IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.
joaquinbejar/IronFix erreicht einen Gesundheitsindex von 60 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (78/100) ab, am schwächsten bei Community & Adoption (40/100). Zuletzt vor 1 Tag aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
60
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
60
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Release-Rhythmus — ein Release etwa alle 35,2 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
6
latest_release_tag
v0.4.0
releases_from_tags
nein
days_since_latest_release
1
mean_days_between_releases
35,2
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
deps.dev does not index crates:ironfix-core@0.4.0; advisories assessed against the repository dependency graph instead
No resolved dependencies carried a version and a supported ecosystem
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 5 ⇿
0Sterne
5Forks
2Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 0Patch 2
Jeder Punkt umfasst 2 Tage.
OpenSSF Scorecard 4.4 / 10
4.4Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-23 16:43 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 3 direkte und 1 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
crates.io
proc-macro2
—
direkt
crates.io
quote
—
direkt
crates.io
syn
—
direkt
crates.io
tracing-subscriber
—
indirekt
Abhängigkeits-Advisories nicht bewertet
Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies carried a version and a supported ecosystem
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 785,
"has_wiki": true,
"homepage": null,
"languages": {
"Rust": 1483165,
"Makefile": 15958,
"Dockerfile": 17123
},
"pushed_at": "2026-07-22T15:00:23Z",
"created_at": "2024-04-28T05:13:34Z",
"owner_type": "User",
"updated_at": "2026-07-22T14:50:38Z",
"description": "IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://t.me/joaquin_bejar",
"name": "Joaquin Bejar Garcia",
"type": "User",
"login": "joaquinbejar",
"company": "Capital Delta",
"location": "London",
"followers": 289,
"avatar_url": "https://avatars.githubusercontent.com/u/99006095?v=4",
"created_at": "2022-02-04T06:46:24Z",
"is_verified": null,
"public_repos": 84,
"account_age_days": 1630
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-22T15:00:32Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-21T11:27:44Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-14T13:59:05Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-12T18:56:19Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-01-27T16:41:29Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-01-27T14:27:20Z"
}
],
"recent_commits": [
{
"oid": "af59accf42b37443007bfa30f3ef1ec22d16cad9",
"body": "…(Closes #51, #52) (#54)\n\n* fix(fast): let the nullable signed codec represent i64::MAX (#51)\n\nThe nullable signed codec biases the non-negative half by one, so Some(i64::MAX)\nbiased to 2^63, which the i64 encoder rejected and the i64 decoder could not\nrepresent: the domain was i64::MIN..=i64::MAX-1\n[…]\nep 7 no longer claims step 5 (HeartBtInt, a body\n field) enforces the standard-header contract, and states the positional 34\n read runs before identity, with the too-low/gap validation at this step.",
"is_bot": false,
"headline": "fix: nullable signed i64::MAX and positional initiator ack MsgSeqNum …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T14:49:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "99cc029684da540ba4cc27a66edc8c24e09b8614",
"body": "* fix(core): bound is_user_defined to the 5000-9999 range (#49)\n\nFieldTag::is_user_defined returned true for any tag >= 5000, so an assigned\nExtension Pack tag (40000+) was misclassified as user-defined. The FIX\nbilateral user-defined range is exactly 5000-9999; tags at or above 10000,\nincluding the\n[…]\nndent of the encoder and\n of the byte-count ceiling.\n- ironfix-fast crate docs no longer claim Some(u64::MAX) is refused; they state\n the nullable unsigned codec covers the full 0..=u64::MAX domain.",
"is_bot": false,
"headline": "fix: three conformance-edge fixes (Closes #48, #49, #50) (#53)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T13:02:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed355a040f4e47cf29da63a659e15dd6d9626e79",
"body": "…rminal (#47)\n\nSquashed for merge: adds Acceptor<A> driving the session acceptor typestate\nover the shared reactor, plus EngineBuilder terminal methods, with the review\nhardening to match the Initiator handshake.",
"is_bot": false,
"headline": "feat(engine): implement the Acceptor and give EngineBuilder a real te…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T10:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9907f904ee330e171f9f9718ee2824b342241f98",
"body": "…Ds (#46)\n\nSquashed for merge: bounds resend recovery, validates SendingTime, places\nCompIDs correctly, and keeps resend state in sync so a partial fill cannot\nsilently stall.",
"is_bot": false,
"headline": "fix(engine): bound resend recovery, validate SendingTime, place CompI…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:33:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5003bcef0b17a03c8076b7cb21bd553f3ca8fefe",
"body": "…#45)\n\nSquashed for merge: corrects the protocol errors across the per-version\nclient/server example pairs so they are usable templates.",
"is_bot": false,
"headline": "fix(examples): make the examples correct templates, not broken ones (…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:08:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7907efec8398e902b6f6223c4a070dc567a05a07",
"body": "…anic (#43)\n\nSquashed for merge: implements the FixMessage/FixField derives and the\nDictionary code generator, with the review hardening (bounded descent,\nidentifier validation, duplicate-key and char/empty-value paths).",
"is_bot": false,
"headline": "fix(derive,codegen): implement the macros instead of expanding to a p…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35de7ee0a23179c38b4d311b5e0ece7884cc448e",
"body": "* fix(fast): correct presence-map semantics per operator\n\nrequires_pmap answered with a single boolean per operator, which cannot be\nright: under FAST 1.1 several operators take a presence-map bit only when the\nfield is optional, so one boolean was always a half-truth. It takes the field's\noptionali\n[…]\nthe zero-suffix rule. The encoded-size\nceiling still bounds a hostile map, which is a separate concern from the\nsuffix. The test that asserted the old exhaustion behaviour now asserts the\nzero-suffix.",
"is_bot": false,
"headline": "fix(fast): correct presence-map semantics per operator (#40)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:55:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31154d695c19ff9693174954fc333702e7bbe747",
"body": "…e (#44)\n\nSquashed for merge: the outbound send path, the Application callback ordering,\nand the hardening from review's second pass.",
"is_bot": false,
"headline": "fix(engine): make the outbound and callback paths do what they promis…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4199e344ce1a26dcbee70e72883763f3632a5dc8",
"body": "…erything (#42)\n\nSquashed for merge: wires MessageStore into the Initiator so an inbound\nResendRequest replays stored application messages (PossDupFlag + OrigSendingTime)\nand gap-fills admin messages and evicted sequence numbers, with the whole-range\ngap fill as the no-store fallback. Includes the sequence-integrity review fixes.",
"is_bot": false,
"headline": "feat(store): replay messages from the store instead of gap-filling ev…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:05:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fc584ea2a4d381a227edf58b2416a07f508a943",
"body": "…it (#41)\n\n* fix(session): validate session configuration instead of panicking on it\n\nSessionConfigBuilder used expect(), so bad input panicked a library -- under\npanic = abort, that takes the caller's process with it -- and otherwise\nvalidated nothing at all. Every knob now has a typed field with a\n[…]\n were configured and validated\nbut never emitted, a silent misconfiguration for a user who set routing IDs. The\nstandard-header builder now stamps them after the sender/target sub-IDs when\nconfigured.",
"is_bot": false,
"headline": "fix(session): validate session configuration instead of panicking on …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:50:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a0f69872ad454074d1dc338e896059b902fc1cd3",
"body": "Merging the stack surfaced three target-level breakages that a library-only\nbuild did not catch:\n\n- The wrong-version Logon-ack test still called Encoder::finish() as if it\n returned a byte slice; it now returns Result<&[u8], EncodeError>, so the\n test matches on it.\n- Both criterion benches preda\n[…]\nhem is the dictionary Validator's job, not the codec's. The\n test now rejects only non-printable/non-ASCII codes and pins the acceptance\n of space and '=' so the decision cannot silently flip again.",
"is_bot": false,
"headline": "fix: repair test and bench targets after the encoder API shift",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:49:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7fb5db966798c88529db633652539fb9ff144686",
"body": "…#39)\n\n* fix(dictionary): make the schema the authority it is supposed to be\n\nThe validator exists to be the authority on message structure, and it was\naccepting messages whose structure did not match the schema. Repeating groups\nwhose count or delimiter disagreed with the definition validated clean\n[…]\ne validator's fractional-second cap rejected legal 12-digit picosecond\nUTCTimestamps that FIX 5.0 SP2 permits -- the dictionary wrongly overruling the\nspec -- so the cap is raised from 9 to 12 digits.",
"is_bot": false,
"headline": "fix(dictionary): make the schema the authority it is supposed to be (…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "afb6297bfaf743efbf9947b0ac0abc040dce969c",
"body": "…X 4.4 (#38)\n\nA FIX DATA field is a counted byte string whose content may legally contain\nSOH and '=', so the decoder frames it by the count its paired LENGTH field\ndeclares. The pair table covered FIX 4.4 only -- 16 pairs -- while the crate\nadvertises 4.0 through 5.0 SP2, so any DATA field introduc\n[…]\nnything an Extension Pack adds after 5.0 SP2. Both are documented rather\nthan left to be discovered.\n\nThe encoder's put_data validates against the same table, so the new pairs work\nin both directions.",
"is_bot": false,
"headline": "fix(tagvalue): frame every spec-defined Length/Data pair, not just FI…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:36:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "234500a544b9ae013223decdb18f66fe8a15b002",
"body": "* fix(session): stop the heartbeat logic from killing live sessions\n\nTwo of these were reproduced against a running session, not inferred.\n\nHeartBtInt = 0 is legal FIX and means do not send heartbeats. It was taken\nliterally as a zero-length interval, so should_send_heartbeat was permanently\ntrue an\n[…]\nis now asserted at construction\n(zero elapsed, unreachable by any realistic stall) and only the 'due' side\nsleeps -- which is robust, since a longer-than-requested sleep still lands past\nthe boundary.",
"is_bot": false,
"headline": "fix(session): stop the heartbeat logic from killing live sessions (#37)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:35:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84895907490b1e9831ba48f692d0d1637754f3cd",
"body": "… accepts (#36)\n\n* fix(tagvalue): make every frame the encoder emits one its own decoder accepts\n\nThe encoder wrote application values raw, so a string containing SOH or '='\ninjected fields into its own message -- the mirror of the decoder-side\ninjection already closed. Illegal bytes are now refused\n[…]\npty value.\n\nA caller-facing rejection (an Err back through Connection::send) would need a\noneshot on the fire-and-forget send channel, which is a Connection API change\nleft for the outbound-path work.",
"is_bot": false,
"headline": "fix(tagvalue): make every frame the encoder emits one its own decoder…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:35:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c2e16444f833312b987f063724066c6ec6488f7",
"body": "…ess (#35)\n\n* ci: make the gates fail when they should, and stand up the bench harness\n\nformat_check ran the mutating format target instead of a check, so it\nrewrote the files and reported success -- the gate could never fail.\n\npublish-all suppressed every error with '|| true', so it reported succes\n[…]\nefore finish(), so it is narrowed to what the bench\nmeasures.\n\nAdds doc/adr/0001 recording the criterion dev-dependency decision -- the repo\nhad no ADR directory and this is the first ADR-worthy call.",
"is_bot": false,
"headline": "ci: make the gates fail when they should, and stand up the bench harn…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:33:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be83d71cb0ae00e2aac6a247846b777f4d8706cb",
"body": "* docs: make the documentation describe the code that exists\n\nThe README's quick start called EngineBuilder::build(), which has never\nexisted, so the first thing a reader tried did not compile. It also advertised\nTLS, a FileStore, broad out-of-the-box version support and a complete facade,\nnone of w\n[…]\num sketch flagged in review is left as is: architecture.md is\nan explicitly-labelled design target whose code is illustrative and mostly does\nnot compile, and that unsafe is already disclaimed inline.",
"is_bot": false,
"headline": "docs: make the documentation describe the code that exists (#33)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:31:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a804306d42a5006a59dc619075b762d71fc1bc3",
"body": "…rsion hoist\n\nThe #28 version hoist made begin_string a method on the shared FixVersion,\nbut #9's BeginString mismatch check indexed it as a struct field. Both were\ntextually clean on merge yet semantically incompatible, breaking the build.\nThe two call sites in the Logon-ack check now invoke the method.",
"is_bot": false,
"headline": "fix(engine): call FixVersion::begin_string() as a method after the ve…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:29:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14ef48f2459e1899d1973feef8bac582863f55d4",
"body": "The map from a configured FIX version to its wire form -- BeginString, and\nApplVerID for the 5.0 family -- existed in two places: ironfix-dictionary's\nschema::Version, and a pub(crate) table added to ironfix-engine when FIXT.1.1\nsupport landed. The duplication was deliberate, because ironfix-engine \n[…]\nversion but no application version for the required DefaultApplVerID -- rather\nthan guessing one onto the wire.\n\nThe crate DAG is unchanged: ironfix-engine still does not depend on\nironfix-dictionary.",
"is_bot": false,
"headline": "refactor(core): give the FIX version mapping a single home (#34)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:26:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62206df6a598cfa4d4bc46ea566394dc0d13dcf2",
"body": "* perf(core): make an unrecognised MsgType allocation-free\n\nMsgType::from_str ended in Custom(other.to_string()), so any tag 35 value the\nenum does not name heap-allocated once per message on the decode success path\n-- the path that is supposed to allocate nothing. A counterparty sending a\nvendor-sp\n[…]\nh are accepted now, while SOH, other control bytes and non-ASCII stay\nrejected. A decoder test that asserted the old '=' rejection is updated to\nassert 35=A=B decodes to Custom(\"A=B\") and round-trips.",
"is_bot": false,
"headline": "perf(core): make an unrecognised MsgType allocation-free (#32)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:25:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "318e3bc33bed6acdce36dbf528fd28ce00b71852",
"body": "…loss (#31)\n\n* fix(core): harden the shared vocabulary against injection and silent loss\n\nCompId checked only length, and the engine writes CompIds unescaped into tags\n49 and 56 on every outbound message -- so a hostile identifier injected header\nfields or corrupted framing. The constructor now reje\n[…]\nates a field and only the\nfirst '=' separates tag from value -- so a valid counterparty identifier\ncontaining '=' was refused. The '=' check is removed; SOH and non-printable\nbytes are still rejected.",
"is_bot": false,
"headline": "fix(core): harden the shared vocabulary against injection and silent …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:24:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2929dae71c2a8ff27737eb079ecc0dac04fa44a8",
"body": "… (#30)\n\n* fix(fast): correct the stop-bit primitives and bound the presence map\n\nThe signed encoder never emitted the sign-carry byte, so every value whose\nmost significant payload byte conflicted with the sign round-tripped to a\ndifferent number: 64 decoded as -64, 127 as -1, i64::MAX as -1, i64::\n[…]\nto what the code guarantees and the resolution is\npointed at the template work in #13. The ceiling's scope is stated too: it\nbounds decode, not from_bits or the builder, whose output encode() refuses.",
"is_bot": false,
"headline": "fix(fast): correct the stop-bit primitives and bound the presence map…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:23:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83613e69fc1087c0cd1d5b06125a6f121a648162",
"body": "* fix(engine): make inbound session handling conform to the FIX spec\n\nEight defects in the Initiator's inbound path, all reachable from a\ncounterparty.\n\nSequenceReset conflated GapFill with Reset. Only Reset mode may ignore\nMsgSeqNum; a GapFill participates in normal sequencing, so a gapped fill now\n[…]\nn consuming an in-sequence fill, on the malformed-flag reason,\nand on the engine declaring but not using a store; the outbound EndSeqNo=0\nsentinel's 4.0/4.1 caveat is documented as a known limitation.",
"is_bot": false,
"headline": "fix(engine): make inbound session handling conform to the FIX spec (#25)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:19:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb1eb9638f002e5735c0c2f7d8de06bc988a496c",
"body": "…ssage recovery (#24)\n\n* chore: bump workspace to 0.4.0\n\nThe P0 audit fixes require breaking public API changes (fallible\nconstructors, new error variants on enums that are not #[non_exhaustive],\ndeprecations). For a 0.x crate the breaking bump is the minor position, and\nsemver.yml runs cargo-semver\n[…]\nnds the buffer's length, not its resident cost, and that\ntokio_util::Framed terminates its stream after any decoder error -- so the\nresync is reachable only by a caller that drives the codec directly.",
"is_bot": false,
"headline": "fix(transport): verify framing, bound buffering and define garbled-me…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T17:50:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e565c29548fded9174d27b65acf8c3ef6c1f52ad",
"body": "…ut (#23)\n\n* chore: bump workspace to 0.4.0\n\nThe P0 audit fixes require breaking public API changes (fallible\nconstructors, new error variants on enums that are not #[non_exhaustive],\ndeprecations). For a 0.x crate the breaking bump is the minor position, and\nsemver.yml runs cargo-semver-checks agai\n[…]\nagainst the FIX 4.4 DATA field set so the two cannot drift.\n\nAlso corrects the checksum comment, which claimed 16.8 MB was reachable for a\nframed message when the transport caps frames far below that.",
"is_bot": false,
"headline": "fix(tagvalue): harden the tag=value decode path against untrusted inp…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T17:49:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1110a14a020b34883df4ca1385a7ed9d0aeaba8b",
"body": "Three sibling unchecked-arithmetic sites were reachable from raw framing\nbytes and panicked under overflow-checks (or wrapped silently in release):\n\n- ironfix-tagvalue/src/decoder.rs: `body_start + body_length` used the\n fully attacker-controlled BodyLength(9). Now `checked_add`, plus a\n declared-\n[…]\nyLength that does not match\nthe actual body. The dictionary validator test fixtures declared a dummy\n`9=100`, so the test helper now computes the real length.\n\nBumps the workspace to 0.3.1.\n\nCloses #4",
"is_bot": false,
"headline": "fix: bound attacker-controlled BodyLength and CheckSum arithmetic (#5)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T11:20:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2099810441f4aef5e83e037ad89cc7b64c9a1f1c",
"body": "tokio 1.52, bytes 1.12, smallvec 1.15, memchr 2.8, rust_decimal 1.42,\nquick-xml 0.41; add futures-util for the engine reactor's Stream/Sink\ncombinators. Adapt the dictionary loader to quick-xml 0.41, which\nreplaces unescape_value with normalized_value(XmlVersion).\n\nMinor (0.x-major) bump: ironfix-engine grows the Initiator public API\nand the workspace dependency floors move.",
"is_bot": false,
"headline": "Update dependencies to latest stable and bump workspace to 0.3.0",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-14T13:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e09dd4128dd97630c24977293c45445f18a445",
"body": "Dial + FixCodec framing + Logon handshake driven through the\nironfix-session typestates, with a background reactor task owning the\nsocket: heartbeats/TestRequests with timeout detection, sequence\nvalidation (ResendRequest on gap, GapFill reply to resends, PossDup\nhandling), Application callback disp\n[…]\nion, per-connection reactors) is not cheap to bolt on here.\n\nFix the fix44_server example to send incrementing MsgSeqNum: a\nsequence-correct initiator rejects its hardcoded 34=1 as too-low.\n\nCloses #3",
"is_bot": false,
"headline": "Add Initiator to ironfix-engine: TCP dial, reactor, session runner",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-14T13:57:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32f5e5cf20ca3a24f456952e67ea7af26bd5b7f4",
"body": "ironfix-dictionary now has a dev-dependency on ironfix-tagvalue, so the\nold order fails to resolve during publish verification.",
"is_bot": false,
"headline": "Publish ironfix-tagvalue before ironfix-dictionary in publish-all",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb0a67630cc12844dcb980286f2d60805640fe6b",
"body": "Minor (0.x-major) bump: ironfix-dictionary adds public fields to the\nexhaustive Dictionary and GroupDef structs, which is a breaking change\nfor downstream struct construction.",
"is_bot": false,
"headline": "Bump crate versions to 0.2.0 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d19c92bd18fff8fa2eb6602ec70cfdcecd6d1dc",
"body": "…idator\n\nVendor the QuickFIX FIX44.xml specification and embed it behind\nDictionary::fix44(), parsed once and cached for the process lifetime.\nAdd Dictionary::from_quickfix_xml() so venue-specific dialects can be\nloaded from QuickFIX-format XML. Add Validator, which checks a decoded\nRawMessage again\n[…]\nonent expansion), enum values, and repeating group\ncount/delimiter consistency. Extend the schema with group component\nreferences and header/trailer groups, which FIX 4.4 requires (NoHops).\n\nCloses #2",
"is_bot": false,
"headline": "Add embedded FIX 4.4 dictionary, QuickFIX XML loader, and message val…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94b8edd7e29133a2b9065d61e66519900653be80",
"body": "Add LogonReceived state with accept_logon/reject_logon/on_timeout\ntransitions plus Disconnected::accept and Connecting::on_logon_received,\nso a FIX acceptor (server) can express its state machine with the\nprovided typestate. Add try_allocate_sender_seq and\ntry_increment_target_seq returning Result<SeqNum, SequenceExhausted> so\nsequence exhaustion is an explicit error instead of silent u64\nwraparound; document the reset semantics. Export Session and the new\ntypes from the crate root.\n\nCloses #1",
"is_bot": false,
"headline": "Add acceptor-side session typestates and checked sequence counters",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ac17a37f7c4efbdfe97a06f428809733d88b66b",
"body": "…e badge",
"is_bot": false,
"headline": "Update badges in README to reflect \"ironfix-core\" and simplify licens…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e13dfdc6e7dee43e42e913c738fd75c3d7fa019",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.6 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84846e04d3c172d16a10cb366ce58f82c99a4aa",
"body": "…ility",
"is_bot": false,
"headline": "Refactor code style and ordering in example files for improved readab…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ae4abe5e8b108949521da83f1b544bc021be33",
"body": "… FAST protocol server and client examples. Bump crate versions to 0.1.5.",
"is_bot": false,
"headline": "Add Dockerfiles for FIX protocol versions (FIX40 to FIX50SP2) and new…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7ef7433512008faa99b3727684fe92448cbb2df",
"body": null,
"is_bot": false,
"headline": "Enhance semver workflow to include checks for all ironfix crates",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:22:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3336fad9dea0eb0636636674809c70ac84e3cd5",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.4 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:18:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4a44a0b645d9803546c31f66db6dfa7399b2123",
"body": "…value\" modules across examples and documentation",
"is_bot": false,
"headline": "Update crate imports to match renamed \"ironfix_core\" and \"ironfix_tag…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:18:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98f3f916442566fb273ca92ef47fd1772cb0eef8",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.3 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:09:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b4329da5480707175bf7acf8216bfda966ce048",
"body": "…ences across the repository.",
"is_bot": false,
"headline": "Rename crate from \"ironfix\" to \"ironfix-example\" and update all refer…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4545dd5573e77d91ead3648bafb3d6836ab58aea",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.2 and allow non_snake_case in `lib.rs`.",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5773698741ada37fa00a14bb0248466c2609c092",
"body": "…y` from the publishing workflow in Makefile",
"is_bot": false,
"headline": "Update crate name to \"IronFix\" in Cargo.toml and remove `--allow-dirt…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:52:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b67041f0a9166940f9b2781be2262c9b4f4570d6",
"body": null,
"is_bot": false,
"headline": "Add version update target to Makefile and bump crate versions to 0.1.1",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd279a97026be4713b5b598803cb42b9bbbd97e2",
"body": null,
"is_bot": false,
"headline": "Remove all example files and shared utilities from the repository",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:33:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6cbfd8d4a973d298e22bfde83207e237f70643",
"body": null,
"is_bot": false,
"headline": "Add dependency versions and enhance publishing workflow in Makefile",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T12:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ed5ddbefadb50db5e2941b9ca6c3b775fd114af",
"body": "…port examples",
"is_bot": false,
"headline": "Add `ironfix-transport` crate with FIX codec implementation and trans…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T12:44:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d37b8cdd3eb396b4c70f6927965b108d505bff5",
"body": null,
"is_bot": false,
"headline": "Add license information to README",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85653b7ab89a234a7d1e169e888534153ae08ea0",
"body": "…ry, etc.)",
"is_bot": false,
"headline": "Add metadata to `Cargo.toml` (authors, description, license, reposito…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:03:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b3d7b09461ea06f5bcc9c593d0858a7772e1812",
"body": null,
"is_bot": false,
"headline": "Add docstring to the `main` function to describe its purpose",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aa71a7e2424d460ac30569cf4235251fec27016",
"body": null,
"is_bot": false,
"headline": "Initialize project with main entry point and README file",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86510c5e35d34e66404193ed66474167779f2ef5",
"body": "…s. Added Makefile, `.gitignore`, `rust-toolchain.toml`, and initial GitHub Actions workflows for build, lint, format check, testing, and coverage. Configured Cargo for Rust 2024 edition. Removed unused files.",
"is_bot": false,
"headline": "Set up project structure with essential configuration and CI workflow…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:01:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "985e3ecd70597ce4623d894e3958fca09e374046",
"body": null,
"is_bot": false,
"headline": "start cargo",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a1c6d44ca920c639e5dd47bbf1d4da752ffd453",
"body": null,
"is_bot": false,
"headline": "first commit",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fca02f48c5308000bcf787dd9711ad68e0e312f",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:13:34Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 52,
"latest_release_at": "2026-07-22T15:00:32Z",
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 3,
"days_since_latest_release": 1,
"mean_days_between_releases": 35.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "ironfix-core",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-core",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 7990,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2016,
"first_published_at": "2026-01-27T12:49:59.345945Z",
"latest_published_at": "2026-07-22T14:53:31.824909Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-fast",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-fast",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 468,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 85,
"first_published_at": "2026-01-27T13:35:18.899369Z",
"latest_published_at": "2026-07-22T14:57:48.056384Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-store",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-store",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 3043,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 472,
"first_published_at": "2026-01-27T12:52:21.138677Z",
"latest_published_at": "2026-07-22T14:55:57.317819Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-derive",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-derive",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 189,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29,
"first_published_at": "2026-01-27T12:50:33.059000Z",
"latest_published_at": "2026-07-22T14:54:06.558111Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-engine",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-engine",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 10,
"total_downloads": 2938,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 457,
"first_published_at": "2026-01-27T13:43:29.796940Z",
"latest_published_at": "2026-07-22T14:59:01.231661Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-codegen",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-codegen",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 10,
"total_downloads": 232,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 46,
"first_published_at": "2026-01-27T13:42:56.288181Z",
"latest_published_at": "2026-07-22T14:58:24.175073Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-example",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-example",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 7,
"total_downloads": 134,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29,
"first_published_at": "2026-01-27T14:15:33.090366Z",
"latest_published_at": "2026-07-22T14:59:38.941209Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-session",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-session",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 3054,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 476,
"first_published_at": "2026-01-27T13:34:06.758915Z",
"latest_published_at": "2026-07-22T14:56:35.026256Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
}
]
},
"popularity": {
"forks": 5,
"stars": 10,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-05-21",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"largest_source_bytes": 160824,
"source_files_sampled": 79,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 4,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "ironfix-dictionary",
"manifest": "ironfix-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "arrayvec",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "num-traits",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "num-derive",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rust_decimal",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "chrono",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "syn",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "quote",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "proc-macro2",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "ironfix-core",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "quick-xml",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-session",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-store",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-transport",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-trait",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-util",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "futures-util",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-dictionary",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-session",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-store",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-transport",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-fast",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-engine",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rust_decimal",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "parking_lot",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-trait",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "parking_lot",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memchr",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "itoa",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-util",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memchr",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "proc-macro2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "quote",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "syn",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "tracing-subscriber",
"direct": false,
"version": null,
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 4,
"direct_count": 3,
"indirect_count": 1
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 24,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 30,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "joaquinbejar",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/99006095?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"code_coverage.yml",
"docker.yml",
"docs.yml",
"examples.yml",
"format_check.yml",
"lint.yml",
"semver.yml",
"tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "af59accf42b37443007bfa30f3ef1ec22d16cad9",
"ran_at": "2026-07-23T16:43:31Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T14:50:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T14:49:21Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/joaquinbejar/IronFix",
"host": "github.com",
"name": "IronFix",
"owner": "joaquinbejar"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 44,
"vitality": 78,
"community": 40,
"governance": 61,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 52,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "52 commits in the last year",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 52
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_latest_release": 1,
"mean_days_between_releases": 35.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~35.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 35.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 1 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 1
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"forks": 5,
"stars": 10,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "10 stars",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 10
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"ironfix-core",
"ironfix-fast",
"ironfix-store",
"ironfix-derive",
"ironfix-engine",
"ironfix-codegen",
"ironfix-example",
"ironfix-session"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 18048,
"monthly_downloads": 3610
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,610 downloads/month across crates",
"points": 47.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3610,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 24,
"open_issues": 0,
"closed_issues": 30,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "24/24 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 24,
"decided": 24
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 289,
"owner_type": "User",
"is_verified": null,
"owner_login": "joaquinbejar",
"public_repos": 84,
"account_age_days": 1630
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "289 followers of joaquinbejar",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 289,
"login": "joaquinbejar"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "84 public repos, account ~4 yr old",
"points": 21.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 84
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"ironfix-core",
"ironfix-fast",
"ironfix-store",
"ironfix-derive",
"ironfix-engine",
"ironfix-codegen",
"ironfix-example",
"ironfix-session"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 1
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 44,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "33 of 55 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 33,
"sampled": 55
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 55",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 55
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 160824,
"source_files_sampled": 79,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/79 source files over 60KB",
"points": 52.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 79,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:ironfix-core@0.4.0; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-23T16:43:46.950788Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/joaquinbejar/IronFix.svg",
"full_name": "joaquinbejar/IronFix",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit joaquinbejar/IronFix teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
