Öffentliches RegisterExzellent
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.5.0 · 2026-07-29 04:59 UTC
getsentry / rust-proguard
A rust library for handling proguard mapping files
getsentry/rust-proguard erreicht einen Gesundheitsindex von 83 von 100 und liegt damit im Bereich Exzellent. Am stärksten schneidet es bei Sustainability & Governance (86/100) ab, am schwächsten bei Community & Adoption (57/100). Zuletzt heute aktualisiert. 3 Mitwirkende tragen den Großteil der jüngsten Arbeit.
83
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
83
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 70 wird auf der veröffentlichten Indexskala auf 83 kalibriert (Register-Kalibrierung 2026-08-02).
Eigentümerschaft
SentryOrganisation
3.133 Follower792 öffentliche Reposseit Feb. 2012
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht | Tags |
|---|---|---|---|---|---|---|
| crates.io | proguard | 5.10.4 | 83.681 | 33 | vor 0 Tagen | androidproguardr8retrace |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
78
Entwicklungsaktivität
63Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 0 Tagen |
| 9.7/36 | Commit-Rhythmus — 14/52 Wochen mit Commits |
| 14.7/18 | Commit-Volumen — 42 Commits im letzten Jahr |
| 3/10 | OpenSSF Scorecard: Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
Verwendete Eingangsdaten
| commits_last_year | 42 |
| human_commit_share | 0,97 |
| days_since_last_push | 0 |
| active_weeks_last_year | 14 |
Release-Disziplin
100Außergewöhnlich
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 26 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 0 Tagen |
| 27/27 | Release-Rhythmus — ein Release etwa alle 41,8 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 26 |
| latest_release_tag | 5.10.4 |
| releases_from_tags | nein |
| days_since_latest_release | 0 |
| mean_days_between_releases | 41,8 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
57
Popularität & Verbreitung
39Schwach
Wie die Bewertung erfolgt
| 23.5/60 | Stars — 29 Stars |
| 7/25 | Forks — 8 Forks |
| 8.7/15 | Watcher — 37 Watcher |
Verwendete Eingangsdaten
| forks | 8 |
| stars | 29 |
| watchers | 37 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
59Mittel
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 16.9/22.5 | Lizenz — Lizenzdatei vorhanden, keine anerkannte Lizenz |
| 0/18 | CONTRIBUTING-Leitfaden |
| 13.5/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| readme_badges | — |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | ja |
| readme_badge_services | — |
| has_pull_request_template | nein |
Ökosystem-Verbreitung (Downloads)
82Exzellent
Wie die Bewertung erfolgt
| 65.6/80 | Downloads pro Monat — 83.681 Downloads/Monat über crates |
| 0/20 | Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen |
Verwendete Eingangsdaten
| packages | proguard |
| dependents | — |
| ecosystems | crates |
| total_downloads | 4.372.298 |
| monthly_downloads | 83.681 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
86
Wie die Bewertung erfolgt
| 36/54 | Bus-Faktor — 3 Beitragende decken die Hälfte aller Commits ab |
| 16.3/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 28 % der Commits |
| 13.5/13.5 | Breite der Beitragenden — 20 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 17 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 3 |
| contributors_sampled | 20 |
| top_contributor_share | 0,277 |
Reaktionsfähigkeit bei Issues & PRs
91Exzellent
Wie die Bewertung erfolgt
| 42/42 | Issue-Lösungsquote — 100 % der Issues geschlossen |
| 28.3/30 | PR-Annahme — 81/86 entschiedene PRs gemergt |
| 0/13 | Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden |
| 9/15 | OpenSSF Scorecard: Code-Review — Found 18/30 approved changesets -- score normalized to 6 |
Verwendete Eingangsdaten
| merged_prs | 81 |
| open_issues | 0 |
| closed_issues | 9 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 5 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.
Eigentümerschaft & Trägerschaft
80Exzellent
Wie die Bewertung erfolgt
| 30/30 | Organisatorische Trägerschaft — im Besitz einer Organisation |
| 0/20 | Verifizierte Domain |
| 25/25 | Reichweite des Inhabers — 3.133 Follower von getsentry |
| 25/25 | Kontohistorie — 792 öffentliche Repos, Kontoalter ca. 14 Jahre |
Verwendete Eingangsdaten
| followers | 3.133 |
| owner_type | Organization |
| is_verified | — |
| owner_login | getsentry |
| public_repos | 792 |
| account_age_days | 5.291 |
Paketpflege
100Außergewöhnlich
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf crates |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 0 Tagen |
| 20/20 | Versionshistorie — 33 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | proguard |
| ecosystems | crates |
| any_deprecated | nein |
| min_days_since_publish | 0 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
61
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 5 Workflow(s) |
| 24/24 | Tests vorhanden |
| 0/16 | Linter-Konfiguration |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 18 out of 18 merged PRs checked by a CI test -- score normalized to 10 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | nein |
| has_precommit_config | nein |
Dokumentation
50Mittel
Wie die Bewertung erfolgt
| 30/30 | README |
| 0/25 | Dokumentationsverzeichnis |
| 0/15 | Dokumentations-/Homepage-Site |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 1 Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | tag-production |
| has_wiki | nein |
| homepage | — |
| has_readme | ja |
| has_docs_dir | nein |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
65
Sicherheitslage
56Mittel
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 3.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 18 out of 18 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 18/30 approved changesets -- score normalized to 6 |
| 2.5/2.5 | Contributors — project has 17 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Lizenz — license file detected |
| 2.2/7.5 | Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 0/5 | Packaging — keine Daten |
| 5/5 | Pinned-Dependencies — all dependencies are pinned |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5,6 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Abhängigkeits-Advisories
100Außergewöhnlich
Wie die Bewertung erfolgt
| 35/35 | Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory |
| 0/25 | Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar |
| 0/40 | Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum |
Verwendete Eingangsdaten
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 69 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 69 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
66
AI-Agentenkontext & Leitlinien
31Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 30.8/40 | Lesbare Commit-Historie — 56 von 97 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,577 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
AI-Verify-Loop (Build / Test / Typprüfung)
81Exzellent
Wie die Bewertung erfolgt
| 18/18 | Bootstrap mit einem Befehl — Makefile |
| 22/22 | Automatisierte Tests |
| 0/11 | Lint-/Format-Konfiguration |
| 11/11 | Statische Typprüfung — Rust (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — lockfile |
| 10/10 | Belegte Agentenpraxis — 6 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 10/10 | OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | Cargo.lock |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | Makefile |
| has_devcontainer | nein |
| has_linter_config | nein |
| typecheck_configs | — |
| agent_commit_share | 0,06 |
| toolchain_manifests | Cargo.toml |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
98Außergewöhnlich
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Rust (statisch typisiert) |
| 53/55 | Handhabbare Dateigrößen — 1/27 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Rust |
| largest_source_bytes | 60.416 |
| source_files_sampled | 27 |
| oversized_source_files | 1 |
Eckdaten
29GitHub-Sterne
20Mitwirkende
42Commits, letzte 12 Monate
0Tage seit letztem Push
26Releases
3Bus-Faktor
0offene Issues
crates.ioPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- deps.dev does not index crates:proguard@5.10.4; advisories assessed against the repository dependency graph instead
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 8 ⇿
0Sterne
8Forks
25Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 3Minor 11Patch 11
Jeder Punkt umfasst 8 Tage.
OpenSSF Scorecard 5.6 / 10
5.6Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 5 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 18 out of 18 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 18/30 approved changesets -- score normalized to 6 |
| 10 | Contributors | project has 17 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 3 | Maintained | 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| k. A. | Packaging | packaging workflow not detected |
| 10 | Pinned-Dependencies | all dependencies are pinned |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| k. A. | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direkte Abhängigkeiten 5
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| crates.io | serde | 1.0.219 | Cargo.toml |
| crates.io | serde_json | 1.0.140 | Cargo.toml |
| crates.io | thiserror | 2.0.17 | Cargo.toml |
| crates.io | uuid | 1.18.0 | Cargo.toml |
| crates.io | watto | 0.2.0 | Cargo.toml |
Alle Abhängigkeiten 69
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 5 direkte und 64 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
| Registry | Paket | Version | Beziehung |
|---|---|---|---|
| crates.io | serde | 1.0.228 | direkt |
| crates.io | serde_json | 1.0.145 | direkt |
| crates.io | thiserror | 2.0.17 | direkt |
| crates.io | uuid | 1.18.1 | direkt |
| crates.io | watto | 0.2.0 | direkt |
| crates.io | aho-corasick | 1.1.4 | indirekt |
| crates.io | allocator-api2 | 0.2.21 | indirekt |
| crates.io | anes | 0.1.6 | indirekt |
| crates.io | anstyle | 1.0.13 | indirekt |
| crates.io | autocfg | 1.5.0 | indirekt |
| crates.io | bumpalo | 3.19.0 | indirekt |
| crates.io | cast | 0.3.0 | indirekt |
| crates.io | cfg-if | 1.0.4 | indirekt |
| crates.io | ciborium | 0.2.2 | indirekt |
| crates.io | ciborium-io | 0.2.2 | indirekt |
| crates.io | ciborium-ll | 0.2.2 | indirekt |
| crates.io | clap | 4.5.53 | indirekt |
| crates.io | clap_builder | 4.5.53 | indirekt |
| crates.io | clap_lex | 0.7.6 | indirekt |
| crates.io | criterion | 0.7.0 | indirekt |
| crates.io | criterion-plot | 0.6.0 | indirekt |
| crates.io | crossbeam-deque | 0.8.6 | indirekt |
| crates.io | crossbeam-epoch | 0.9.18 | indirekt |
| crates.io | crossbeam-utils | 0.8.21 | indirekt |
| crates.io | crunchy | 0.2.4 | indirekt |
| crates.io | either | 1.15.0 | indirekt |
| crates.io | equivalent | 1.0.2 | indirekt |
| crates.io | foldhash | 0.1.5 | indirekt |
| crates.io | half | 2.7.1 | indirekt |
| crates.io | hashbrown | 0.15.5 | indirekt |
| crates.io | itertools | 0.13.0 | indirekt |
| crates.io | itoa | 1.0.15 | indirekt |
| crates.io | js-sys | 0.3.83 | indirekt |
| crates.io | leb128 | 0.2.5 | indirekt |
| crates.io | memchr | 2.7.6 | indirekt |
| crates.io | num-traits | 0.2.19 | indirekt |
| crates.io | once_cell | 1.21.3 | indirekt |
| crates.io | oorandom | 11.1.5 | indirekt |
| crates.io | plotters | 0.3.7 | indirekt |
| crates.io | plotters-backend | 0.3.7 | indirekt |
| crates.io | plotters-svg | 0.3.7 | indirekt |
| crates.io | proc-macro2 | 1.0.103 | indirekt |
| crates.io | quote | 1.0.42 | indirekt |
| crates.io | rayon | 1.11.0 | indirekt |
| crates.io | rayon-core | 1.13.0 | indirekt |
| crates.io | regex | 1.12.2 | indirekt |
| crates.io | regex-automata | 0.4.13 | indirekt |
| crates.io | regex-syntax | 0.8.8 | indirekt |
| crates.io | rustversion | 1.0.22 | indirekt |
| crates.io | ryu | 1.0.20 | indirekt |
| crates.io | same-file | 1.0.6 | indirekt |
| crates.io | serde_core | 1.0.228 | indirekt |
| crates.io | serde_derive | 1.0.228 | indirekt |
| crates.io | sha1_smol | 1.0.1 | indirekt |
| crates.io | syn | 2.0.111 | indirekt |
| crates.io | thiserror-impl | 2.0.17 | indirekt |
| crates.io | tinytemplate | 1.2.1 | indirekt |
| crates.io | unicode-ident | 1.0.22 | indirekt |
| crates.io | walkdir | 2.5.0 | indirekt |
| crates.io | wasm-bindgen | 0.2.106 | indirekt |
| crates.io | wasm-bindgen-macro | 0.2.106 | indirekt |
| crates.io | wasm-bindgen-macro-support | 0.2.106 | indirekt |
| crates.io | wasm-bindgen-shared | 0.2.106 | indirekt |
| crates.io | web-sys | 0.3.83 | indirekt |
| crates.io | winapi-util | 0.1.11 | indirekt |
| crates.io | windows-link | 0.2.1 | indirekt |
| crates.io | windows-sys | 0.61.2 | indirekt |
| crates.io | zerocopy | 0.8.30 | indirekt |
| crates.io | zerocopy-derive | 0.8.30 | indirekt |
Abhängigkeits-Advisories 1
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 69 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 1 tragen bekannte Advisories, davon 0 direkte.
| Paket | Version | Beziehung | Schweregrad | Advisories | Behoben in |
|---|---|---|---|---|---|
| crossbeam-epoch | 0.9.18 | indirekt | unbekannt | 1 | 0.9.20 |
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"tag-production"
],
"is_fork": false,
"size_kb": 2340,
"has_wiki": false,
"homepage": null,
"languages": {
"Rust": 283364,
"Shell": 1283,
"Kotlin": 13852,
"Makefile": 594
},
"pushed_at": "2026-07-28T12:22:01Z",
"created_at": "2017-06-02T14:00:05Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T12:24:07Z",
"description": "A rust library for handling proguard mapping files",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://sentry.io",
"name": "Sentry",
"type": "Organization",
"login": "getsentry",
"company": null,
"location": "United States of America",
"followers": 3133,
"avatar_url": "https://avatars.githubusercontent.com/u/1396951?v=4",
"created_at": "2012-02-01T06:56:22Z",
"is_verified": null,
"public_repos": 792,
"account_age_days": 5291
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "5.10.4",
"kind": "patch",
"published_at": "2026-07-28T12:21:58Z"
},
{
"tag": "5.10.3",
"kind": "patch",
"published_at": "2026-04-23T11:31:44Z"
},
{
"tag": "5.10.2",
"kind": "patch",
"published_at": "2026-04-21T13:18:04Z"
},
{
"tag": "5.10.1",
"kind": "patch",
"published_at": "2026-03-10T10:44:22Z"
},
{
"tag": "5.10.0",
"kind": "minor",
"published_at": "2026-03-03T12:52:36Z"
},
{
"tag": "5.9.0",
"kind": "minor",
"published_at": "2025-12-18T14:19:00Z"
},
{
"tag": "5.8.1",
"kind": "patch",
"published_at": "2025-12-01T09:46:44Z"
},
{
"tag": "5.8.0",
"kind": "minor",
"published_at": "2025-11-27T09:04:04Z"
},
{
"tag": "5.7.0",
"kind": "minor",
"published_at": "2025-11-10T15:22:03Z"
},
{
"tag": "5.6.2",
"kind": "patch",
"published_at": "2025-07-17T16:21:21Z"
},
{
"tag": "5.6.1",
"kind": "patch",
"published_at": "2025-07-17T11:26:39Z"
},
{
"tag": "5.6.0",
"kind": "minor",
"published_at": "2025-07-14T14:54:19Z"
},
{
"tag": "5.5.0",
"kind": "minor",
"published_at": "2024-07-03T14:34:43Z"
},
{
"tag": "5.4.1",
"kind": "patch",
"published_at": "2024-04-04T13:05:15Z"
},
{
"tag": "5.4.0",
"kind": "minor",
"published_at": "2023-11-30T13:49:09Z"
},
{
"tag": "5.3.0",
"kind": "minor",
"published_at": "2023-11-13T14:31:19Z"
},
{
"tag": "5.2.0",
"kind": "minor",
"published_at": "2023-11-10T15:41:04Z"
},
{
"tag": "5.1.0",
"kind": "minor",
"published_at": "2023-10-23T09:05:25Z"
},
{
"tag": "5.0.2",
"kind": "patch",
"published_at": "2023-06-23T06:44:10Z"
},
{
"tag": "5.0.1",
"kind": "patch",
"published_at": "2023-03-23T15:52:41Z"
},
{
"tag": "5.0.0",
"kind": "major",
"published_at": "2022-05-20T09:54:32Z"
},
{
"tag": "4.1.1",
"kind": "patch",
"published_at": "2021-03-19T12:10:31Z"
},
{
"tag": "4.1.0",
"kind": "minor",
"published_at": "2021-03-09T12:00:56Z"
},
{
"tag": "4.0.1",
"kind": "patch",
"published_at": "2020-06-09T11:54:42Z"
},
{
"tag": "4.0.0",
"kind": "major",
"published_at": "2020-06-05T10:18:47Z"
},
{
"tag": "3.0.0",
"kind": "major",
"published_at": "2020-03-24T08:17:16Z"
}
],
"recent_commits": [
{
"oid": "e671c50d1c292201a7e476643efffd47e9033f93",
"body": null,
"is_bot": true,
"headline": "Merge branch 'release/5.10.4'",
"author_name": "sentry-release-bot[bot]",
"author_login": "sentry-release-bot[bot]",
"committed_at": "2026-07-28T12:21:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de56e9d3fd257f8a2f0783b768f9649b36369ecd",
"body": null,
"is_bot": false,
"headline": "release: 5.10.4",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-07-28T12:19:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a987ad4f2aa3a1c5d3311be29d6a26d0979c0d58",
"body": "Running cargo build locally revealed a diff within `Cargo.lock`, as\ncargo build seems to silently patch the package version, ensuring it\nmatches Cargo.toml.\n\nThis PR:\n\n* Manually updates `Cargo.lock` package version to `\"5.10.3\"`, so it\nmatches `Cargo.toml`.\n* Updates the bump version script to run \n[…]\nb.com/getsentry/vroomrs/blob/56ae8efe7e90ec9528c8698c50a67bebad77c74a/scripts/bump-version.sh#L17)\ndoes, and works when run by craft (`cargo update --offline` would have\nfailed on a cold cargo cache).",
"is_bot": false,
"headline": "chore(cargo): Update stale lock file (#96)",
"author_name": "Markus Hintersteiner",
"author_login": "markushi",
"committed_at": "2026-07-28T12:14:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "521f712280319a2f869c1b7a38f994c642e8e3ac",
"body": "…ure are present (#95)",
"is_bot": false,
"headline": "fix(mapping): Report a single frame when no line number and no signat…",
"author_name": "Markus Hintersteiner",
"author_login": "markushi",
"committed_at": "2026-07-28T08:47:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d986f8577b9d3e421f77646cfef39d17b0a4b3",
"body": null,
"is_bot": true,
"headline": "Merge branch 'release/5.10.3'",
"author_name": "sentry-release-bot[bot]",
"author_login": "sentry-release-bot[bot]",
"committed_at": "2026-04-23T11:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3f74bac58536971c448669fe3e2668a8a0a2646",
"body": null,
"is_bot": false,
"headline": "release: 5.10.3",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-04-23T11:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f32d99092caf849d8b91e1a8f14622c21a773de8",
"body": "…etic wrappers (#94)\n\nFix synthesized source filenames for Compose-compiler-generated\n`ComposableSingletons$FileKt` classes when they are inlined through R8\nsynthetic lambdas.\n\nWhen a Compose compilation emits a `ComposableSingletons$MainActivityKt`\nclass, the mapping often does not include a top-le\n[…]\ningletons$MyScreenKt` lambda\ninlined through an `$$ExternalSyntheticLambda` whose `sourceFile` is\n`R8$$SyntheticClass`.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mapping): Synthesize filenames for Kotlin classes buried in synth…",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-04-23T10:35:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28dfb00e182467305b2f3e3cd097ac2ab03e3533",
"body": null,
"is_bot": true,
"headline": "Merge branch 'release/5.10.2'",
"author_name": "sentry-release-bot[bot]",
"author_login": "sentry-release-bot[bot]",
"committed_at": "2026-04-21T13:18:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e813b71c9b1798ce2c172afe15bbcd376be2582",
"body": null,
"is_bot": false,
"headline": "release: 5.10.2",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-04-21T13:15:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f8317b7eb4fa2a7766285361b2cc39bf341aa70",
"body": "Parse Compose mappings with flexible indentation\n\n`ComposeStackTrace -> $$compose:` sections generated by recent Android\nbuilds use two-space member indentation. The Compose compiler emits\nthose entries with two leading spaces in\nhttps://github.com/JetBrains/kotlin/blob/effb244358aec74b7fa752d70a105\n[…]\nember lines and adds focused mapper and cache\nregressions for the raw Compose stacktrace shape.\n\nRefs getsentry/sentry-android-gradle-plugin#1065\n\n---------\n\nCo-authored-by: Codex <noreply@openai.com>",
"is_bot": false,
"headline": "fix(mapping): Parse Compose mappings with flexible indentation (#93)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-04-21T13:12:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9922a41a78525f9fb15a0746e6c5469b7d867faa",
"body": "## Summary\n- The Gitiles JSON API returns CAPTCHA/rate-limit pages on shared GitHub\nActions runner IPs, causing the retrace spec check to\n[fail](https://github.com/getsentry/rust-proguard/actions/runs/24074103715/job/70218089282)\nwith `jq: parse error`\n- Switch from Gitiles HTTP API to shallow `git \n[…]\nruns successfully locally\n- [ ] Verify the scheduled CI job passes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Use git protocol for retrace spec check (#92)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-04-07T13:25:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "269214b5baa29b416f5fc37e70dbba4ead57b8ed",
"body": null,
"is_bot": false,
"headline": "chore: pin GitHub Actions to full-length commit SHAs (#91)",
"author_name": "joshuarli",
"author_login": "joshuarli",
"committed_at": "2026-03-25T04:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e148644bb333e66e6e03ded426e09ba6bbdee306",
"body": "## Summary\n- Adds a daily GHA workflow that checks if the upstream R8 retrace\nmapping spec (`doc/retrace.md`) has been updated\n- Mirrors the approach from\n[sentry-java#5157](https://github.com/getsentry/sentry-java/pull/5157)\nfor the tombstone proto schema\n- Allows us to react to retrace format chan\n[…]\nhe script runs successfully locally and reports \"Spec is\nup to date\"\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Add scheduled job to check for retrace spec changes (#90)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-10T13:06:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b2bb6de9deeedd3fb47672ac1a8fa57d61c26a22",
"body": null,
"is_bot": false,
"headline": "chore(codeowners): Update CODEOWNERS to reflect new ownership (#89)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-10T12:50:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964e0f397242155cfa14a916897a3469d51cdd1f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.10.1'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2026-03-10T10:44:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a98e339b8a4efa07cdb1a3155fcabfbcafa55398",
"body": null,
"is_bot": false,
"headline": "release: 5.10.1",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-03-10T10:42:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74ba936101781923e2d1404a58eaef6f3d059ea5",
"body": "## Summary\n- When a frame has no line number and there are no base entries\n(endline==0), detect if the first range group forms an inline chain\n(multiple entries sharing the same startline/endline) and resolve each\nentry with its proper original line instead of emitting all entries with\nline 0\n- This\n[…]\ny with mapping files that contain inline groups without base\nentries\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Resolve inline groups in no-base-entries fallback (#88)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-10T10:41:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "df1c7630680682e123d5933fde89ac6b05426e2a",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.10.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2026-03-03T12:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4773a141319deb7eed117ecabc2cecc1d379dc88",
"body": null,
"is_bot": false,
"headline": "release: 5.10.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-03-03T12:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0ca873d3acc4004a956d06208cdb93c0a346312",
"body": "Part of #40\n\nPropagates the class-level `is_synthesized` flag (from `#\n{\"id\":\"com.android.tools.r8.synthesized\"}` headers) to all members of\nthat class. This allows callers (e.g. Sentry symbolicator) to filter out\nsynthetic frames via `method_synthesized()` — this crate intentionally\nkeeps them in t\n[…]\nd moved synthesized info — including both mapper and\ncache paths, stacktrace remapping, and `method_synthesized()` flag\nverification\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(r8): Propagate class-level synthesized flag to members (#73)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-03T12:41:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ebd61d121461a5634ab05a6a455b07c5654c5e52",
"body": "Part of #40 \n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multiple methods → same obfuscated\nname, <OR> alternatives\n- [x] Outlines (4 tests) - outline callsites, nested outlines,\ninline-in\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [x] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 method overloading tests (#77)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-02-16T14:36:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b7c89b7e94718b614c8679afccd897ce8b3321a",
"body": "Part of #40 \n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multiple methods → same obfuscated\nname, <OR> alternatives\n- [x] Outlines (4 tests) - outline callsites, nested outlines,\ninline-in\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [ ] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 exception handling tests (#76)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-02-16T14:07:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aad94103bdefdcc32b883cb356882b1ad3de8773",
"body": "Part of #40 \n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multiple methods → same obfuscated\nname, <OR> alternatives\n- [x] Outlines (4 tests) - outline callsites, nested outlines,\ninline-in\n[…]\n Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 line number tests (#75)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-02-16T13:50:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb53ccf54efab2ed3e56be02f118cd8b033804c6",
"body": "Part of #40 \n\nUnsure if we actually have to handle such weird inputs, but I guess we\nbetter be on the safe side and parse those correctly.\n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multi\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [ ] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 source file tests (#74)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-01-30T09:56:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efdfbb2cfbc2cef93c2794f084020e2b729b10d5",
"body": "Part of #40 \n\nThere are failing tests in this PR that need fixes in the mapper/cache\nitself, so I will open a follow-up PR that targets this branch.\n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 test\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [ ] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 ambiguous tests (#71)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-01-28T17:03:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "40d6195d2e2825392f98c20107872750c4da80af",
"body": "Part of #40 \n\nThere are failing tests in this PR that need fixes in the mapper/cache\nitself, so I will open a follow-up PR that targets this branch.\n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [ ] Ambiguous Methods (7 tests\n[…]\nIdentity/Passthrough (2 tests) - identity mappings\n- [ ] Real-World Bot Tests (4 tests) - production stack traces\n- [ ] Edge Cases (6 tests) - invalid input, dashes in names, whitespace,\nfield overlap",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 inline tests (#69)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-19T15:18:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1398ff4158496d18ef555f66cdb6f433c892d538",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.9.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-12-18T14:19:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0f2384417125bcea33699492bff99d4e1e467fb",
"body": null,
"is_bot": false,
"headline": "release: 5.9.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-12-18T14:17:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f128644b29fb01c84d8329fc896e95baabe6984",
"body": "Closes https://github.com/getsentry/rust-proguard/issues/63\n\n- Store rewrite rules in ProguardCache format\n- Decode rewrite rules and use them for symbolication\n- Additionally parse the exception descriptor\n- Make new methods public to be consumed in symbolicator later on\n\nSee linked issue for more details.",
"is_bot": false,
"headline": "feat(r8): Support `rewriteFrames` annotation in ProguardCache (#67)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-18T14:15:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08f5382d989834404bc903d26796d3f5a384805d",
"body": "Part of #63\n\n- Added new header parsing\n- Adapted ProguardMapper to ccollect the frames and then apply the\nrewrite rules on the entire vector\n- Added parsing of the exception for `remap_stacktrace` which accepts a\nplain string -- we need that info to decide whether we remove inner\nframes or not\n\nSee linked issue for more details.",
"is_bot": false,
"headline": "feat(r8): Support `rewriteFrames` annotation in ProguardMapper (#66)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-17T13:06:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce85efb37d553469a4fc583a643bd7067fb57d26",
"body": "We have been omitting mappings which had `0` in the line info range,\nhowever those are still valid mappings, for example:\n\n```\n 0:16:com.example.maps.core.projection.marker.IProjectionMarker createProjectionMarkerInternal(com.example.maps.core.projection.marker.IProjectionMarkerOptions,com.exampl\n[…]\n incorrect remapping back to line 0 instead of 133. \nThis PR fixes it + additionally added a check to look ahead if there are\nmembers with line info for the `0:0` case (replicates r8-retrace\nbehavior)",
"is_bot": false,
"headline": "fix: Correctly remap entries with 0 line info (#68)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-10T10:23:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a079fdf443df905203eca3a68e1e5b4ad103f9ad",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.8.1'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-12-01T09:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adeeec6d631462103ef5a29f1da389f2b651875c",
"body": null,
"is_bot": false,
"headline": "release: 5.8.1",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-12-01T09:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "523310c390a6b7ded017df6932e6e1bcc466deb4",
"body": "This updates:\n* criterion 0.4 -> 0.7\n* thiserror 1.0.61 -> 2.0.17\n* uuid 1.0.0 -> 1.18.0\n* watto 0.1.0 -> 0.2.0",
"is_bot": false,
"headline": "build: Update dependencies and set MSRV 1.83.0 (#65)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-12-01T09:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e528091b4103c3ab4823c4e481cb5286cdf6f4cd",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.8.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-11-27T09:04:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb48ac1bfacbede6c131b23dfdff59ccbfb58e8d",
"body": null,
"is_bot": false,
"headline": "release: 5.8.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-11-27T09:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5eb0624c566919d2606c017a04450d2b5a090b2",
"body": "This is needed to reimplement outline support in symbolicator",
"is_bot": false,
"headline": "feat(outline): Expose is_outline and prepare_frame_for_mapping (#64)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-11-27T08:33:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "baf2d05fc69a9c47a13cec781c3561be04337996",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.7.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-11-10T15:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "898b81bf7551d13adb81f486306b71ecc9b7aa5f",
"body": null,
"is_bot": false,
"headline": "release: 5.7.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-11-10T15:19:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "305eabd25b66693e12235181d8d2e54371dda442",
"body": "…Cache (#62)\n\nSame as #60 but implements the necessary changes for `outline` and\n`outlineCallsite` in ProguardCache\n\nCloses #59",
"is_bot": false,
"headline": "feat(r8): Support outline and outlineCallsite annotations in Proguard…",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-11-10T15:18:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce3f3c950bd18957bb0b2e8b0134222805b1d40c",
"body": "…Mapping (#60)\n\nThis only targets `ProguardMapping` at the moment, will address\n`ProguardCache` in a separate PR\n\nPart of #59",
"is_bot": false,
"headline": "feat(r8): Support outline and outlineCallsite annotations in Proguard…",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-11-10T10:14:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695c543923f090a08d1261176a9c0a5a482464dc",
"body": null,
"is_bot": false,
"headline": "build: Fix new compiler warnings (#61)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-10-24T10:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f47c6a5ea9fbe2260b9bd6a0d4740434e627da4",
"body": null,
"is_bot": false,
"headline": "ref: Forbid `unwrap` except in tests and benches (#58)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-18T10:51:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9841a5072a21cede6b9d9ddc944eb3e163de8b8",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.6.2'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-07-17T16:21:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea17dd657e76e688530385a6d917d23989a13873",
"body": null,
"is_bot": false,
"headline": "release: 5.6.2",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-07-17T16:19:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d862fc3393b8c77f7a53e3970ffcc1885d46b396",
"body": null,
"is_bot": false,
"headline": "fix(r8): Handle invalid headers gracefully (#57)",
"author_name": "David Herberth",
"author_login": "Dav1dde",
"committed_at": "2025-07-17T16:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac2d168008d47833813928bdf6ac30103f1488e9",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.6.1'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-07-17T11:26:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef41c9492b96c111301ad120ae10885930803b0b",
"body": null,
"is_bot": false,
"headline": "release: 5.6.1",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-07-17T11:24:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35c216f0bfc03dd752702da3be48a8ee05b12017",
"body": null,
"is_bot": false,
"headline": "feat(cache): Expose current cache version constant (#56)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-17T11:23:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c50fc294acf74b867d4700288d1baffe57bf09f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.6.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-07-14T14:54:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aba6ab7d1f6e4cf7c76770e94f113fdeb3ef3677",
"body": null,
"is_bot": false,
"headline": "release: 5.6.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-07-14T14:52:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e64ae5a595e9cd6e069ef396daaafca43f27e58",
"body": "This adds support for \"synthesized\" class and member annotations.\n\n* It adds a new variant `Synthesized` to `R8Header` to parse these\nannotations.\n* It adds `is_synthesized` flags to `ClassMapping` and `MemberMapping`\nand their corresponding cache types. In the cache the flags have type\n`u8` because\n[…]\nreturn exactly the same frames as before, but some of them\nmight be marked as synthesized. This means it's up to the caller to\ndecide what to do with synthesized frames.\n\nCloses #48. Closes RUSTPRO-3.",
"is_bot": false,
"headline": "feat: Handle \"synthesized\" class/member annotations (#52)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-14T14:51:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2d3ec7bb8c43ac7e8151a85ca80fcc35f6bd435e",
"body": "Previously, `ProguardCache` and `ProguardMapper` both implemented their\n(structurally very similar) parsing functions. These parsing functions\nleft a lot to be desired; the simply took records in the order they were\nencountered and were unable to use later information to refine\npreviously encountere\n[…]\n `ProguardMapper` or\n`ProguardCache`, as required.\n\nFixes #54. Fixes RUSTPRO-4.\n\nAs a follow-up I would like to use the newly introduced `ObfuscatedName`\nand `OriginalName` types throughout the crate.",
"is_bot": false,
"headline": "ref: Parse ProGuard files smarter (#55)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-14T12:49:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "248d6b5487ca95b5a45f83cc19267adb4e762498",
"body": null,
"is_bot": false,
"headline": "chore: Fix 1.88.0 clippy lints (#53)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-27T09:07:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "309d4c7764f100d97516dc4fad433fc41e5628c3",
"body": "R8 headers have a different format from \"normal\" ProGuard headers. This\nsplits the parsing of the two header formats apart and uses `serde` for\nR8 headers (they are specified to be in JSON format).\n\nSee\nhttps://r8.googlesource.com/r8/+/refs/heads/main/doc/retrace.md#additional-information-appended-as-comments-to-the-file\nfor R8 headers.",
"is_bot": false,
"headline": "ref: Robustly parse R8 headers (#50)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-26T12:24:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a1f7178721428ae972863ab9ca823923e47f93e",
"body": "This uses the std `LazyLock` instead of `lazy_static`.",
"is_bot": false,
"headline": "ref: Remove lazy_static dependency (#51)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-25T11:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4851067601863e4219763f94e6b3bd6486c07068",
"body": null,
"is_bot": false,
"headline": "chore: Clippy (#49)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-25T09:27:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff576f16536c20cb9756f8bd69bd2d693eb8c619",
"body": null,
"is_bot": false,
"headline": "chore: Simplify check (#47)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-01-21T09:08:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6dd8b78cb632826dd538c061bc64ea7cb694abd",
"body": "The `getsentry-release` is a GitHub bot account that is used in various\nautomation, and the `${{ secrets.GH_RELEASE_PAT }}` is a personal access\ntoken from that bot account. We are using a regular GitHub account as a\nbot while it should be a non-human account since there are no humans\nbehind it. Hen\n[…]\ne, there will be no difference. \n\nMore details:\nhttps://www.notion.so/sentry/DACI-Replace-GitHub-bot-accounts-with-GitHub-Apps-getsentry-release-15109965d1204a91b9be71c49e8b66e0?pvs=4\n\n#skip-changelog",
"is_bot": false,
"headline": "feat(release): Replace release bot with GH app (#45)",
"author_name": "Jeffrey Hung",
"author_login": "Jeffreyhung",
"committed_at": "2024-12-17T17:08:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e3cbeb55da7c9371d89de2a3c057dcf281408acf",
"body": null,
"is_bot": false,
"headline": "chore(lint): Elided lifetimes (#46)",
"author_name": "Joris Bayer",
"author_login": "jjbayer",
"committed_at": "2024-12-17T08:39:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85f067be40f48d3a3b5e830f71c463ec739a20a9",
"body": "This adds a benchmark for creating a cache from a proguard mapping file\r\n(as distinct from parsing an already written cache file).",
"is_bot": false,
"headline": "cache: Add creation benchmark (#44)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-04T13:47:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4daf9d17f946f8cf202b6ec176ec9f4d14559e12",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.5.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2024-07-03T14:34:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2cf7cfadb71182ae77f0d059d7c33c89b938536",
"body": null,
"is_bot": false,
"headline": "release: 5.5.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2024-07-03T14:32:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "294298c4b439ddd4cbd14eac0168ec240de8f4ab",
"body": "* Use chars instead of char_indices in one instance\r\n* Remove ClassIndex functionality (superseded by ProguardCache)\r\n* Use dep: syntax for uuid dependency\r\n* Update edition to 2021\r\n* Commit Cargo.lock",
"is_bot": false,
"headline": "ref: Various cleanup tasks (#43)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cfabb2e12f2342bf4b23a7991e0d28846104208",
"body": null,
"is_bot": false,
"headline": "Commit Cargo.lock",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26f496c62113229d4b74efc9abf5863c4ba7b74b",
"body": null,
"is_bot": false,
"headline": "Update edition to 2021",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dde46ee84cd17a0bc451dae9658c87c4636a434",
"body": null,
"is_bot": false,
"headline": "Don't rename uuid dep",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30b6b11f360cdc39b49c40d30f67da1a01496c2e",
"body": null,
"is_bot": false,
"headline": "Remove ClassIndex",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a74886fd7316297bd83e9ae4931c1026e7878e0",
"body": null,
"is_bot": false,
"headline": "Use chars",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a5ea7ca6a02f4ed55869f057c8b4442132cfb0",
"body": "This introduces a stable binary format similar to SymCache.\r\nIt allows lookups that are fast, if not as fast as via a `ProguardMapper`,\r\nbut doesn't require parsing the entire file into memory.",
"is_bot": false,
"headline": "feat: Introduce ProguardCache format (#42)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055d9a43c903c1dd9c0b16aa53ac8da57c10da18",
"body": null,
"is_bot": false,
"headline": "Add module docs",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T11:31:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dff15409c990a0231534b539d86b159c64c999d",
"body": null,
"is_bot": false,
"headline": "Write vectors at once",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T13:48:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beab1645ffd66c49b16db76bac3330aa510492bb",
"body": null,
"is_bot": false,
"headline": "Feedback",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T12:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83ced60100e76d4480b633e8a73f1d4b7e056e94",
"body": null,
"is_bot": false,
"headline": "Abstract out the binary search and use it in remap_method",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T12:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d09f304e55d3b8cd4b6d10d89918c2f2a46cbe7",
"body": null,
"is_bot": false,
"headline": "cache.rs -> cache/mod.rs",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "808e477127108f36d014188d9756aea50171f1f9",
"body": null,
"is_bot": false,
"headline": "Add parsing + mapping benchmarks",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:40:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f90d7c479a40e0e089b51c4a220a9b47bf7e665",
"body": null,
"is_bot": false,
"headline": "Missed something",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45e473955e208e0855e13c90deda505bda546cb4",
"body": null,
"is_bot": false,
"headline": "Use correct name of cache everywhere",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318be0636588db78205caa8645e250cb87463ef9",
"body": null,
"is_bot": false,
"headline": "Rename error types",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:24:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "173dc9ec38dfda77aca4ca812def9faa537ec5bf",
"body": null,
"is_bot": false,
"headline": "debug: use references",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2974c8e90a27dd8815b9a537bb700f4bfa7036b5",
"body": "Co-authored-by: Arpad Borsos <arpad.borsos@sentry.io>",
"is_bot": false,
"headline": "Update src/cache/raw.rs",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:19:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34e115a66395780ca06760315004f7687a830435",
"body": null,
"is_bot": false,
"headline": "Add cache to parsing benchmark",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T10:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c6267e5ce05868cdde6ab8a8b077b35c6a9afac",
"body": null,
"is_bot": false,
"headline": "Remove unwrap in binary search",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T10:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dec14eed1cc98843609f3f977c36a0126548fff",
"body": null,
"is_bot": false,
"headline": "Remove test I committed by mistake",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:55:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8c61bffddf2ac32c4866cad13d6062513ec381a",
"body": null,
"is_bot": false,
"headline": "Typo",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:53:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d66ac9b682ab2959a2f83ec013bcfd51bae27439",
"body": null,
"is_bot": false,
"headline": "Cleanup",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:51:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91f04584c8654cadfb44b703303380b35db294a7",
"body": null,
"is_bot": false,
"headline": "Expand test coverage",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:47:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f14996cbb700970d8d817e8dd46a151760023040",
"body": null,
"is_bot": false,
"headline": "Add remapping benchmark",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c4a1db923f87a0bcffdfa8ea383ef71e2ea30a1",
"body": null,
"is_bot": false,
"headline": "Use binary search more aggressively",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:08:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c206ebb385cb45344f97917cd0bcc2fb6e90f0bb",
"body": null,
"is_bot": false,
"headline": "Improve debug impls and add display",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T19:31:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f725d568fc7787510a29bf7aa5c8941442f4ff8",
"body": null,
"is_bot": false,
"headline": "Add read_string and test",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T19:29:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18369c4a805c5596428ffa04ab0592d3100fff3",
"body": null,
"is_bot": false,
"headline": "Remove commented code and add another debug method",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T17:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f12841abd25ebb4f1a21e77473c74c167340cc9d",
"body": null,
"is_bot": false,
"headline": "feat: Introduce ProguardCache format",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T16:45:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5f8d8fdc49448a23359329939d51e40bb7749e2",
"body": null,
"is_bot": false,
"headline": "WIP",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T10:30:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf3ec0ae0f4386f9dd2861b95ffd9259fb15d350",
"body": null,
"is_bot": false,
"headline": "feat: Add class indices to proguard mappings",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-27T10:23:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b295986737c1f5a8a538534c3e18ef9f7b809df0",
"body": null,
"is_bot": false,
"headline": "Require &str in parse",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-26T10:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "214ec5a5d652e35ee1cf02ae53121816a712a8f8",
"body": null,
"is_bot": false,
"headline": "Use offset_from",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-26T09:52:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d3e3625e5edacdb4e8238ead7977a6ba1261944",
"body": "Co-authored-by: Arpad Borsos <arpad.borsos@sentry.io>",
"is_bot": false,
"headline": "Typo",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-26T09:15:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67b62d9dd352f62409b0ce6acee4c989d15bbc6c",
"body": null,
"is_bot": false,
"headline": "Refactor",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-19T17:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80876ec9c0aac41d1aab61ff360d73eab3de4fca",
"body": null,
"is_bot": false,
"headline": "feat: Add `ProguardMapping::write_class_index`",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-17T15:22:14Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 42,
"latest_release_at": "2026-07-28T12:21:58Z",
"latest_release_tag": "5.10.4",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 14,
"days_since_latest_release": 0,
"mean_days_between_releases": 41.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "proguard",
"exists": true,
"license": "BSD-3-Clause",
"keywords": [
"android",
"proguard",
"r8",
"retrace"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/proguard",
"is_deprecated": false,
"latest_version": "5.10.4",
"repository_url": "https://github.com/getsentry/rust-proguard",
"versions_count": 33,
"total_downloads": 4372298,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 83681,
"first_published_at": "2017-06-02T14:05:58.921880Z",
"latest_published_at": "2026-07-28T12:21:55.054147Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 8,
"stars": 29,
"watchers": 37,
"fork_history": {
"days": [
{
"date": "2018-06-05",
"count": 1
},
{
"date": "2019-04-25",
"count": 1
},
{
"date": "2021-03-17",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2023-03-02",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml"
],
"largest_source_bytes": 60416,
"source_files_sampled": 27,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "crossbeam-epoch",
"direct": false,
"version": "0.9.18",
"severity": "unknown",
"ecosystem": "crates",
"cvss_score": null,
"advisory_ids": [
"RUSTSEC-2026-0204"
],
"fixed_version": "0.9.20",
"advisory_count": 1,
"oldest_advisory_days": 22
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 69,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "serde",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.219"
},
{
"name": "serde_json",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.140"
},
{
"name": "thiserror",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0.17"
},
{
"name": "uuid",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.18.0"
},
{
"name": "watto",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "serde",
"direct": true,
"version": "1.0.228",
"ecosystem": "crates"
},
{
"name": "serde_json",
"direct": true,
"version": "1.0.145",
"ecosystem": "crates"
},
{
"name": "thiserror",
"direct": true,
"version": "2.0.17",
"ecosystem": "crates"
},
{
"name": "uuid",
"direct": true,
"version": "1.18.1",
"ecosystem": "crates"
},
{
"name": "watto",
"direct": true,
"version": "0.2.0",
"ecosystem": "crates"
},
{
"name": "aho-corasick",
"direct": false,
"version": "1.1.4",
"ecosystem": "crates"
},
{
"name": "allocator-api2",
"direct": false,
"version": "0.2.21",
"ecosystem": "crates"
},
{
"name": "anes",
"direct": false,
"version": "0.1.6",
"ecosystem": "crates"
},
{
"name": "anstyle",
"direct": false,
"version": "1.0.13",
"ecosystem": "crates"
},
{
"name": "autocfg",
"direct": false,
"version": "1.5.0",
"ecosystem": "crates"
},
{
"name": "bumpalo",
"direct": false,
"version": "3.19.0",
"ecosystem": "crates"
},
{
"name": "cast",
"direct": false,
"version": "0.3.0",
"ecosystem": "crates"
},
{
"name": "cfg-if",
"direct": false,
"version": "1.0.4",
"ecosystem": "crates"
},
{
"name": "ciborium",
"direct": false,
"version": "0.2.2",
"ecosystem": "crates"
},
{
"name": "ciborium-io",
"direct": false,
"version": "0.2.2",
"ecosystem": "crates"
},
{
"name": "ciborium-ll",
"direct": false,
"version": "0.2.2",
"ecosystem": "crates"
},
{
"name": "clap",
"direct": false,
"version": "4.5.53",
"ecosystem": "crates"
},
{
"name": "clap_builder",
"direct": false,
"version": "4.5.53",
"ecosystem": "crates"
},
{
"name": "clap_lex",
"direct": false,
"version": "0.7.6",
"ecosystem": "crates"
},
{
"name": "criterion",
"direct": false,
"version": "0.7.0",
"ecosystem": "crates"
},
{
"name": "criterion-plot",
"direct": false,
"version": "0.6.0",
"ecosystem": "crates"
},
{
"name": "crossbeam-deque",
"direct": false,
"version": "0.8.6",
"ecosystem": "crates"
},
{
"name": "crossbeam-epoch",
"direct": false,
"version": "0.9.18",
"ecosystem": "crates"
},
{
"name": "crossbeam-utils",
"direct": false,
"version": "0.8.21",
"ecosystem": "crates"
},
{
"name": "crunchy",
"direct": false,
"version": "0.2.4",
"ecosystem": "crates"
},
{
"name": "either",
"direct": false,
"version": "1.15.0",
"ecosystem": "crates"
},
{
"name": "equivalent",
"direct": false,
"version": "1.0.2",
"ecosystem": "crates"
},
{
"name": "foldhash",
"direct": false,
"version": "0.1.5",
"ecosystem": "crates"
},
{
"name": "half",
"direct": false,
"version": "2.7.1",
"ecosystem": "crates"
},
{
"name": "hashbrown",
"direct": false,
"version": "0.15.5",
"ecosystem": "crates"
},
{
"name": "itertools",
"direct": false,
"version": "0.13.0",
"ecosystem": "crates"
},
{
"name": "itoa",
"direct": false,
"version": "1.0.15",
"ecosystem": "crates"
},
{
"name": "js-sys",
"direct": false,
"version": "0.3.83",
"ecosystem": "crates"
},
{
"name": "leb128",
"direct": false,
"version": "0.2.5",
"ecosystem": "crates"
},
{
"name": "memchr",
"direct": false,
"version": "2.7.6",
"ecosystem": "crates"
},
{
"name": "num-traits",
"direct": false,
"version": "0.2.19",
"ecosystem": "crates"
},
{
"name": "once_cell",
"direct": false,
"version": "1.21.3",
"ecosystem": "crates"
},
{
"name": "oorandom",
"direct": false,
"version": "11.1.5",
"ecosystem": "crates"
},
{
"name": "plotters",
"direct": false,
"version": "0.3.7",
"ecosystem": "crates"
},
{
"name": "plotters-backend",
"direct": false,
"version": "0.3.7",
"ecosystem": "crates"
},
{
"name": "plotters-svg",
"direct": false,
"version": "0.3.7",
"ecosystem": "crates"
},
{
"name": "proc-macro2",
"direct": false,
"version": "1.0.103",
"ecosystem": "crates"
},
{
"name": "quote",
"direct": false,
"version": "1.0.42",
"ecosystem": "crates"
},
{
"name": "rayon",
"direct": false,
"version": "1.11.0",
"ecosystem": "crates"
},
{
"name": "rayon-core",
"direct": false,
"version": "1.13.0",
"ecosystem": "crates"
},
{
"name": "regex",
"direct": false,
"version": "1.12.2",
"ecosystem": "crates"
},
{
"name": "regex-automata",
"direct": false,
"version": "0.4.13",
"ecosystem": "crates"
},
{
"name": "regex-syntax",
"direct": false,
"version": "0.8.8",
"ecosystem": "crates"
},
{
"name": "rustversion",
"direct": false,
"version": "1.0.22",
"ecosystem": "crates"
},
{
"name": "ryu",
"direct": false,
"version": "1.0.20",
"ecosystem": "crates"
},
{
"name": "same-file",
"direct": false,
"version": "1.0.6",
"ecosystem": "crates"
},
{
"name": "serde_core",
"direct": false,
"version": "1.0.228",
"ecosystem": "crates"
},
{
"name": "serde_derive",
"direct": false,
"version": "1.0.228",
"ecosystem": "crates"
},
{
"name": "sha1_smol",
"direct": false,
"version": "1.0.1",
"ecosystem": "crates"
},
{
"name": "syn",
"direct": false,
"version": "2.0.111",
"ecosystem": "crates"
},
{
"name": "thiserror-impl",
"direct": false,
"version": "2.0.17",
"ecosystem": "crates"
},
{
"name": "tinytemplate",
"direct": false,
"version": "1.2.1",
"ecosystem": "crates"
},
{
"name": "unicode-ident",
"direct": false,
"version": "1.0.22",
"ecosystem": "crates"
},
{
"name": "walkdir",
"direct": false,
"version": "2.5.0",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen-macro",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen-macro-support",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen-shared",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "web-sys",
"direct": false,
"version": "0.3.83",
"ecosystem": "crates"
},
{
"name": "winapi-util",
"direct": false,
"version": "0.1.11",
"ecosystem": "crates"
},
{
"name": "windows-link",
"direct": false,
"version": "0.2.1",
"ecosystem": "crates"
},
{
"name": "windows-sys",
"direct": false,
"version": "0.61.2",
"ecosystem": "crates"
},
{
"name": "zerocopy",
"direct": false,
"version": "0.8.30",
"ecosystem": "crates"
},
{
"name": "zerocopy-derive",
"direct": false,
"version": "0.8.30",
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 69,
"direct_count": 5,
"indirect_count": 64
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 81,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 5
},
"bus_factor": 3,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "loewenheim",
"commits": 48,
"avatar_url": "https://avatars.githubusercontent.com/u/7622248?v=4"
},
{
"type": "User",
"login": "getsentry-bot",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/10587625?v=4"
},
{
"type": "User",
"login": "romtsn",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/4999776?v=4"
},
{
"type": "User",
"login": "Swatinem",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/580492?v=4"
},
{
"type": "User",
"login": "mitsuhiko",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/7396?v=4"
},
{
"type": "User",
"login": "bruno-garcia",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/1633368?v=4"
},
{
"type": "User",
"login": "jan-auer",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/1433023?v=4"
},
{
"type": "User",
"login": "adinauer",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/2542832?v=4"
},
{
"type": "User",
"login": "viglia",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5112977?v=4"
},
{
"type": "User",
"login": "markushi",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1411808?v=4"
}
],
"contributors_sampled": 20,
"top_contributor_share": 0.277
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"check-retrace-spec.yml",
"ci.yml",
"enforce-license-compliance.yml",
"release.yml",
"weekly.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Cargo.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 18/30 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 17 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e671c50d1c292201a7e476643efffd47e9033f93",
"ran_at": "2026-07-29T04:59:05Z",
"aggregate_score": 5.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T12:22:18Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-28T12:14:08Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/getsentry/rust-proguard",
"host": "github.com",
"name": "rust-proguard",
"owner": "getsentry"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 70 is calibrated to 83 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 70,
"calibrated": 83,
"calibration": "2026-08-02"
}
}
],
"value": 83,
"inputs": {
"security": 65,
"vitality": 78,
"community": 57,
"governance": 86,
"calibration": "2026-08-02",
"engineering": 61,
"ai_readiness": 66,
"weighted_overall_raw": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"commits_last_year": 42,
"human_commit_share": 0.97,
"days_since_last_push": 0,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "42 commits in the last year",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 42
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 26,
"latest_release_tag": "5.10.4",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 41.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~41.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 41.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 57,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"forks": 8,
"stars": 29,
"watchers": 37,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "37 watchers",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 37
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"packages": [
"proguard"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 4372298,
"monthly_downloads": 83681
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "83,681 downloads/month across crates",
"points": 65.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 83681,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 86,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 20,
"top_contributor_share": 0.277
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "20 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 20
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 91,
"inputs": {
"merged_prs": 81,
"open_issues": 0,
"closed_issues": 9,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 5,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "81/86 decided PRs merged",
"points": 28.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 81,
"decided": 86
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 18/30 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "excellent",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 3133,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "getsentry",
"public_repos": 792,
"account_age_days": 5291
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3,133 followers of getsentry",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3133,
"login": "getsentry"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "792 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 792
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"proguard"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"tag-production"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 65,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 18/30 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 69 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 69
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 69,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 69,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 19
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 66,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.577,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "56 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 30.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 56,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Cargo.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.06,
"toolchain_manifests": [
"Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "6 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 60416,
"source_files_sampled": 27,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/27 source files over 60KB",
"points": 53,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 27,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 8
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:crates",
"weight": 6
},
{
"tier": "description",
"label": "library",
"source": "description:library",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:proguard@5.10.4; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-29T04:59:26.115183Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/getsentry/rust-proguard.svg",
"full_name": "getsentry/rust-proguard",
"license_state": "custom",
"license_spdx": null
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — crates.io.