-10T08:52:35Z"
},
{
"tag": "0.32.1",
"kind": "patch",
"published_at": "2025-03-08T15:28:43Z"
},
{
"tag": "0.32.0",
"kind": "minor",
"published_at": "2025-03-06T02:45:05Z"
},
{
"tag": "0.31.0",
"kind": "minor",
"published_at": "2025-02-25T05:21:32Z"
},
{
"tag": "0.30.0",
"kind": "minor",
"published_at": "2025-02-19T02:01:03Z"
},
{
"tag": "0.29.0",
"kind": "minor",
"published_at": "2025-02-08T09:02:07Z"
},
{
"tag": "0.28.1",
"kind": "patch",
"published_at": "2025-01-24T06:32:16Z"
},
{
"tag": "0.28.0",
"kind": "minor",
"published_at": "2025-01-15T06:09:28Z"
},
{
"tag": "0.27.5",
"kind": "patch",
"published_at": "2024-12-09T07:41:33Z"
},
{
"tag": "0.27.4",
"kind": "patch",
"published_at": "2024-08-13T05:18:59Z"
},
{
"tag": "0.27.3",
"kind": "patch",
"published_at": "2024-08-12T06:55:23Z"
},
{
"tag": "0.27.2",
"kind": "patch",
"published_at": "2024-08-06T08:43:57Z"
},
{
"tag": "0.27.1",
"kind": "patch",
"published_at": "2024-06-27T02:37:32Z"
},
{
"tag": "0.27.0",
"kind": "minor",
"published_at": "2024-05-31T08:57:46Z"
},
{
"tag": "0.26.1",
"kind": "patch",
"published_at": "2024-02-08T08:45:07Z"
},
{
"tag": "0.26.0",
"kind": "minor",
"published_at": "2024-02-05T04:52:58Z"
},
{
"tag": "0.25.0",
"kind": "minor",
"published_at": "2024-01-10T04:18:47Z"
},
{
"tag": "0.24.0",
"kind": "minor",
"published_at": "2024-01-08T07:33:35Z"
},
{
"tag": "0.23.3",
"kind": "patch",
"published_at": "2023-12-11T06:19:13Z"
},
{
"tag": "0.23.2",
"kind": "patch",
"published_at": "2023-11-16T04:43:16Z"
},
{
"tag": "0.23.1",
"kind": "patch",
"published_at": "2023-09-15T08:17:36Z"
},
{
"tag": "0.23.0",
"kind": "minor",
"published_at": "2023-09-11T08:43:53Z"
},
{
"tag": "0.22.3",
"kind": "patch",
"published_at": "2023-08-18T05:30:36Z"
},
{
"tag": "0.22.2",
"kind": "patch",
"published_at": "2023-06-06T07:47:45Z"
},
{
"tag": "0.22.1",
"kind": "patch",
"published_at": "2023-04-17T07:18:59Z"
},
{
"tag": "0.22.0",
"kind": "minor",
"published_at": "2023-04-03T08:28:26Z"
},
{
"tag": "0.21.4",
"kind": "patch",
"published_at": "2022-11-18T09:35:59Z"
},
{
"tag": "0.21.3",
"kind": "patch",
"published_at": "2022-07-29T09:07:58Z"
},
{
"tag": "0.21.2",
"kind": "patch",
"published_at": "2022-06-16T16:28:58Z"
},
{
"tag": "0.21.1",
"kind": "patch",
"published_at": "2022-04-02T09:37:17Z"
},
{
"tag": "0.21.0",
"kind": "minor",
"published_at": "2022-01-06T07:30:13Z"
},
{
"tag": "0.20.1",
"kind": "patch",
"published_at": "2021-11-02T05:56:18Z"
},
{
"tag": "0.20.0",
"kind": "minor",
"published_at": "2021-07-21T04:57:23Z"
},
{
"tag": "0.19.0",
"kind": "minor",
"published_at": "2021-05-24T09:24:12Z"
},
{
"tag": "0.18.2",
"kind": "patch",
"published_at": "2021-04-27T08:54:14Z"
},
{
"tag": "0.18.1",
"kind": "patch",
"published_at": "2021-02-10T03:23:00Z"
},
{
"tag": "0.18.0",
"kind": "minor",
"published_at": "2021-01-08T07:01:19Z"
},
{
"tag": "0.17.0",
"kind": "minor",
"published_at": "2020-11-27T03:29:09Z"
},
{
"tag": "0.16.0",
"kind": "minor",
"published_at": "2020-10-09T05:31:11Z"
},
{
"tag": "0.15.3",
"kind": "patch",
"published_at": "2020-08-27T09:07:58Z"
},
{
"tag": "0.15.2",
"kind": "patch",
"published_at": "2020-08-07T04:01:15Z"
},
{
"tag": "0.15.1",
"kind": "patch",
"published_at": "2020-07-30T05:39:24Z"
},
{
"tag": "0.15.0",
"kind": "minor",
"published_at": "2020-07-21T09:19:29Z"
},
{
"tag": "0.14.1",
"kind": "patch",
"published_at": "2020-06-10T08:24:14Z"
},
{
"tag": "0.14.0",
"kind": "minor",
"published_at": "2020-05-09T03:19:50Z"
},
{
"tag": "0.13.0",
"kind": "minor",
"published_at": "2020-03-12T07:20:26Z"
},
{
"tag": "0.12.0",
"kind": "minor",
"published_at": "2020-02-19T05:52:55Z"
},
{
"tag": "0.11.1",
"kind": "patch",
"published_at": "2019-12-16T08:19:13Z"
},
{
"tag": "0.11.0",
"kind": "minor",
"published_at": "2019-12-13T14:43:24Z"
},
{
"tag": "0.10.3",
"kind": "patch",
"published_at": "2019-11-18T04:56:40Z"
},
{
"tag": "0.10.2",
"kind": "patch",
"published_at": "2019-09-16T07:13:08Z"
},
{
"tag": "0.10.1",
"kind": "patch",
"published_at": "2019-08-16T03:20:30Z"
},
{
"tag": "0.10.0",
"kind": "minor",
"published_at": "2019-06-17T07:14:02Z"
},
{
"tag": "0.9.0",
"kind": "minor",
"published_at": "2019-01-24T09:34:26Z"
},
{
"tag": "0.8.0",
"kind": "minor",
"published_at": "2019-01-04T07:43:50Z"
},
{
"tag": "0.7.1",
"kind": "patch",
"published_at": "2018-11-26T08:49:21Z"
},
{
"tag": "0.7.0",
"kind": "minor",
"published_at": "2018-11-16T06:11:32Z"
},
{
"tag": "0.6.1",
"kind": "patch",
"published_at": "2018-11-05T05:05:34Z"
},
{
"tag": "0.6.0",
"kind": "minor",
"published_at": "2018-10-19T07:42:45Z"
},
{
"tag": "0.5.0",
"kind": "minor",
"published_at": "2018-09-03T03:26:34Z"
},
{
"tag": "0.4.2",
"kind": "patch",
"published_at": "2018-08-16T05:15:41Z"
},
{
"tag": "0.4.1",
"kind": "patch",
"published_at": "2018-08-03T03:25:45Z"
},
{
"tag": "0.4.0",
"kind": "minor",
"published_at": "2018-07-26T09:59:22Z"
},
{
"tag": "0.3.5-beta.6",
"kind": "prerelease",
"published_at": "2018-04-02T03:10:34Z"
},
{
"tag": "0.3.4-beta.5",
"kind": "prerelease",
"published_at": "2018-03-01T02:35:42Z"
},
{
"tag": "0.3.3-beta.4",
"kind": "prerelease",
"published_at": "2018-02-06T02:32:12Z"
},
{
"tag": "0.3.2-beta.3",
"kind": "prerelease",
"published_at": "2018-01-26T03:12:54Z"
},
{
"tag": "0.3.1-beta.2",
"kind": "prerelease",
"published_at": "2017-12-29T02:47:06Z"
},
{
"tag": "0.3.0-beta.1",
"kind": "prerelease",
"published_at": "2017-12-15T07:50:44Z"
},
{
"tag": "0.2.0-alpha.2",
"kind": "prerelease",
"published_at": "2017-12-01T03:55:32Z"
},
{
"tag": "release-alpha1",
"kind": "other",
"published_at": "2017-11-03T06:40:06Z"
}
],
"recent_commits": [
{
"oid": "62e89b67c5e41c54e0f4b1f5298f87328a87ba75",
"body": "Fix: #1562",
"is_bot": false,
"headline": "Pump to 2.1.1 (#1563)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-07-22T03:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31930185862cf6b82ac42db0c6bd2b7a25e56707",
"body": "- Bump `c8` from `^11.0.0` to `^12.0.0`.\n- Pin `node-gyp` from `^13.0.0` down to `^12.2.0` to restore Node 20.x compatibility (`node-gyp@13.x` dropped support for Node 20).\n\nFix: #1559, #1561",
"is_bot": false,
"headline": "Pump c8 to 12.x (#1560)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-07-20T05:52:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f06958009f06b3e934eeabacfd2d02a8f1c526e",
"body": "This PR updates the project READMEs to highlight a “web-native” way to subscribe to ROS 2 topics using Server-Sent Events (SSE) via the browser’s built-in `EventSource`, without requiring a browser SDK.\n\n**Changes:**\n- Add an `EventSource` snippet demonstrating SSE-based topic subscription in the root `README.md`.\n- Mirror the same SSE subscription snippet in `scripts/npmjs-readme.md` (used for npm packaging/readme generation).\n\nFix: #1510",
"is_bot": false,
"headline": "[docs] Demonstrate web-native SSE subscribe in READMEs (#1554)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-30T03:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df5044fe68aef336b234ff9ceda69cbf8906be3c",
"body": "The complex/primitive message-translator tests created a publisher and subscriber on one topic, published a single message, then spun. With volatile QoS that lone sample is only delivered if pub/sub discovery completes within the first DDS announcement window; when that window is missed, matching on\n[…]\nil the subscription receives the message, bounded to 55s so the timer self-cleans before the Mocha timeout, and clear the interval + destroy the node on both the success and failure paths.\n\nFix: #1556",
"is_bot": false,
"headline": "[Test] Stabilize message-translator tests on Node.js 26.4 (#1555)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-30T02:02:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6af64daf35d3d365a71907ef4aed52ccc77a491",
"body": "…#1553)\n\nReplace the gh-pages branch cache with a stateless build so the published documentation site is fully reproducible from a curated manifest and the Git release tags. Every deploy rebuilds the complete site from scratch, so there is no branch state that can drift.\n\n- Add tools/jsdoc/published\n[…]\nifact.\n- tools/jsdoc/README.md: document the stateless manifest + tags model and the new naming; drop the obsolete \"Recovering a Dropped Version\" section and redundant gh-pages references.\n\nFix: #1552",
"is_bot": false,
"headline": "[Docs] Rebuild JSDoc site as a pure function of manifest + git tags (…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-25T07:15:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9771c098b4a7b35f2c82b6190e4d63a21ed3e5c5",
"body": "Adds Server-Sent Events (SSE) subscription support and CORS to the HTTP transport, so browsers and other HTTP clients can `subscribe` to ROS topics over plain HTTP (no WebSocket required) and call the runtime cross-origin.\n\n## Core (`lib/runtime/`)\n\n- **`transports/http.js`** (+334 / −26) — the bulk\n[…]\nst-web-cli.js` (+105) — new cases for `--http-sse`, `--http-sse-keep-alive` (including bin-flow NaN rejection), and `--http-cors` (single, accumulation, precedence) plus config validation.\n\nFix: #1510",
"is_bot": false,
"headline": "[Web runtime] Add SSE subscribe + CORS to HttpTransport (#1537)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-25T06:07:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c45a5836f66188b51a89f766f727da18c935521f",
"body": "Fix: #1540",
"is_bot": false,
"headline": "Pump to 2.1.0 (#1547)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-24T09:03:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58801391c194f4f72d214ac8d82e37fb8c126839",
"body": "Add a \"Release notes\" link to the sidebar of each generated jsdoc release so developers browsing a version's API reference can jump straight to that release's notes for a quick overview of what changed.\n\n- tmpl/layout.tmpl: derive the release-notes URL from the package.json `repository.url` (strip t\n[…]\n the slug from package.json keeps forks/renames working.\n- static/styles/jsdoc-default.css: add a `.brand-release-notes` style matching the sidebar accent color with an underline on hover.\n\nFix: #1550",
"is_bot": false,
"headline": "[jsdoc] Add per-release GitHub release-notes link to sidebar (#1551)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-24T06:00:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8aeafaedbbf886dd0b8bdfd7916d268eded13e39",
"body": "Fix: #1548",
"is_bot": false,
"headline": "Pump @types/node (#1549)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-23T08:36:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24dabc41ee57ca3d963c081fc1cf68a3f612cf47",
"body": "## Summary\nMake the Electron demos load the prebuilt `rclnodejs` native binary at runtime instead of recompiling it during `electron-forge` packaging, fix the `turtle_tf2` demo's stuck loading screen on GPU-less environments (WSL2/headless), shorten the demo READMEs, and harden the native-loader uni\n[…]\non `existsSync.lastCall`, which now points at the new `build/Release` mirror probe. Adds a guard assertion for a clearer failure message and drops the now-redundant `rclnodejs.node` check.\n\nFix: #1545",
"is_bot": false,
"headline": "[Demo][Electron] Load prebuilt binaries at runtime (#1546)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-22T06:36:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc78bfa19a37ba23284107a2d0759b6e00ad7eca",
"body": "Fix: #1543",
"is_bot": false,
"headline": "Pump node-gyp to 13.0.0 (#1544)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-17T08:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "610dada030e63148acb49711c080fcd67931c511",
"body": "Align the npm-published README (scripts/npmjs-readme.md) with the package's ESM-first API.\n\n- Quick-start snippet: replace the CommonJS `require()` + `init().then()` form with native ESM `import rclnodejs from 'rclnodejs'` and top-level `await rclnodejs.init()`.\n- TypeScript guidance: update the sample tsconfig from `commonjs` / `node` / `es2020` to `NodeNext` / `NodeNext` / `es2022` to match ESM module resolution.\n\nFix: #1541",
"is_bot": false,
"headline": "[Doc] Switch npmjs README examples to ESM (#1542)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-17T02:27:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c5df58e7346c439002b840c0f401c5514b05474",
"body": "The `windows-2025` GitHub Actions runner provisions Visual Studio 2026 (v18) alongside VS 2022, and `gha-setup-vsdevenv` selects the newest install via `vswhere -latest`. The v18 `constexpr` evaluator crashes with an Internal Compiler Error (C1001) while instantiating node-addon-api's templated `Ins\n[…]\neserving the read-only `length` accessor exactly while avoiding the `constexpr` template path that trips the ICE. This compiles cleanly on every platform/toolset and is a no-op at runtime.\n\nFix: #1538",
"is_bot": false,
"headline": "[Windows] Fix native build failure on the VS 2026 toolset (#1539)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-16T01:47:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "04822d074c5f7973bbb575af3efc32335a1e1d49",
"body": "Fix: #1535",
"is_bot": false,
"headline": "Pump to 2.1.0-beta.0 pre-release (#1536)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-11T06:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10a5ef4fd51216d5ceb52d06e7c97d554cb3536c",
"body": "## 1. ESM migration of `example/` (44 files)\nConverted every CommonJS example to native ESM (`.cjs` → `.mjs`):\n- Dropped `'use strict'`, replaced `require('…/index.js').default` with `import rclnodejs from '…/index.js'`.\n- Unwrapped `main()` / `.then().catch()` into top-level `await` + `try/catch`.\n\n[…]\n 'rclnodejs'`.\n- Quick Start: stale `publisher-example.cjs` → `publisher-example.mjs`.\n- TypeScript `tsconfig` snippet → `module: NodeNext`, `moduleResolution: NodeNext`, `target: es2022`.\n\nFix: #1358",
"is_bot": false,
"headline": "[Demo] Modernize TypeScript demos to NodeNext + ES2022 (#1534)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-11T05:43:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "01731e0b25da93ec6541a5de4581af3ce2c9ca61",
"body": "…(#1533)\n\nThe `./rosocket` subpath export shipped **no type declarations**, so under `node16`/`nodenext` module resolution:\n\n- `import { startRosocket } from 'rclnodejs/rosocket'` failed with **TS7016** (the module implicitly had an `any` type).\n- `@arethetypeswrong` reported **No types** for the su\n[…]\nype file and is not flagged as \"Masquerading as ESM\".\n- **Wire per-condition `types` into the `./rosocket` export** in `package.json` (`import` → `index.d.ts`, `require` → `index.d.cts`).\n\n\nFix: #1532",
"is_bot": false,
"headline": "fix(types): add type declarations for the rclnodejs/rosocket subpath …",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-10T08:29:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "774b637821ac4a30917c423b0a8cf428830bca2d",
"body": "### Build system\n- **Add `tsup` dual build** (`tsup.config.js`, new): authored source stays native ESM but tsup now emits both formats into a flat `dist/` — `dist/index.{js,cjs}`, `dist/web.{js,cjs}`, `dist/server.{js,cjs}`, `dist/rosocket.{js,cjs}`. CJS-island generators (`rosidl_gen/*`, `rostsd_ge\n[…]\nuccessfully; `npm run lint` clean; `node --check` passes on all renamed/new `.cjs`/`.mjs` files. (Native addon build still requires a sourced ROS environment — unrelated to these changes.)\n\nFix: #1358",
"is_bot": false,
"headline": "ESM Migration Phase 3 — dual ESM + CommonJS build (#1531)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-10T02:47:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "43c2b3a85f4ad78d05a01675dc149a95857c0478",
"body": "**Overview:** 189 files changed, +957 / −1162. Converts `lib/`, `index.js`, `bin/`, `rosocket/` and the full test suite to native ES modules; keeps build/codegen tooling as `.cjs`; updates CI to ROS 2 Lyrical (Ubuntu 26.04); and fixes a native-addon debug-build compile error.\n\n### Core ESM conversio\n[…]\nfixing the ASan debug-build compile failure under Lyrical.\n\n### Tests\n- All `test/test-*.js` converted to ESM; `tutorials/.../test_usability.js` renamed to `.cjs`; `test/utils.js` updated.\n\nFix: #1358",
"is_bot": false,
"headline": "Phase 2: convert lib/, index.js and tests to native ES modules (#1530)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-09T08:17:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9488c15fff15c64c71718ef0bed57ef0a5f29129",
"body": "First phase of the ESM migration. Renames the build- and generator-time modules that must remain CommonJS — they run synchronously under Node (node-gyp, `postinstall`, message generation) — from `.js` to `.cjs`. The explicit `.cjs` extension pins them to CommonJS ahead of introducing `\"type\": \"modul\n[…]\nire paths** — `message-template.cjs` output strings\n- **External requires** — `index.js`, `lib/interface_loader.js`, `lib/message_introspector.js`, `example/rosidl/*`, and 8 `test/*` files\n\nFix: #1358",
"is_bot": false,
"headline": "Phase 1: Rename CJS-only build/generator files to .cjs (#1529)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-06T13:51:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19b5a416a833015a8c30fe14546caf4b74099ff0",
"body": "- Switch `module` and `moduleResolution` to `nodenext` to align with modern Node.js library publishing and ES module resolution semantics.\n- Bump `target` and `lib` to `es2022`. The project's existing `engines` floor (`node >= 20.20.2`) guarantees full ES2022 runtime support, so targeting es2022 is \n[…]\n-level await is illegal.\n- Remove stale boilerplate section-label comments (`Strict Type-Checking Options`, `Additional Checks`) carried over from the original generated tsconfig template.\n\nFix: #1527",
"is_bot": false,
"headline": "Modernize tsconfig.json for Node.js module resolution (#1528)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-04T09:00:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fce926b3b4aaff96d8aab7eaf13f9a742b066484",
"body": "Support the constructor form of `TypeClass` (the value returned by `rclnodejs.require(...)`) with full type inference for messages, services, and actions, bringing it on par with the existing string and object-descriptor forms, and make the runtime loader accept that form so it works end to end.\n\n##\n[…]\nacks via `typeof Ctor`.\n- All three demos depend on the local rclnodejs (`file:../../..`) and document `npm install --ignore-scripts`; README source examples use the current LTS (Lyrical).\n\nFix: #1525",
"is_bot": false,
"headline": " Infer concrete types from constructor TypeClass forms (#1526)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-03T09:13:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd5f5b15aad755c1ec07769b69343b5363767004",
"body": "Fix: #1523",
"is_bot": false,
"headline": "Pump commander to 15.0.0 (#1524)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-01T02:47:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbea9afcbf10eb0cca6213508163b87b879f878a",
"body": "Port rclpy's `LoggingService` to rclnodejs so a node can optionally expose `<node>/get_logger_levels` and `<node>/set_logger_levels` services for runtime log-level inspection and updates, and stabilize CI by wrapping flaky test steps with `nick-fields/retry@v4`.\n\n## Feature\n- New `lib/logging_servic\n[…]\ny_wait_seconds: 10`, `timeout_minutes: 60`) in linux-x64, linux-arm64, windows, and asan workflows. Build-only, docs, publish, and orchestration workflows are intentionally left untouched.\n\nFix: #1521",
"is_bot": false,
"headline": "Add enable_logger_service option for runtime log level control (#1522)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-06-01T02:07:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b527ca38c6ddb49e6ec3f7acd4e181cd2a4ca9e0",
"body": "Port rclpy PR ros2/rclpy#1647 (commit cfac914) to expose `rcl_publisher_event_type_is_supported()` and `rcl_subscription_event_type_is_supported()`, so user code can query the active RMW implementation about which QoS events it delivers before wiring up a handler.\n\nThe underlying rcl APIs (ros2/rcl#\n[…]\ne-symbol presence — asserts the unavailable-throw path, boolean returns for every enum value, `MATCHED` reported supported, and the right validation-error class/message for invalid inputs.\n\nFix: #1519",
"is_bot": false,
"headline": "Add publisher/subscription_event_type_is_supported (#1520)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-26T03:38:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d78f9aaf710ee36c940079188256744574be1d1c",
"body": "Fix: #1458",
"is_bot": false,
"headline": "Pump to 2.0.0 (#1517)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-25T05:50:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2438f51d813094f416845f7d13e89a3a4b897a8",
"body": "…1518)\n\nDrop the lyrical-specific `ros-lyrical-test-msgs` / `ros-lyrical-mrpt-msgs` lines from the \"Install ROS2 from apt (lyrical)\" step and instead let the shared \"Install test-msgs and mrpt_msgs on Linux\" step handle them, the same way it already does for humble / jazzy / kilted. Keep the `!= 'ro\n[…]\nly.\n- `.github/workflows/linux-arm64-build-and-test.yml` — same trim; the shared step has no `if:` here because arm64 has no rolling lane.\n\nRefs: a3bb702 (\"Add ROS 2 Lyrical Luth (#1496)\")\n\nFix: #1458",
"is_bot": false,
"headline": "Install test-msgs and mrpt-msgs uniformly across all ROS 2 distros (#…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-25T05:50:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b9eeafcf1e3ba424b1f556879798f22abb30651",
"body": "…browser demos (#1514)\n\nA typed Web SDK guide for `rclnodejs/web`, two end-to-end browser demos (zero-build JavaScript + Vite TypeScript), and the surrounding doc / terminology / packaging cleanup.\n\n## What's new\n\n- **`web/README.md`** *(new)* — single source of truth for the browser SDK: server run\n[…]\n* (`lib/runtime/dispatcher.js`, `lib/runtime/transports/ws.js`, `lib/message_serialization.js`, `rosocket/index.js`, `test/test-rosocket.js`) — comment / wording only, no behaviour change.\n\nFix: #1510",
"is_bot": false,
"headline": " [Web Runtime] `rclnodejs/web` SDK guide + JavaScript and TypeScript …",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-25T03:34:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "018aa1a88ebe64e72cd29d679be04f546a648429",
"body": "…516)\n\nPer the official Lyrical install guide (https://docs.ros.org/en/lyrical/Installation/Ubuntu-Install-Debs.html), ROS 2 Lyrical is now available as Debian packages on Ubuntu 26.04. Switch all four Linux workflows to `apt-get install -y ros-lyrical-desktop` and drop the date-stamped beta tarball\n[…]\n7).\n\nWindows still has no apt equivalent and continues to use the binary zip, but its lyrical URL is bumped from the `release-lyrical-beta-20260430` snapshot to `release-lyrical-20260522`.\n\nFix: #1458",
"is_bot": false,
"headline": "[Lyrical] Switch Linux CI to apt-deb install and bump Windows zip (#1…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-25T01:50:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "128faf62adc3b6954d9bd96a6c890ba379513f79",
"body": "Both transports now apply the default path when (and only when) the caller didn't supply one. Before this commit WS required the caller to spell `/capability` out (`connect('ws://host:9000')` silently failed against a default server) and HTTP did the opposite (it hardcoded `/capability/<kind>/<name>\n[…]\nfigurations behind a reverse proxy. Same \"user URL is authoritative when non-default\" model could extend to support them, but that deserves its own PR with proxy-deployment docs and tests.\n\nFix: #1510",
"is_bot": false,
"headline": "Align WS and HTTP transports on a default `/capability` path (#1515)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-13T07:33:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "837cd85016adb02114b74193128ce2193f5de37c",
"body": "Adds the bundled `rclnodejs-web` (and `rcl-web` short alias) CLI so frontend developers can run the Web Runtime without writing a Node.js server.\n\n- `bin/rclnodejs-web.js` (new, 138 LOC) — declarative launcher. Reads a JSON config (`web.json`) and/or repeatable `--call` / `--publish` / `--subscribe`\n[…]\n, and end-to-end CLI launches that probe the runtime via raw WebSocket and HTTP `fetch` (3).\n\n- `package.json` — two `bin` entries: `rclnodejs-web` (canonical) and `rcl-web` (short alias).\n\nFix: #1510",
"is_bot": false,
"headline": "[Web Runtime] rclnodejs-web CLI launcher (#1513)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-12T10:04:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b6e5e7c273706b974492dccbc864e98bbfdbab0",
"body": "- New `HttpTransport` (lib/runtime/transports/http.js): POST /{basePath}/capability/{call|publish}/{name}, dispatcher-code → HTTP-status mapping, 1 MiB body cap, optional verifyRequest hook. Re-exported from lib/runtime/index.{js,d.ts}.\n\n- Browser SDK (web/client.js, web/index.d.ts) now multi-transp\n[…]\n ContextifyScript) triggered once we load web/client.js as ESM and call fetch() — singletons retained for process lifetime.\n\n- Drop unused WebSocketConnection export from transports/ws.js.\n\nFix: #1510",
"is_bot": false,
"headline": "HTTP transport for call/publish (#1512)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-12T08:53:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "134e06bfca26f02e180618aa7f5a8ea260fe1b6b",
"body": "New `rclnodejs/web` subpath: a pure-JS, ESM Browser SDK that talks to the existing Web Runtime over WebSocket. Zero native deps; safe to bundle for browsers. Verb API:\n\n```js\nimport { connect } from 'rclnodejs/web';\n\nconst ros = await connect('ws://robot.local:9000/capability');\nconst reply = await \n[…]\n `web/index.d.ts` |\n| ESM mode marker | `web/package.json` (`{\"type\":\"module\"}`) |\n| Subpath export `./web` | `package.json` |\n| SDK-only integration tests (4 cases) | `test/test-web.js` |\n\nFix: #1510",
"is_bot": false,
"headline": "[Web Runtime] Typed Browser SDK over WebSocket (#1511)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-12T05:26:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5a4eb65d21f68684c590a66b237ec65bdccfd61",
"body": "Opt-in **Web Runtime** that lets browser code talk to ROS 2 via an explicit, allow-listed set of capabilities exposed by a host Node.js process. JSON over WebSocket; transport-agnostic dispatcher so HTTP/etc. can plug in later. Reachable only through the new `rclnodejs/web/server` subpath export — n\n[…]\nined, used by `electron`'s postinstall) silently aborts on Node ≥ 26.1. Native addon coverage is already provided by the mocha suite that runs first; drop the gate when upstream is fixed.\n\n\nFix: #1510",
"is_bot": false,
"headline": "Rclnodejs web capability runtime over WebSocket (#1509)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-11T10:13:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09b1f2ded42a01c01d41341555bc78c2961e6712",
"body": "Reorder, trim, and align the README and the npmjs landing page so they read cleanly for ROS 2 developers (repo) and web developers shopping on npmjs (package page).\n\n## README.md\n\n- Reorder `##` sections by ROS 2 developer priority: promote `ROS 2 Interface Message Generation`, `Using rclnodejs with\n[…]\n stays consistent with the repo README.\n- Add a lean **rosocket** section between TypeScript and License.\n- Reorder \"Documentation and Examples\" bullets to surface rosocket above Electron.\n\nFix: #1458",
"is_bot": false,
"headline": "[Docs] Refine README and npmjs landing page (#1508)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-07T07:30:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23d88fb09832fe4826ff0e53c1769c037382603e",
"body": "Roll Lyrical Luth into the user-facing docs now that 2.0.0-beta.0 ships Lyrical support and Linux x64/arm64 prebuilds for Ubuntu 26.04 (Resolute). Tracks the \"After beta, before Lyrical GA\" tasks in #1458.\n\n- README.md: add Lyrical to the ROS 2 distro CI badge; add `Ubuntu 26.04 (Resolute) - ROS 2 L\n[…]\nJazzy, and Humble`).\n- scripts/npmjs-readme.md: add Lyrical to the supported distros sentence and to the Prebuilt Platforms list; flip the ROS 2 SDK link from `en/jazzy/` to `en/lyrical/`.\n\nFix: #1458",
"is_bot": false,
"headline": "[Docs] Surface ROS 2 Lyrical and the 2.0.0-beta.0 baseline (#1507)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-07T03:14:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c12b2a95254e0ff5b37941cd23dbaf597a673a69",
"body": "Lyrical Luth will be the next ROS 2 LTS, so make it the test target on the Windows pixi job. Flip `run_tests: true` from `jazzy` to `lyrical`; Jazzy, Kilted, and Rolling remain build-only.\n\nFix: #1458",
"is_bot": false,
"headline": "Run tests on Lyrical instead of Jazzy (#1506)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-07T02:24:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c9d469304746fb7067dabf79f30291ac8ac7185",
"body": "Fix: #1504",
"is_bot": false,
"headline": "Pump lint-staged & sinon to latest (#1505)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-07T01:13:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fea81e8ae9a0d039e4e2248dcb1a135039c2a71",
"body": "- Move `electron_demo/` → `demo/electron/` and `ts_demo/` → `demo/typescript/`, so all runnable demos live under a single `demo/` tree (Electron, TypeScript, and the new rosocket demo). Path-only renames; per-demo READMEs and the top-level `README.md`, `scripts/npmjs-readme.md`, `eslint.config.mjs`,\n[…]\nEADME documents how to source ROS 2, run the bridge alongside the existing AddTwoInts service example, open the page from any modern browser, and verify the round-trip from the ROS 2 side.\n\nFix: #1502",
"is_bot": false,
"headline": "Consolidate all demos under demo/ + add rosocket demo (#1503)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-06T10:05:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "500efad790473b2b782fdd386446fed4fa63ccd1",
"body": "Commit e54a991 (#1490) tightened the tag filter from `'*'` to `'[0-9]+.[0-9]+.[0-9]+'`, which only matches plain `MAJOR.MINOR.PATCH` tags. Prerelease tags such as `2.0.0-beta.0` no longer trigger the workflow, even though `1.9.0-alpha.0` published successfully under the previous pattern.\n\nRestore pr\n[…]\n-9]+.[0-9]+.[0-9]+-*'` alongside the existing one, so tags like `2.0.0-beta.0`, `1.9.0-alpha.0`, and `2.0.0-rc.1` trigger the workflow while unrelated tags (e.g. `docs-*`) remain excluded.\n\nFix: #1500",
"is_bot": false,
"headline": "Trigger npm-publish on prerelease tags (#1501)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-06T08:06:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c77ab1b63336bd77e2d61ec568763f2217b92979",
"body": "- Bump version from `1.9.0` to `2.0.0-beta.0` in package.json.\n- .npmignore: exclude Python bytecode artifacts (`__pycache__/`, `*.pyc`) so `rosidl_parser/__pycache__/*.pyc` is no longer shipped in the tarball.\n- .npmignore: exclude `tools/` (jsdoc templates, maintainer-only).\n- .npmignore: regroup `electron_demo/` and `ts_demo/` alongside the other demo/example directories for readability (no functional change).\n\nFix: #1458",
"is_bot": false,
"headline": "Pump to 2.0.0-beta.0 pre-release (#1499)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-06T06:45:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9031f4408bb7d922ae50832ed4aa2662b6675877",
"body": "Generate prebuilt binaries for ROS 2 Lyrical Luth (Ubuntu 26.04 / `resolute`) on both x64 and ARM64. The existing prebuild scripts are distro-agnostic and pick up `ROS_DISTRO` + Ubuntu codename automatically, so no changes are required in `scripts/tag_prebuilds.js`, `scripts/install.js`, `lib/prebui\n[…]\neps via `rosdep install` (mirroring the Lyrical lane already used in the test workflow).\n- `.github/workflows/prebuild-linux-arm64.yml`: same as above, using the `aarch64` Lyrical tarball.\n\nFix: #1458",
"is_bot": false,
"headline": "[Prebuild]add Lyrical Luth lane to Linux prebuild workflows (#1498)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-06T04:42:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3bb70217aa0b0986dd6e6a9470025b383a8d104",
"body": "- feat(lyrical): add ROS 2 Lyrical Luth support across CI, runtime, and types\n- ci(linux-x64): add Lyrical matrix entry on `ubuntu:26.04` using the beta `ros2-lyrical-2026-04-30-resolute-x86_64.tar.bz2`; share apt-source + binary-tarball install path with Rolling; skip `ros-${distro}-test-msgs` / `r\n[…]\n`, and `FUTURE`\n- test(graph): expect service endpoint graph APIs to be supported starting at Lyrical\n- test(subscription content filter): expect content-filter support starting at Lyrical\n\nFix: #1458",
"is_bot": false,
"headline": "Add ROS 2 Lyrical Luth (#1496)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-06T02:44:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03518c3c051a6cf00cce3aa898433d04ac001873",
"body": "Updates CI workflow matrices to adjust the Node.js versions used for Linux builds/tests, aligning (at least partially) with a move toward newer Node majors.\n\n**Changes:**\n- Linux x64 CI matrix: replaces Node 25.x testing with Node 26.x (keeps Node 24.x).\n- Linux arm64 CI matrix: switches from a pinned Node 20.20.2 to a floating Node 20.x range.\n\nFix: #1458",
"is_bot": false,
"headline": "Pump to Node 26.x (#1497)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-06T02:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b54066d67fdea7d5c11e4252bef96c26fe6d6575",
"body": "Updates the reusable Linux x64 CI workflow to run ROS 2 Rolling builds on an Ubuntu 26.04-based container and adjusts package selection for Electron test dependencies based on Ubuntu version.\n\n**Changes:**\n- Switch the ROS 2 Rolling matrix entry from `ubuntu:noble` to `ubuntu:resolute` (intended 26.04 migration).\n- Update Electron test dependency installation to select `libasound2t64` on Ubuntu 24.04 and 26.04 via `VERSION_ID` detection.\n\nFix: #1458",
"is_bot": false,
"headline": "Migrate rolling build to 26.04 (#1493)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-05-01T12:53:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3176aca57d35183e3fa36b61c47d7095ab8c6b06",
"body": "Adds a lightweight WebSocket bridge built into rclnodejs so a plain browser (or any WebSocket-capable client) can talk to ROS 2 with **no JavaScript library** on the client side — built-in `WebSocket` + `JSON` are enough.\n\n## Highlights\n\n- **Resource-style URLs**: `ws://host:port/topic/<name>?type=<\n[…]\n- `package.json` — adds `ws ^8.18.0`, `bin.rosocket`, `scripts.rosocket`.\n\n## Availability\n\nExperimental; ships only on `develop`. Try it with `npm install RobotWebTools/rclnodejs#develop`.\n\nFix: 1494",
"is_bot": false,
"headline": "Add lightweight WebSocket bridge for browser access to ROS 2 (#1495)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-30T08:52:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a1ce193499a97c24867ed3e20a4b02b3044e20a",
"body": "The `prebuild:electron` script was still pinned to `electron@23.0.0`, an EOL release from Dec 2022 that bundles Node 18.12. Bump it to `electron@34.0.0`, the most recent line whose bundled Node (20.18.1) matches the major version of our `engines.node >= 20.20.2` floor.\n\nThe four `electron_demo/*` ap\n[…]\nof the Lyrical GA window.\n\nN-API ABI stability means binaries built against Electron 34 continue to load cleanly in 41+, so the prebuild-target / demo-target split is intentional and safe.\n\nFix: #1458",
"is_bot": false,
"headline": "Refresh Electron prebuild target and demo apps (#1492)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-20T09:58:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce7e8b4b259fed4bec91bd1f83ed82a2c83f1cda",
"body": "The `deploy-docs` workflow failed when triggered manually because it relied on `npm ci`, which requires a committed `package-lock.json`. This repository intentionally gitignores `package-lock.json` (see `.gitignore`), so the install step always errored out with `EUSAGE`.\n\nReplace `npm ci --ignore-scripts` with `npm install --ignore-scripts --no-audit --no-fund` to keep the intent (skip native build scripts, avoid noisy output) while working without a lockfile.\n\nFix: #1489",
"is_bot": false,
"headline": "Use `npm install` in deploy-docs workflow (#1491)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-20T03:25:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e54a991036e91eee10bb178a7758aa4c9b1fc901",
"body": "Automate the JSDoc deployment that was previously a manual `npm run docs:gh-pages` + push-to-`gh-pages` process. The workflow leverages the existing `github-pages` deployment environment.\n\n**Trigger**\n- Tag push matching `docs-*` (e.g. `docs-1.9.0`) — builds and deploys\n- Manual `workflow_dispatch` \n[…]\nwhen `dry_run` is `true`\n- Deploys to GitHub Pages via `deploy-pages@v5`\n\n**Changes**\n\n| File | What changed |\n|------|-------------|\n| `.github/workflows/deploy-docs.yml` | New workflow |\n\nFix: #1489",
"is_bot": false,
"headline": "Add GitHub Actions workflow to deploy JSDoc to GitHub (#1490)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-20T02:26:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd926d76495865ccb43e79333c5a859b86c5a188",
"body": "Register the upcoming **ROS 2 Lyrical Luth** (May 2026) distribution so that distro-gated code paths activate correctly when `ROS_DISTRO=lyrical` is set, rather than falling through to the `FUTURE` sentinel.\n\n**Changes**\n\n| File | What changed |\n|------|-------------|\n| `lib/distro.js` | Added `LYRI\n[…]\nectedDistros` array that verifies each known distro (including `lyrical`) is present via `includes()` |\n\n**Why 2605?** Follows the existing `YYMM` convention — Lyrical targets May 2026 GA.\n\nFix: #1458",
"is_bot": false,
"headline": "Add explicit LYRICAL distro identifier (2605) (#1488)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-13T07:27:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e0ae6de678401ac0d282c44cfeae8acad0962f14",
"body": "**Changes:**\n\n- **`lib/rmw.js`**\n - Added `ZENOH: 'rmw_zenoh_cpp'` to `RMWNames` constants\n - Added missing `iron`, `jazzy`, and `kilted` distro entries to `DefaultRosRMWNameMap` (all default to `rmw_fastrtps_cpp`)\n - Added safe fallback to `getRMWName()` — returns `rmw_fastrtps_cpp` when the dis\n[…]\nts RMW vendor registry. The `DefaultRosRMWNameMap` was also missing entries for multiple known distros (`iron`, `jazzy`, `kilted`), and `getRMWName()` had no fallback for unmapped distros.\n\nFix: #1486",
"is_bot": false,
"headline": "Add rmw_zenoh_cpp as RMW vendor and update dist (#1487)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-13T05:57:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e90e098a66dfd400b97bace233f3df8e0015d17d",
"body": "Previously, `getDistroId()` returned `UNKNOWN (0)` for any `ROS_DISTRO` value not in the known map. This caused forward-looking feature guards (e.g., `>= ROLLING`) to fail for future distros like \"lyrical\", even though they would include the same ABI changes as Rolling.\n\nNow, if `ROS_DISTRO` is set \n[…]\net\n\n- **test/test-distro.js**\n - Updated \"unknown distro\" test to expect `FUTURE` for unrecognized `ROS_DISTRO` values\n - Added assertion for truly unset `ROS_DISTRO` returning `UNKNOWN`\n\nFix: #1484",
"is_bot": false,
"headline": "Treat unrecognized ROS_DISTRO as a future distro (#1485)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-10T06:12:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1af7e77aeb16d4f5aad2cccc9e0a75582f921920",
"body": "## Changes\n\n### README.md\n\n**Badges (lines 3–8):**\n- Reorganized from 9 badges on a single line to 6 focused badges, each on its own line: npm version, npm downloads, GitHub stars, coverage, Node version, TypeScript\n- Removed lower-value badges: license (visible in repo sidebar), code style (develop\n[…]\nreadability\n\n### .prettierignore (new)\n- Exclude `README.md` and `scripts/npmjs-readme.md` from Prettier auto-formatting to prevent table separator padding from being re-expanded on commit\n\nFix: #1482",
"is_bot": false,
"headline": "Reorganize badges on README (#1483)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-09T06:23:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "79ce8fc12f5abd1aea818b8762bd720ea1e4f5e7",
"body": "## Changed Files\n\n- [lib/client.js](lib/client.js)\n - Removed the `AbortSignal.any()` polyfill for older Node.js versions.\n - Net effect: the code now relies on native `AbortSignal.any()` support from the runtime.\n\n- [lib/message_introspector.js](lib/message_introspector.js)\n - Replaced the custo\n[…]\nplaceAll`, `includes`, `startsWith`, `Object.hasOwn`, `structuredClone`).\n- All replacements are safe, drop-in substitutions available since Node.js 16–20, well within the 20.20.2 minimum.\n\nFix: #1458",
"is_bot": false,
"headline": "Remove compatibility and custom utility code (#1479)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-08T07:20:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b83aa440268c280ef8b21119a614890a1aac9f4c",
"body": "This PR raises the minimum supported Node.js version to `20.20.2` and includes the follow-up fixes from PR review.\n\n### What changed\n\n- Updated the Node.js minimum across package metadata, CI, and docs.\n- Moved the Linux ARM64 CI lane to Node `20.20.2`.\n- Aligned install/prerequisite docs across the\n[…]\ne-loader.js)\n- Added a focused helper test file locally:\n - [test/test-prebuilds.js](test/test-prebuilds.js)\n\n### Validation\n\n```bash\nnpx mocha test-native-loader.js test-prebuilds.js\n```\n\nFix: #1458",
"is_bot": false,
"headline": "Raise Node.js Minimum to 20.20.2 (#1478)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-08T05:36:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "01847d5352ded62f5273df47493b18d9de97b9b0",
"body": "…480)\n\nROS 2 Rolling merged ros2/rosidl#941 and ros2/rosidl#942 as part of the native buffer feature. The ROSIDL_RUNTIME_C__PRIMITIVE_SEQUENCE macro now emits two extra boolean fields (is_rosidl_buffer, owns_rosidl_buffer) in every primitive sequence struct, growing them from 24 to 32 bytes. Non-pri\n[…]\ntest-parameters (33), test-parameter-service (9), test-action-client (19) — all pass. Jazzy: test-parameters (33), test-parameter-service (9), test-action-client (18+1 pending) — all pass.\n\nFix: #1481",
"is_bot": false,
"headline": "Fix SIGSEGV on ROS 2 Rolling caused by rosidl sequence ABI change (#1…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-08T05:13:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fff7c0a874f83af7232861aa1263670c3c766677",
"body": "- build: switch native addon C++ standard selection from Node.js-major gating to ROS-distro gating\n - remove `node_major_version` from `binding.gyp`\n - use C++17 for `ros_version <= 2505`\n - use C++20 for `ros_version > 2505`\n - apply the same rule on both Linux and Windows build paths\n\n- docs(b\n[…]\n+17\n - state that post-Kilted distros, including Lyrical and newer Rolling snapshots, build with C++20\n\n**Reference**:\n- https://discourse.openrobotics.org/t/ros-2-lyrical-c-version/52551\n\nFix: #1458",
"is_bot": false,
"headline": "Gate C++ Standard By ROS Distro (#1477)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-07T07:18:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53a5855cbbc46353e515d533bef8eb40df59348a",
"body": "Fix: #1475",
"is_bot": false,
"headline": "Pump to 1.9.0 (#1476)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-07T03:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe0c4c4bbae73667acbdbdc30ff033be7078c1bb",
"body": "- add `ParameterEventHandler.configureNodesFilter(nodeNames?)` to apply or clear `/parameter_events` subscription content filters for selected nodes\n- resolve relative node names against the handler node namespace\n- reuse `Node.getFullyQualifiedName()` for handler node fully qualified name resolutio\n[…]\nlters when `nodeNames` is omitted\n - clearing filters when `nodeNames` is empty\n - invalid `nodeNames` validation\n\nTesting:\n- `npx mocha test/test-parameter-event-handler.js`\n- `npx tsd`\n\nFix: #1473",
"is_bot": false,
"headline": "Add ParameterEventHandler node filtering support (#1474)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-03T08:45:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "601a6a1e7716159f72e559a381454b318914d303",
"body": "- extend `Node.createTimer()` to accept `{ autostart?: boolean }` while preserving existing call signatures\n- inject `TimerInfo` metadata into JS timer callbacks when native support is available, exposing `expectedCallTime` and `actualCallTime`\n- wire native timer creation to honor `autostart`, with\n[…]\nand the optional callback argument\n- add runtime and type tests covering `autostart: false`, callback metadata, and option validation\n- refresh timer API comments to match the new behavior\n\nFix: #1471",
"is_bot": false,
"headline": "Add timer autostart and TimerInfo callback support (#1472)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-03T04:49:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b88d7830bf2073dc629629c62b2c65fd1524254",
"body": "Add `addPreSetParametersCallback()` / `removePreSetParametersCallback()` and `addPostSetParametersCallback()` / `removePostSetParametersCallback()` to the Node class. Pre-set callbacks run before validation and can transform the parameter list (e.g. coerce values); returning an empty list rejects th\n[…]\nn, LIFO ordering, removal), post (called on success, skipped on rejection, LIFO ordering, removal), and full chain (pre→on→post order, pre rejection stops chain, on rejection stops post).\n\nFix : #1469",
"is_bot": false,
"headline": "Add pre-set and post-set parameter callbacks (#1470)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-02T09:33:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5dd25ce320b7df25bf3d630752b7d2d924475bbe",
"body": "Allow QoS policies to be overridden at deployment time via ROS parameters, without changing source code. When `qosOverridingOptions` is passed to `createPublisher()` or `createSubscription()`, the node declares read-only parameters (e.g. `qos_overrides./chatter.subscription.depth`) whose values can \n[…]\n ID suffix in parameter names, validation callback accept/reject, string QoS resolution, no-override baseline, and end-to-end parameter override proving the QoS object is mutated in-place.\n\nFix: #1467",
"is_bot": false,
"headline": "Add QoS overriding options for publishers and subscriptions (#1468)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-02T08:27:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd80eec872c77a1f3a71095d5ea2a8409589d3e1",
"body": "Guard `publishFeedback()` to only publish when the goal is in EXECUTING state; log a warning and return early otherwise. Guard `execute()` to return early if the goal is already executing or no longer active, preventing invalid state transitions that crash rcl. Ported from rclpy commit f76729cf (\"pu\n[…]\n Added 4 tests: publishFeedback on accepted goal is ignored, publishFeedback on executing goal works normally, publishFeedback after succeed is ignored, and duplicate execute() is a no-op.\n\nFix: #1465",
"is_bot": false,
"headline": "Guard publishFeedback and execute for valid goal states (#1466)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-02T04:55:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d07d21ea236ead062944b4695e375a3f7f26e8a8",
"body": "Add automatic dist-tag detection to the publish step. npm requires `--tag` when publishing pre-release versions to prevent them from becoming the default `latest` on the registry.\n\nThe new `Determine dist-tag` step reads the version from `package.json` and extracts the pre-release label (e.g. `alpha\n[…]\n to `latest`. This tag is passed to `npm publish --tag`.\n\nExamples:\n- `1.9.0-alpha.0` → `--tag alpha`\n- `1.9.0-beta.1` → `--tag beta`\n- `1.9.0-rc.0` → `--tag rc`\n- `1.9.0` → `--tag latest`\n\nFix: #1459",
"is_bot": false,
"headline": "Support pre-release publishing in npm-publish workflow (#1464)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-01T07:43:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "44594cf7adb8fc45b90a16e65e9541800bdf4a14",
"body": "Fix: #1462",
"is_bot": false,
"headline": "Pump to 1.9.0-alpha.0 prerelease (#1463)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-01T06:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b7cc78259c2dc18c1cd37519baeb6bdb50cb1dd",
"body": "Add enableFeedbackMsgOptimization option to ActionClient that uses the DDS content filter to avoid receiving irrelevant feedback messages when multiple action clients share the same action server. This mirrors the rclpy implementation (ros2/rclpy#1633).\n\nWhen enabled, goal IDs are added to the feedb\n[…]\nt-action-client.js: 7 new tests covering default/enable flag, normal feedback, multiple goals with optimization, cancel+new goal, concurrent goals, and >6 goals overflow with auto-disable.\n\nFix: #1456",
"is_bot": false,
"headline": "Support feedback subscription content filter for action client (#1457)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-01T05:28:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fee38f3dc9d1f0cf00ab3995e2872073b089f212",
"body": null,
"is_bot": false,
"headline": "Skip lifecycle scriptsi when packing (#1461)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-01T03:21:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f27c249468e5f14f6f70f3a6f6919c470ab7d9dd",
"body": "Automate npm publishing via GitHub Actions when a new tag is pushed. Prebuilt binaries for both x64 and arm64 are built in parallel, bundled into the tarball, and published to npm with SLSA provenance attestation using OIDC trusted publishing (no long-lived npm token required).\n\n### Changes\n\n**New: \n[…]\npublish.yml`. `workflow_dispatch:` retained for manual runs.\n\n**Modified: `.github/workflows/prebuild-linux-x64.yml`** — Same change as arm64: replaced `push: tags:` with `workflow_call:`.\n\nFix: #1459",
"is_bot": false,
"headline": "NPM Publish Workflow (#1460)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-04-01T03:01:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfe5e64f56ef12818813db55127fcb8ff20abec4",
"body": "Fix: #1454",
"is_bot": false,
"headline": "Pump typescript to 6.0.2 (#1455)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-31T01:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a57845150088828a8e7b7635350b47cd0fc42b6",
"body": "Corresponding to rclpy [d892204](https://github.com/ros2/rclpy/commit/d892204c2722cd18447b257f93b80af141a83048) and rcl's `rcl_subscription_is_cft_supported()` API, this adds `isContentFilterSupported()` to the `Subscription` class. This allows users to query at runtime whether the underlying RMW s\n[…]\nes (`xvfb`, `libgtk-3-0`, etc.) into its own step that runs for all distros.\n - Added `-y` to `apt install` for test-msgs.\n - Removed stale `use-ros2-testing` parameter from `setup-ros`.\n\nFix: #1450",
"is_bot": false,
"headline": "Add support check for content filter feature in subscription (#1451)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-27T05:37:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf8e8934a3272c233a4d48f60e4a47b8ab9ce478",
"body": "- separate npm installation from repo checkout quick start\n- make ROS 2 environment sourcing explicit in prerequisites and examples\n- add direct GitHub install instructions\n- clarify that GitHub installs usually build from source\n- limit prebuilt binary claims to the published npm package\n- improve docs and message-generation wording\n- align npmjs README with the updated package-consumer guidance\n\nFix: #1452",
"is_bot": false,
"headline": "[Doc] Clarify README install and quick start guidance (#1453)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-25T07:23:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e46c4e3bbb5692c6823b540a16b7ac676b935e3",
"body": "Updates the project’s README content (repo README and npm package README) to reflect current supported ROS 2 distros, modernized API usage, and clearer install/docs guidance.\n\n**Changes:**\n- Refresh README messaging (supported ROS distros, reorganized documentation links, added Quick Start).\n- Updat\n[…]\nmd | Updates the repo README: supported distro note, reorganized documentation section, adds Quick Start, clarifies TypeScript typing exposure, and adds benchmark methodology disclaimer. |\n\nFix: #1448",
"is_bot": false,
"headline": "Update README (#1449)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-20T06:31:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1fe92570c94b9216c46a6b40be63ecc01005cb7f",
"body": "…1447)\n\n- add a dedicated JSDoc toolchain under tools/jsdoc, including the custom template, static assets, landing-page generator, and gh-pages staging script\n- switch `npm run docs` to build local versioned docs through tools/jsdoc\n- add `docs:gh-pages` to stage published docs by preserving the cur\n[…]\nJSDoc comment fixes in [lib/subscription.js](/home/minggang/proj/rclnodejs/lib/subscription.js) and [lib/timer.js](/home/minggang/proj/rclnodejs/lib/timer.js) to improve generated API docs\n\nFix: #1446",
"is_bot": false,
"headline": "Move JSDoc tooling under tools/jsdoc and document publish workflow (#…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-20T05:17:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "95e5a423c86e0474509b756e0c2f982ca80bd3fe",
"body": "Adds `waitForMessage()`, the rclnodejs equivalent of rclpy's `wait_for_message(msg_type, node, topic, time_to_wait)`. This utility creates a temporary subscription, waits for the first message to arrive on a topic, and returns it as a Promise. The temporary subscription is always cleaned up — on suc\n[…]\nitForMessage` property on the module.\n- `types/index.d.ts` — Added `WaitForMessageOptions` interface and generic `waitForMessage<T>(typeClass, node, topic, options?)` function declaration.\n\nFix: #1443",
"is_bot": false,
"headline": "Add waitForMessage utility for one-shot message reception (#1444)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-18T03:07:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aa6f1d3cf01d5853d19af0985f5ca57c045c64ce",
"body": "Exposes ROS 2 message metadata (timestamps, sequence numbers, publisher GID) to subscription callbacks, matching rclpy's `MessageInfo` pattern. When a subscription callback declares two parameters, it automatically receives a `MessageInfo` object as the second argument containing metadata from the m\n[…]\nd.ts`.\n- `types/subscription.d.ts` — Updated `SubscriptionCallback` and `SubscriptionWithRawMessageCallback` type aliases to accept optional second `MessageInfo` parameter via union types.\n\nFix: #1439",
"is_bot": false,
"headline": "Expose MessageInfo metadata on subscription callbacks (#1440)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-17T08:55:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "607e03a15a90535ccf471324eb4c04b4bf388fc0",
"body": "Adds `ParameterEventHandler`, a new class that monitors parameter changes on any node in the ROS 2 graph by subscribing to the `/parameter_events` topic. This is the rclnodejs equivalent of rclpy's `ParameterEventHandler` and supports two callback types: per-parameter callbacks (filtered by paramete\n[…]\ncription directly. Replaced `#subscription` field with `#eventHandler`. Removed unused `#eventCallbackHandle` private field. Zero public API changes; all 40 existing tests pass unmodified.\n\nFix: #1437",
"is_bot": false,
"headline": "Add ParameterEventHandler for cross-node parameter monitoring (#1438)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-17T08:26:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e71e42739c04b8ee005a471bcd8203bd1a9d5dd1",
"body": "Replaces the legacy `setup-ros`-based Windows CI with a unified pixi-based workflow covering Jazzy, Kilted, and Rolling. Removes Humble from Windows CI (EOL distro, `setup-ros` unmaintained). Tests run only on Jazzy; Kilted and Rolling are build-only. Fixes an intermittent Electron test hang on Linu\n[…]\nription service configured by parameter` and `Test start_type_description_service parameter value` on Windows (ROS CLI `ros2 param` commands brittle/hanging; main service test unaffected).\n\nFix: #1436",
"is_bot": false,
"headline": "Re-enable tests on Jazzy for Windows (#1435)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-17T02:47:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d78ed38a7717f955accafb7992119c2ab40bbcae",
"body": "Two intermittent CI hang issues were identified:\n\n1. test-message-generation-bin.js: The before() hook runs spawnSync for npm init, npm pack, and npm install (full native rebuild from tarball) with no timeout. If any of these hangs (network issue, lock contention, slow arm64 runner), mocha blocks in\n[…]\n), or xvfb-run holding stdio pipes open), the parent hangs forever. Fixed by adding a 30-second kill timeout that forcibly terminates the child if it doesn't exit after the test completes.\n\nFix: #1433",
"is_bot": false,
"headline": "Prevent CI hangs from unbounded subprocess waits (#1434)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-13T08:16:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c8c67aaabb415adb8eaf511f67c81e4c9d0840ee",
"body": "Rename GitHub Actions workflow from \"ASan Memory Test\" to \"ASan\" for a more concise badge label in README, consistent with other badge names (\"Linux\", \"Windows\").\n\nFix: #1431",
"is_bot": false,
"headline": " Shorten ASan workflow name for badge display (#1432)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-13T05:51:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e8a4efdeb73cad761221d352d9b2aef1a54b502",
"body": "Add ASan-based memory testing infrastructure to detect memory errors (leaks, use-after-free, type mismatches) in the C++ N-API addon code.\n\nBug fixes found and resolved by ASan:\n- src/executor.cpp: Fix new-delete-type-mismatch in Executor::Stop(). The uv_close callback deleted via uv_handle_t* (96 b\n[…]\n\"test:asan\" npm script.\n- suppr.txt: Add napi_create_reference and napi_create_external suppressions for module-level singleton allocations.\n- README.md: Add ASan CI badge to status table.\n\nFix: #1429",
"is_bot": false,
"headline": "Add AddressSanitizer (ASan) memory testing for native addon (#1430)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-12T09:25:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94de088741ec8af276dcbc241cc9c809785f6a4e",
"body": "Previously, clang-format's default Google style IncludeCategories assigned the same priority to C++ standard library headers (e.g., <string>) and third-party headers (e.g., <rcpputils/scope_exit.hpp>), causing them to be sorted alphabetically within the same group. This violated cpplint's expected i\n[…]\n: src/rcl_context_bindings.cpp, src/rcl_graph_bindings.cpp, src/rcl_subscription_bindings.cpp, src/rcl_utilities.cpp\n\nVerified with `npm run format` and `npm run lint` (cpplint: 0 errors).\n\nFix: #1427",
"is_bot": false,
"headline": "Align clang-format include ordering with cpplint rules (#1428)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-11T05:51:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "00d3a5e5d57f4e56999f1628da843aaffb1ee362",
"body": null,
"is_bot": false,
"headline": "Pump to 1.8.3 (#1426)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-09T07:08:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c0ac64f921ffeccb70388d4eb0af2e8e3cc1a61",
"body": "When a plain object (e.g., `{ enableRosout: false }`) is passed as options instead of a `NodeOptions` instance, `options.parameterOverrides` is `undefined`, causing `TypeError: Cannot read properties of undefined (reading 'length')`.\n\nAdded `Node._normalizeOptions()` to merge plain objects with `Nod\n[…]\n `lib/node.js` — added `static _normalizeOptions()`, called at the top of `_init()`\n- `test/test-node.js` — added tests for node creation with plain object options and empty object options\n\nFix: #1423",
"is_bot": false,
"headline": "Fix Node creation crash when using plain object as options (#1424)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-09T05:06:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "574cc35c574cbcfef6c2d8f4ee063b3dfa226cf7",
"body": "…dings (#1422)\n\n### Memory leaks (Critical)\n\nAdded missing `free(header)` on `TAKE_FAILED` early-return paths where `malloc`'d `rmw_request_id_t*` was never freed.\n- `src/rcl_action_server_bindings.cpp` — `ActionTakeResultRequest`, `ActionTakeGoalRequest`, `ActionTakeCancelRequest`\n- `src/rcl_servic\n[…]\nptions before appending rollback failure details. Added corresponding test in `test/test-init-shutdown.js` with `try/finally` to guarantee sinon stub restoration even on assertion failure.\n\nFix: #1420",
"is_bot": false,
"headline": "Fix memory leaks, error handling, and type-safety issues in N-API bin…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-09T04:41:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "035ce9f86a9b7717e1a5f85af9df35d7cfa53f10",
"body": "### Summary\n\nFixed 6 bugs across 6 test files discovered during code review. All issues were in test code only — no library changes.\n\n### Changes\n\n#### 1. `test/client_setup.js` — Remove reference to undefined `timer`\n\nThe `SIGINT` handler called `timer.cancel()`, but `timer` is not defined in this \n[…]\nest-rate.js` | Add avg sleep time assertion |\n| `test/test-utils.js` | Remove empty duplicate test |\n| `test/types/index.test-d.ts` | Remove misplaced `client.isServiceServerAvailable()` |\n\nFix: #1417",
"is_bot": false,
"headline": "Fix: correct bugs in test files (#1418)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-06T05:03:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba6f9a50aab863583a164b17740202edf5fa0d1d",
"body": "…(#1420)\n\n## fix: action server goal expiration never removed expired goals\n\n### Summary\n\nFixed two bugs in the action server goal expiration mechanism that caused expired goals to never be removed from memory, and a crash when they were. Also fixed 9 tautological test assertions that masked both bu\n[…]\nctionExpireGoals` call with `if (numGoals > 0)` |\n| `test/test-action-server.js` | Fix 9 `assert.ok` → `assert.strictEqual`; add deserialized goal info validation; increase expire delays |\n\nFix: #1419",
"is_bot": false,
"headline": "Fix action server goal expiration and correct broken test assertions …",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-06T00:31:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b89b67263a4ab901b19303e1283f38c1fd73fb7",
"body": "Updates documentation/tutorials to align with current rclnodejs tooling, API signatures, and supported ROS/Node.js versions.\n\n**Changes:**\n- Update Type Description Service tutorial to reflect ROS 2 Jazzy+ availability and matching version checks.\n- Fix content-filtering tutorial example to store the subscription on the class instance for later updates.\n- Refresh docs for message generation command, lifecycle context usage, and build prerequisites (Node.js + Python on Windows).\n\nFix: #1415",
"is_bot": false,
"headline": "Update docs and tutorials (#1416)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-05T08:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e020c1fc3dc14b7d2081dcc135535750e0b22ed8",
"body": "This PR fixes small but user-facing issues in the JavaScript examples and Electron demos, improving correctness of sample code and shutdown/cleanup behavior.\n\n**Changes:**\n\n**example/topics/publisher/publisher-qos-example.js**\n- Fix typo `qos.hitory` → `qos.history`; the misspelled property silently\n[…]\nhutdown()` usage: call it once globally instead of once per node in a `forEach` loop; `shutdown()` tears down the entire ROS2 context, so calling it multiple times risks context corruption\n\nFix: #1413",
"is_bot": false,
"headline": "Fix bugs in examples and electron demos (#1414)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-05T06:47:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d709c3082e25c1077c242878f928763c0f1e687c",
"body": "… JavaScript lib/ (#1410)\n\nComprehensive review and fix of all JavaScript files under `lib/` that implement\nthe rclnodejs client library. Eight issues were identified and resolved.\n\n### 1. Incorrect `instanceof` operator precedence (`lib/node.js`)\n\nChanged `(!parameter) instanceof Parameter` to `!(p\n[…]\nerTypes\n - Validates array parameter types (validates issue 3)\n- `test/test-distro.js` — 1 new test:\n - `getDistroName(99999)` returns `undefined` instead of throwing (validates issue 7)\n\nFix: #1409",
"is_bot": false,
"headline": "Fix: resolve logic bugs, resource leaks, and error handling issues in…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-05T06:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8877304641eaf54565d7a2afc68592f15a71d39d",
"body": "This PR fixes a couple of correctness issues in message generation and generator version detection, and adds targeted tests to prevent regressions in `rosidl_gen` primitive type initialization.\n\n**Changes:**\n\n**index.js**\n- Fix file descriptor leak in `getCurrentGeneratorVersion()`: replaced `fs.ope\n[…]\n covering both `own=true` and `own=false` branches: rejects invalid types (number, string, null, undefined, Buffer-when-struct-expected) and correctly initializes a valid `StringRefStruct`\n\nFix: #1411",
"is_bot": false,
"headline": "Fix bugs in rosidl_gen and index.js, add tests (#1412)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-05T05:53:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55ec8f0cd6ca4cba6cf71f4a39875917641b2117",
"body": "…… (#1408)\n\nComprehensive audit and fix of all C++ source files under `src/` that implement\nN-API bindings for the ROS2 rcl library. Five categories of issues were\nidentified and resolved.\n\n### 1. Use-after-free in context deleter lambda\n\n**File:** `src/rcl_context_bindings.cpp`\n\nChanged `[&env]` ca\n[…]\nld still be `true` from\nthe previous invocation, causing the `while (!handle_closed)` loop to be\nskipped entirely — the `uv_close` callback would never run and the async handle\nwould leak.\n\nFix: #1407",
"is_bot": false,
"headline": "Fix: resolve memory leaks, use-after-free, and correctness issues in …",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-05T04:35:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1f09646280ac1d29e42b335e81afe6b0128bd25",
"body": "This PR adjusts the ROS error-state reset behavior in the C++/N-API helper macros so the error message can be captured before the global RCL error state is cleared, improving the fidelity of JavaScript exceptions thrown from native bindings.\n\n**Changes:**\n- Move `rcl_reset_error()` to occur *after* `Napi::Error::New(...).ThrowAsJavaScriptException()` in `CHECK_OP_AND_THROW_ERROR_IF_NOT_TRUE`.\n- Apply the same ordering fix to the `_NO_RETURN` variant.\n\nFix: #1405",
"is_bot": false,
"headline": "Evaluate error message before resetting error state in macros (#1406)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-05T02:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9070b0b76167a78479f5a01811820790b8931d87",
"body": "This PR tightens up the `rosidl_parser/parser.py` CLI wrapper used by the Node-side `rosidl_parser.js` helper by removing unused code and correcting the expected CLI argument count.\n\n**Changes:**\n- Remove an unused `rosidl_parser` import.\n- Remove an unused intermediate `msg_name` variable.\n- Update the CLI argument count check to require 3 parameters after the script name (command, package, file path).\n\nFix: #1403",
"is_bot": false,
"headline": "Fix poetenial issues in parser.py (#1404)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-03T00:02:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b3fdb90a519df95ec19d06203b1d2618625d333",
"body": "This PR switches the ROSIDL generation path to parse `.idl` files directly via `rosidl_parser.parser`, removing the intermediate `.idl -> .msg/.srv/.action` conversion step and updating tests to account for IDL-specific type differences (notably `char`).\n\n**Changes:**\n- Add a new Python-based `.idl`\n[…]\nce/action structs directly from parsed `.idl` specs, and remove the old `rosidl_convertor` pipeline.\n- Adjust several tests to handle `char` being treated as `uint8` in IDL mode (`--idl`).\n\nFix: #1402",
"is_bot": false,
"headline": "[ROSIDL] Leverage rosidl_parser.parser to parse .idl directly (#1401)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-03-02T08:07:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a0da3f041d062f20ded1053b216485e401a120e1",
"body": "Bump NYC version from ^17.1.0 to ^18.0.0 in package.json devDependencies\n\nFix: #1399",
"is_bot": false,
"headline": "Pump nyc to 18.0.0 (#1400)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-02-27T06:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "902340746495bb99ce5d52165991bfa9fe17a3b0",
"body": null,
"is_bot": false,
"headline": "Pump to 1.8.2 (#1398)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-02-24T07:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60fef089ef3c2399c06c3cab294a1f08642986b0",
"body": "This pull request updates ESLint and `@eslint/js` to their latest major version 10. The changes upgrade the linting infrastructure from version 9 to version 10 for both packages.\n\n**Changes:**\n- Updated `@eslint/js` from ^9.36.0 to ^10.0.1\n- Updated eslint from ^9.16.0 to ^10.0.2\n\nFix: #1395",
"is_bot": false,
"headline": "Pump @eslint/js and eslint to latest (#1396)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-02-24T05:04:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "358b95566ccdeb7198abca3efe902c612c20a20b",
"body": "This PR adds support for ROSIDL packages with hyphenated subdirectory names (e.g., `msg-common`, `msg-ros2`) by updating the subfolder extraction logic to normalize these to their base interface types (`msg`, `srv`, `action`).\n\n**Changes:**\n- Modified `getSubFolder()` to extract base interface type \n[…]\ntup in `test-native-loader.js` to avoid repeated module reloading\n- Updated CI workflows to install `mrpt-msgs` package for testing\n- Simplified process exit handling in test runner script\n\nFix: #1388",
"is_bot": false,
"headline": "Support hyphenated ROSIDL subdirs (#1390)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-02-12T08:19:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c81c497bf906e26d2fe94c69e8f320adbc65a5dd",
"body": "This PR fixes a compilation error when building against ROS2 Rolling by adapting to a breaking API change in the ROS2 lifecycle state machine initialization. The ROS2 Rolling API now requires a clock parameter for `rcl_lifecycle_state_machine_init`, which was not present in earlier versions.\n\n**Chan\n[…]\nng (ROS_VERSION >= 5000) that includes the new clock parameter requirement\n- Updated JavaScript code to pass the node's clock handle to the native lifecycle state machine creation function\n\nFix: #1391",
"is_bot": false,
"headline": "Fix compiling error on ROS2 rolling (#1392)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-02-12T06:12:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "70cfe1f6b0912e336fe040ddad0a12577ab80ffb",
"body": "…387)\n\nThis PR configures Electron Forge packaging across all four electron demos (topics, turtle_tf2, manipulator, car) to enable distributable application creation. The key enhancement is the ASAR configuration that unpacks the rclnodejs module, which requires file system access to generated code \n[…]\n to latest versions\n- Migrated manipulator demo from CDN-based Three.js to npm package and added GPU rendering workarounds\n- Added comprehensive packaging documentation to all demo READMEs\n\nFix: #1386",
"is_bot": false,
"headline": "Configure Electron Forge packaging with ASAR unpack for all demos (#1…",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-02-02T08:45:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d77a05da9c320aaa536ed81d54db9b425e3dfdf4",
"body": "This PR narrows the Node.js header inclusion in the native bindings to only pull in version macros, which helps mitigate compiler warnings from unnecessary Node C++ API exposure.\n\n**Changes:**\n- Replace the broad `<node.h>` include with the more targeted `<node_version.h>` in `rcl_bindings.cpp`.\n- Continue to use `NODE_MAJOR_VERSION`, `NODE_RUNTIME_ELECTRON`, and `NODE_MODULE_VERSION` macros via the new header to guard behavior in `CreateArrayBufferFromAddress`.\n\nFix: #1385",
"is_bot": false,
"headline": "Mitigate compiler warnings (#1385)",
"author_name": "Minggang Wang",
"author_login": "minggangw",
"committed_at": "2026-01-29T07:14:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 98,
"commits_last_year": 186,
"latest_release_at": "2026-07-22T05:03:48Z",
"latest_release_tag": "2.1.1",
"releases_from_tags": false,
"days_since_last_push": 7,
"active_weeks_last_year": 43,
"days_since_latest_release": 8,
"mean_days_between_releases": 20.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "rclnodejs",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"rclnodejs",
"ros2",
"ros",
"rcl",
"robotics",
"typescript"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/rclnodejs",
"is_deprecated": false,
"latest_version": "2.1.1",
"repository_url": "https://github.com/RobotWebTools/rclnodejs",
"versions_count": 101,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 3,
"monthly_downloads": 17214,
"first_published_at": "2017-10-31T09:13:16.750000Z",
"latest_published_at": "2026-07-22T04:47:00.321000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 85,
"stars": 440,
"watchers": 20,
"fork_history": {
"days": [
{
"date": "2017-05-26",
"count": 1
},
{
"date": "2017-06-05",
"count": 1
},
{
"date": "2017-07-12",
"count": 1
},
{
"date": "2017-08-14",
"count": 1
},
{
"date": "2017-10-23",
"count": 1
},
{
"date": "2018-03-13",
"count": 1
},
{
"date": "2018-04-03",
"count": 1
},
{
"date": "2018-08-16",
"count": 1
},
{
"date": "2018-10-14",
"count": 1
},
{
"date": "2018-10-31",
"count": 1
},
{
"date": "2018-12-20",
"count": 1
},
{
"date": "2019-01-15",
"count": 1
},
{
"date": "2019-02-28",
"count": 1
},
{
"date": "2019-04-10",
"count": 1
},
{
"date": "2019-04-18",
"count": 1
},
{
"date": "2019-06-19",
"count": 1
},
{
"date": "2019-07-04",
"count": 1
},
{
"date": "2019-09-10",
"count": 1
},
{
"date": "2019-09-26",
"count": 1
},
{
"date": "2020-01-13",
"count": 1
},
{
"date": "2020-01-29",
"count": 1
},
{
"date": "2020-02-07",
"count": 1
},
{
"date": "2020-08-26",
"count": 1
},
{
"date": "2020-09-17",
"count": 1
},
{
"date": "2020-11-07",
"count": 1
},
{
"date": "2021-02-23",
"count": 1
},
{
"date": "2021-04-05",
"count": 1
},
{
"date": "2021-04-07",
"count": 1
},
{
"date": "2021-04-22",
"count": 1
},
{
"date": "2021-05-20",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-07-21",
"count": 2
},
{
"date": "2021-07-27",
"count": 1
},
{
"date": "2021-08-23",
"count": 1
},
{
"date": "2021-09-17",
"count": 1
},
{
"date": "2021-10-05",
"count": 1
},
{
"date": "2021-10-19",
"count": 1
},
{
"date": "2021-11-12",
"count": 1
},
{
"date": "2021-11-16",
"count": 1
},
{
"date": "2022-01-02",
"count": 1
},
{
"date": "2022-01-08",
"count": 1
},
{
"date": "2022-02-16",
"count": 1
},
{
"date": "2022-03-02",
"count": 1
},
{
"date": "2022-03-16",
"count": 1
},
{
"date": "2022-04-08",
"count": 1
},
{
"date": "2022-05-16",
"count": 1
},
{
"date": "2022-05-25",
"count": 1
},
{
"date": "2022-06-06",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2022-08-18",
"count": 1
},
{
"date": "2022-08-22",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-16",
"count": 1
},
{
"date": "2023-02-10",
"count": 1
},
{
"date": "2023-03-04",
"count": 2
},
{
"date": "2023-03-24",
"count": 1
},
{
"date": "2023-03-25",
"count": 1
},
{
"date": "2023-04-04",
"count": 1
},
{
"date": "2023-04-15",
"count": 1
},
{
"date": "2023-08-14",
"count": 1
},
{
"date": "2023-11-30",
"count": 1
},
{
"date": "2024-01-25",
"count": 1
},
{
"date": "2024-02-06",
"count": 1
},
{
"date": "2024-06-18",
"count": 1
},
{
"date": "2024-10-14",
"count": 1
},
{
"date": "2024-11-08",
"count": 1
},
{
"date": "2024-11-19",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-13",
"count": 1
},
{
"date": "2025-04-04",
"count": 1
},
{
"date": "2025-08-26",
"count": 1
},
{
"date": "2025-08-28",
"count": 1
},
{
"date": "2025-09-08",
"count": 1
},
{
"date": "2025-10-22",
"count": 1
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-12-02",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-14",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
}
],
"complete": true,
"collected": 84,
"total_forks": 85
},
"star_history": null,
"open_issues_and_prs": 41
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"tools/jsdoc/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"demo/typescript/actions/tsconfig.json",
"demo/typescript/services/tsconfig.json",
"demo/typescript/topics/tsconfig.json",
"demo/web/typescript/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 86371,
"source_files_sampled": 382,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json",
"web/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 46,
"malicious_count": 0,
"assessed_package": "npm:rclnodejs@2.1.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@rclnodejs/ref-array-di",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.2"
},
{
"name": "@rclnodejs/ref-struct-di",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "bindings",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.0"
},
{
"name": "debug",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.0"
},
{
"name": "json-bigint",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.0"
},
{
"name": "node-addon-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.3.1"
},
{
"name": "node-gyp",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^12.2.0"
},
{
"name": "rxjs",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.8.1"
},
{
"name": "walk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.3.15"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.18.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@rclnodejs/ref-array-di",
"direct": true,
"version": "^1.2.2",
"ecosystem": "npm"
},
{
"name": "@rclnodejs/ref-struct-di",
"direct": true,
"version": "^1.1.1",
"ecosystem": "npm"
},
{
"name": "bindings",
"direct": true,
"version": "^1.5.0",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": true,
"version": "^4.4.0",
"ecosystem": "npm"
},
{
"name": "json-bigint",
"direct": true,
"version": "^1.0.0",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": true,
"version": "^8.3.1",
"ecosystem": "npm"
},
{
"name": "node-gyp",
"direct": true,
"version": "^12.2.0",
"ecosystem": "npm"
},
{
"name": "rxjs",
"direct": true,
"version": "^7.8.1",
"ecosystem": "npm"
},
{
"name": "walk",
"direct": true,
"version": "^2.3.15",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": true,
"version": "^8.18.0",
"ecosystem": "npm"
},
{
"name": "@electron-forge/cli",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron-forge/maker-deb",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron-forge/maker-rpm",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron-forge/maker-squirrel",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron-forge/maker-zip",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron-forge/plugin-auto-unpack-natives",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron-forge/plugin-fuses",
"direct": false,
"version": "^7.11.1",
"ecosystem": "npm"
},
{
"name": "@electron/rebuild",
"direct": false,
"version": "^4.0.3",
"ecosystem": "npm"
},
{
"name": "@eslint/js",
"direct": false,
"version": "^10.0.1",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^22.16.4",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^22.16.5",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^26.0.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/eslint-plugin",
"direct": false,
"version": "^8.18.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/parser",
"direct": false,
"version": "^8.18.0",
"ecosystem": "npm"
},
{
"name": "c8",
"direct": false,
"version": "^12.0.0",
"ecosystem": "npm"
},
{
"name": "clang-format",
"direct": false,
"version": "^1.8.0",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "^15.0.0",
"ecosystem": "npm"
},
{
"name": "concurrently",
"direct": false,
"version": "^9.2.0",
"ecosystem": "npm"
},
{
"name": "coveralls",
"direct": false,
"version": "^3.1.1",
"ecosystem": "npm"
},
{
"name": "deep-equal",
"direct": false,
"version": "^2.2.3",
"ecosystem": "npm"
},
{
"name": "electron",
"direct": false,
"version": "^41.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "^10.0.2",
"ecosystem": "npm"
},
{
"name": "eslint-config-prettier",
"direct": false,
"version": "^10.0.2",
"ecosystem": "npm"
},
{
"name": "eslint-plugin-prettier",
"direct": false,
"version": "^5.2.1",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "^17.0.0",
"ecosystem": "npm"
},
{
"name": "husky",
"direct": false,
"version": "^9.1.7",
"ecosystem": "npm"
},
{
"name": "jsdoc",
"direct": false,
"version": "^4.0.4",
"ecosystem": "npm"
},
{
"name": "lint-staged",
"direct": false,
"version": "^17.0.0",
"ecosystem": "npm"
},
{
"name": "mocha",
"direct": false,
"version": "^11.0.2",
"ecosystem": "npm"
},
{
"name": "prebuildify",
"direct": false,
"version": "^6.0.1",
"ecosystem": "npm"
},
{
"name": "rclnodejs",
"direct": false,
"version": "^2.0.0",
"ecosystem": "npm"
},
{
"name": "rimraf",
"direct": false,
"version": "^6.0.1",
"ecosystem": "npm"
},
{
"name": "sinon",
"direct": false,
"version": "^22.0.0",
"ecosystem": "npm"
},
{
"name": "three",
"direct": false,
"version": "^0.155.0",
"ecosystem": "npm"
},
{
"name": "three",
"direct": false,
"version": "^0.182.0",
"ecosystem": "npm"
},
{
"name": "tree-kill",
"direct": false,
"version": "^1.2.2",
"ecosystem": "npm"
},
{
"name": "ts-node",
"direct": false,
"version": "^10.9.2",
"ecosystem": "npm"
},
{
"name": "tsd",
"direct": false,
"version": "^0.33.0",
"ecosystem": "npm"
},
{
"name": "tsup",
"direct": false,
"version": "^8.5.1",
"ecosystem": "npm"
},
{
"name": "tsx",
"direct": false,
"version": "^4.19.2",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^5.7.2",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^5.8.3",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^6.0.2",
"ecosystem": "npm"
},
{
"name": "vite",
"direct": false,
"version": "^6.0.7",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 54,
"direct_count": 10,
"indirect_count": 44
}
},
"maintainership": {
"issues": {
"open_prs": 7,
"merged_prs": 855,
"open_issues": 34,
"closed_ratio": 0.946,
"closed_issues": 598,
"closed_unmerged_prs": 61
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "minggangw",
"commits": 352,
"avatar_url": "https://avatars.githubusercontent.com/u/6469275?v=4"
},
{
"type": "User",
"login": "wayneparrott",
"commits": 79,
"avatar_url": "https://avatars.githubusercontent.com/u/5588978?v=4"
},
{
"type": "User",
"login": "qiuzhong",
"commits": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/11829497?v=4"
},
{
"type": "User",
"login": "kenny-y",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/3302320?v=4"
},
{
"type": "User",
"login": "mattrichard",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/2396016?v=4"
},
{
"type": "User",
"login": "mahmoud-ghalayini",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/197786245?v=4"
},
{
"type": "User",
"login": "felixdivo",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/4403130?v=4"
},
{
"type": "User",
"login": "imcelroy",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/10949527?v=4"
},
{
"type": "User",
"login": "jihoonl",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1556736?v=4"
},
{
"type": "User",
"login": "ejalaa12",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/12619034?v=4"
}
],
"contributors_sampled": 25,
"top_contributor_share": 0.612
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"deploy-docs.yml",
"identify-ros-distro.yml",
"linux-arm64-build-and-test.yml",
"linux-arm64-pr-test.yml",
"linux-arm64-push-test.yml",
"linux-x64-asan-test.yml",
"linux-x64-build-and-test.yml",
"linux-x64-pr-test.yml",
"linux-x64-push-test.yml",
"npm-publish.yml",
"prebuild-linux-arm64.yml",
"prebuild-linux-x64.yml",
"windows-build-and-test.yml",
"windows-pr-test.yml",
"windows-push-test.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "62e89b67c5e41c54e0f4b1f5298f87328a87ba75",
"ran_at": "2026-07-31T02:18:29Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T10:07:22Z",
"oldest_open_prs": [
{
"number": 749,
"created_at": "2020-12-08T05:20:37Z",
"last_comment_at": "2021-01-07T06:51:43Z",
"last_comment_author": "koonpeng"
},
{
"number": 774,
"created_at": "2021-01-26T06:14:51Z",
"last_comment_at": "2021-01-26T06:37:32Z",
"last_comment_author": "minggangw"
},
{
"number": 821,
"created_at": "2021-12-08T08:59:46Z",
"last_comment_at": "2022-02-11T09:22:18Z",
"last_comment_author": "minggangw"
},
{
"number": 1088,
"created_at": "2025-03-13T14:37:51Z",
"last_comment_at": "2025-03-14T13:26:44Z",
"last_comment_author": "SanjayUG"
},
{
"number": 1349,
"created_at": "2025-12-11T14:20:29Z",
"last_comment_at": "2026-03-10T00:23:35Z",
"last_comment_author": "coveralls"
},
{
"number": 1360,
"created_at": "2026-01-05T10:07:09Z",
"last_comment_at": "2026-01-05T10:23:17Z",
"last_comment_author": "coveralls"
},
{
"number": 1565,
"created_at": "2026-07-27T06:47:56Z",
"last_comment_at": "2026-07-27T07:27:23Z",
"last_comment_author": "coveralls"
}
],
"last_merged_pr_at": "2026-06-10T02:47:06Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 54,
"created_at": "2017-08-07T07:36:20Z",
"last_comment_at": "2018-04-13T06:05:14Z",
"last_comment_author": "minggangw"
},
{
"number": 176,
"created_at": "2017-11-14T06:18:15Z",
"last_comment_at": "2017-12-11T06:20:39Z",
"last_comment_author": "Christywl"
},
{
"number": 226,
"created_at": "2017-12-06T07:21:59Z",
"last_comment_at": "2018-02-13T06:44:52Z",
"last_comment_author": "kenny-y"
},
{
"number": 234,
"created_at": "2017-12-12T09:46:41Z",
"last_comment_at": "2017-12-19T06:05:44Z",
"last_comment_author": "qiuzhong"
},
{
"number": 323,
"created_at": "2018-05-11T02:33:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 352,
"created_at": "2018-06-06T02:10:22Z",
"last_comment_at": "2018-06-08T09:31:51Z",
"last_comment_author": "minggangw"
},
{
"number": 361,
"created_at": "2018-06-14T08:59:20Z",
"last_comment_at": "2018-07-24T03:34:15Z",
"last_comment_author": "minggangw"
},
{
"number": 483,
"created_at": "2019-04-18T14:06:22Z",
"last_comment_at": "2019-04-20T07:48:09Z",
"last_comment_author": "minggangw"
},
{
"number": 484,
"created_at": "2019-04-18T15:06:16Z",
"last_comment_at": "2020-01-29T13:33:40Z",
"last_comment_author": "minggangw"
},
{
"number": 498,
"created_at": "2019-06-26T07:44:26Z",
"last_comment_at": "2020-08-28T05:24:22Z",
"last_comment_author": "minggangw"
},
{
"number": 534,
"created_at": "2019-11-12T19:24:04Z",
"last_comment_at": "2019-11-13T16:09:53Z",
"last_comment_author": "wayneparrott"
},
{
"number": 657,
"created_at": "2020-05-23T17:12:48Z",
"last_comment_at": "2020-05-25T15:15:13Z",
"last_comment_author": "wayneparrott"
},
{
"number": 794,
"created_at": "2021-06-02T03:51:39Z",
"last_comment_at": "2021-06-03T16:14:34Z",
"last_comment_author": "minggangw"
},
{
"number": 820,
"created_at": "2021-11-15T23:45:04Z",
"last_comment_at": "2024-09-26T06:33:22Z",
"last_comment_author": "minggangw"
},
{
"number": 846,
"created_at": "2022-04-26T20:41:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 865,
"created_at": "2022-07-18T14:11:58Z",
"last_comment_at": "2023-11-15T08:18:10Z",
"last_comment_author": "pabloinigoblasco"
},
{
"number": 903,
"created_at": "2023-03-06T10:14:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 916,
"created_at": "2023-04-20T17:26:38Z",
"last_comment_at": "2023-06-06T08:04:46Z",
"last_comment_author": "minggangw"
},
{
"number": 924,
"created_at": "2023-06-23T12:22:15Z",
"last_comment_at": "2024-09-26T06:29:18Z",
"last_comment_author": "minggangw"
},
{
"number": 926,
"created_at": "2023-08-10T17:12:45Z",
"last_comment_at": "2023-08-11T02:38:34Z",
"last_comment_author": "minggangw"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/RobotWebTools/rclnodejs",
"host": "github.com",
"name": "rclnodejs",
"owner": "RobotWebTools"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"security": 60,
"vitality": 96,
"community": 71,
"governance": 70,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 96,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"commits_last_year": 186,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 43
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "43/52 weeks with commits",
"points": 29.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 43
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "186 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 186
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 98,
"latest_release_tag": "2.1.1",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 20.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "98 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 98
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~20.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 20.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 71,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"forks": 85,
"stars": 440,
"watchers": 20,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "440 stars",
"points": 42.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 440
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "85 forks",
"points": 16,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 85
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "20 watchers",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 20
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 71,
"inputs": {
"packages": [
"rclnodejs"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 17214
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "17,214 downloads/month across npm",
"points": 56.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 17214,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 70,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 25,
"top_contributor_share": 0.612
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 61% of commits",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 61
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "25 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 25
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"merged_prs": 855,
"open_issues": 34,
"closed_issues": 598,
"issue_closed_ratio": 0.946,
"closed_unmerged_prs": 61
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "95% of issues closed",
"points": 44.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 95
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "855/916 decided PRs merged",
"points": 35.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 855,
"decided": 916
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"followers": 349,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "RobotWebTools",
"public_repos": 23,
"account_age_days": 5263
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "349 followers of RobotWebTools",
"points": 18.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 349,
"login": "RobotWebTools"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "23 public repos, account ~14 yr old",
"points": 22.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 23
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"rclnodejs"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "101 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 101
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "15 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 15
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ros",
"nodejs",
"client",
"rcl",
"robotics",
"typescript",
"ros2",
"javascript",
"esm",
"webnative"
],
"has_wiki": true,
"homepage": "https://robotwebtools.github.io/rclnodejs/docs/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://robotwebtools.github.io/rclnodejs/docs/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "10 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 10
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 60,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:rclnodejs@2.1.1 runtime dependency closure — what installing the published package pulls in — 46 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:rclnodejs@2.1.1",
"assessed": 46
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 46,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 46,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 10
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 59,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"tools/jsdoc/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"demo/typescript/actions/tsconfig.json",
"demo/typescript/services/tsconfig.json",
"demo/typescript/topics/tsconfig.json",
"demo/web/typescript/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "tools/jsdoc/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tools/jsdoc/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "demo/typescript/actions/tsconfig.json, demo/typescript/services/tsconfig.json, demo/typescript/topics/tsconfig.json, demo/web/typescript/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "demo/typescript/actions/tsconfig.json, demo/typescript/services/tsconfig.json, demo/typescript/topics/tsconfig.json, demo/web/typescript/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 86371,
"source_files_sampled": 382,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (demo/typescript/actions/tsconfig.json, demo/typescript/services/tsconfig.json, demo/typescript/topics/tsconfig.json, demo/web/typescript/tsconfig.json, tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "demo/typescript/actions/tsconfig.json, demo/typescript/services/tsconfig.json, demo/typescript/topics/tsconfig.json, demo/web/typescript/tsconfig.json, tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/382 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 382,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-31T02:18:58.191795Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/RobotWebTools/rclnodejs.svg",
"full_name": "RobotWebTools/rclnodejs",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit RobotWebTools/rclnodejs teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
