lutaml/moxml erreicht einen Gesundheitsindex von 63 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (81/100) ab, am schwächsten bei Community & Adoption (35/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
63
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
63
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Liefert Releases aus — 26 Versions-Tags (keine GitHub-Releases)
36/36
Release-Aktualität — letztes Release vor 0 Tagen
27/27
Release-Rhythmus — ein Release etwa alle 9,9 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
26
latest_release_tag
v0.1.26
releases_from_tags
ja
days_since_latest_release
0
mean_days_between_releases
9,9
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
No resolved dependencies carried a version and a supported ecosystem
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 3 ⇿
0Sterne
3Forks
18Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 0Patch 18
Jeder Punkt umfasst 2 Tage.
OpenSSF Scorecard 4.8 / 10
4.8Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-22 11:30 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 22 direkte und 6 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
RubyGems
benchmark
—
direkt
RubyGems
benchmark-ips
—
direkt
RubyGems
get_process_mem
—
direkt
RubyGems
libxml-ruby
—
direkt
RubyGems
nokogiri
—
direkt
RubyGems
oga
—
direkt
RubyGems
opal
—
direkt
RubyGems
opal-rspec
—
direkt
RubyGems
opal-sprockets
—
direkt
RubyGems
openssl
—
direkt
RubyGems
ox
—
direkt
RubyGems
rake
—
direkt
RubyGems
rexml
—
direkt
RubyGems
rspec
—
direkt
RubyGems
rubocop
—
direkt
RubyGems
rubocop-performance
—
direkt
RubyGems
rubocop-rake
—
direkt
RubyGems
rubocop-rspec
—
direkt
RubyGems
ruby-ll
—
direkt
RubyGems
simplecov
—
direkt
RubyGems
stackprof
—
direkt
RubyGems
tempfile
—
direkt
RubyGems
asciidoctor
—
indirekt
RubyGems
jekyll
—
indirekt
RubyGems
jekyll-asciidoc
—
indirekt
RubyGems
jekyll-seo-tag
—
indirekt
RubyGems
jekyll-sitemap
—
indirekt
RubyGems
just-the-docs
—
indirekt
Abhängigkeits-Advisories nicht bewertet
Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies carried a version and a supported ecosystem
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 46166,
"has_wiki": true,
"homepage": null,
"languages": {
"Ruby": 1203748,
"Shell": 131
},
"pushed_at": "2026-07-22T11:21:45Z",
"created_at": "2024-10-29T12:08:45Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T11:21:50Z",
"description": "Unified interface for multiple XML libraries ",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": null,
"name": "LutaML",
"type": "Organization",
"login": "lutaml",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/67158171?v=4",
"created_at": "2020-06-19T14:49:52Z",
"is_verified": null,
"public_repos": 66,
"account_age_days": 2223
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.26",
"kind": "patch",
"published_at": "2026-07-22T11:21:42Z"
},
{
"tag": "v0.1.25",
"kind": "patch",
"published_at": "2026-06-26T14:24:19Z"
},
{
"tag": "v0.1.24",
"kind": "patch",
"published_at": "2026-06-02T07:15:21Z"
},
{
"tag": "v0.1.23",
"kind": "patch",
"published_at": "2026-06-01T03:32:58Z"
},
{
"tag": "v0.1.22",
"kind": "patch",
"published_at": "2026-05-25T15:43:47Z"
},
{
"tag": "v0.1.21",
"kind": "patch",
"published_at": "2026-05-25T11:42:04Z"
},
{
"tag": "v0.1.20",
"kind": "patch",
"published_at": "2026-05-03T13:28:32Z"
},
{
"tag": "v0.1.19",
"kind": "patch",
"published_at": "2026-05-01T10:56:27Z"
},
{
"tag": "v0.1.18",
"kind": "patch",
"published_at": "2026-04-27T01:45:18Z"
},
{
"tag": "v0.1.17",
"kind": "patch",
"published_at": "2026-04-24T07:17:59Z"
},
{
"tag": "v0.1.16",
"kind": "patch",
"published_at": "2026-04-22T23:01:16Z"
},
{
"tag": "v0.1.15",
"kind": "patch",
"published_at": "2026-04-22T01:49:29Z"
},
{
"tag": "v0.1.14",
"kind": "patch",
"published_at": "2026-04-20T12:06:20Z"
},
{
"tag": "v0.1.13",
"kind": "patch",
"published_at": "2026-04-20T07:44:59Z"
},
{
"tag": "v0.1.12",
"kind": "patch",
"published_at": "2026-04-16T06:29:24Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2026-04-16T01:44:58Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2025-11-26T04:38:34Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2025-11-24T23:12:55Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2025-11-24T07:13:12Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2025-08-15T08:01:10Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2025-07-29T05:29:41Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2025-05-12T07:55:10Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-02-26T08:24:42Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2025-02-07T04:15:15Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2025-01-13T02:56:37Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-10-30T10:35:59Z"
}
],
"recent_commits": [
{
"oid": "948532a670fc7218d22dee216f316348ee733a9f",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.26",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-07-22T11:21:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a58f9b0b5e54ac5beb22555fa46d42137d596d4e",
"body": "…c paths\n\nCI rubocop caught offenses missed by local -a (rubocop_todo config\ndiffers between local and CI). Fixes:\n\n- Naming/VariableNumber: :inclusive_10 -> :inclusive10, etc.\n- Naming/MethodParameterName: equivalent?(a, b) -> equivalent?(left, right)\n- Metrics/ParameterLists: build_signature(**opts) instead of 10 kwargs\n- RSpec/FilePath: models_spec.rb -> model_spec.rb\n- Hash alignment in canonicalize_exclusive\n\n153 specs, 0 failures, 0 rubocop offenses (237 files inspected).",
"is_bot": false,
"headline": "fix(c14n): rubocop CI failures - normalcase symbols, param names, spe…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23bf09b4c5a264696e6209004cd8d1023729ae57",
"body": "…ge cases\n\nAddresses the critical regression where Inclusive10 was using the\nmoxml-native Writer walker instead of the canon-ported Processor\npipeline. The canon port was dead code until now.\n\nFixes:\n- Inclusive10 now delegates to Processor + DataModel (the canon port\n that was previously unused). \n[…]\n, document-level comments/PIs (known limitation noted)\n- spec/moxml/c14n/xml_attributes_spec.rb — xml:lang, xml:space, xml:id,\n xml:base, attribute sorting\n\n153 specs, 0 failures, 0 rubocop offenses.",
"is_bot": false,
"headline": "feat(c14n): public API + equivalent? + Inclusive10 via Processor + ed…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b53ac4813be6905bf86b7310df642791772fb160",
"body": "Adds 17 specs covering gaps identified in the audit (TODO.complete/20):\n\n- Malformed Signature elements (no Signature, invalid base64, empty\n SignatureValue, unknown algorithm URI)\n- HMAC truncation at exact boundaries (minimum, just above, just below)\n- KeyExtractor failure modes (nil KeyInfo, emp\n[…]\ntion (library returns per-reference\n results; application must check URI)\n- Adapter portability (sign with one context, verify with another)\n\n113 specs total (was 96), 0 failures, 0 rubocop offenses.",
"is_bot": false,
"headline": "test(signature): edge cases, defensive behavior, attack scenarios",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2851158b41dc2fa367e3ae70e61aa83d1d216b11",
"body": "Audit of feat/xml-signature identified critical bugs, architectural smells,\nand missing documentation. This commit addresses the high-severity\nfindings and adds comprehensive docs.\n\nCritical fixes:\n- CanonicalizationBase#transform no longer uses global Moxml.parse;\n uses the context: passed by Tran\n[…]\non (intentional but undocumented)\n- H6 split AlgorithmMethod into CanonicalizationMethod + SignatureMethod\n- M1/M2/M3 DRY cleanups\n- L1-L4 minor improvements\n\n96 specs, 0 failures, 0 rubocop offenses.",
"is_bot": false,
"headline": "refactor(signature): audit fixes + documentation",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e30e4173d4b5b2ccd7ff0fc4cdc8493b00c8bd6",
"body": "Addresses the architecture question raised in review: \"Did you move the\nC14n code from canon over? because their code is known to be mature and\ncomplete.\"\n\nThe earlier \"promote to top-level\" commit only renamed my own (less\nmature) implementation. This commit does the proper port from canon.\n\nPorted\n[…]\nproduced fixtures still verify\nbyte-exact after the port (sign2-result.xml, sign3-result.xml).\n\n96 specs, 0 failures, 0 rubocop offenses.\nFull existing suite (1896 examples, 174 pending) still passes.",
"is_bot": false,
"headline": "refactor(c14n): port canon mature C14N implementation into Moxml::C14n",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09b959da7147c0b61708eda548af5c26fced3ff2",
"body": "Addresses the architecture question raised in review: \"Don't moxml\n(or ../canon) already implement C14n?\"\n\nRight answer was to promote C14N out of the signature sub-namespace\ninto a top-level moxml feature, so it can serve any consumer (signature,\ncanon sibling project, future tooling) instead of be\n[…]\nunity\n (Nokogiri has native C14N via libxml2; other adapters would fall\n back to pure-Ruby).\n\n96 specs, 0 failures, 0 rubocop offenses. Full existing suite (1896\nexamples, 174 pending) still passes.",
"is_bot": false,
"headline": "refactor(signature): promote C14N to moxml top-level; drop XPath Filter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3a0858db94febaa52413511197e93e329550c0ca",
"body": "… extraction\n\nBuilds on PR #93's foundation with the major pieces needed for\ncross-verification against libxmlsec1-produced signatures.\n\nC14N correctness (the load-bearing fix):\n- exc-c14n apex now renders visibly-used namespaces including the\n default namespace (was missing — broke byte-exact cano\n[…]\n X509Certificate) auto-verifies\n with no explicit key — extracted from the certificate.\n\n99 specs (was 67 in PR #93), 0 failures, 0 rubocop offenses.\nFull existing suite (1896 examples) still passes.",
"is_bot": false,
"headline": "feat(signature): inclusive C14N + ECDSA/DSA + XPath Filter + auto key…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6016c664591f118417c64152f2759deb508a07e7",
"body": "Add an XML-implementation-agnostic W3C XML Signature (xmldsig-core-1.1)\nprocessing module under Moxml::Signature. All XML operations flow\nthrough the moxml Document/Element API; no adapter (Nokogiri, Oga, REXML,\nOx, LibXML) is touched directly.\n\nFoundation scope (this PR):\n\n- Algorithm registry (OCP\n[…]\nted in\nTODO.complete/ (00-architecture through 18-documentation). Local-only\nper project convention (TODO* gitignored).\n\n67 specs, 0 rubocop offenses. Full existing suite (1896 examples)\nstill passes.",
"is_bot": false,
"headline": "feat(signature): add W3C XML Signature foundation",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b8fbce800c7f33fb28ff3d9cdaada3dfc26bf82",
"body": "The metanorma/ci reusable workflow gates rubygems publish behind a separate repository_dispatch (do-release) run when its gated input is true (the upstream default). moxml release.yml never passed gated, so every workflow_dispatch only bumped and tagged, requiring a follow-up do-release dispatch to \n[…]\n, tags, and publishes. Selecting gated=true preserves the conservative two-step path for low-confidence releases. repository_dispatch (do-release) is unaffected: upstream short-circuits on event_name.",
"is_bot": false,
"headline": "ci(release): default workflow_dispatch to one-step publish",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T23:48:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f37d4675a9e3fa5b50a14c8addc3ce0dd49b23e",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.25",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-06-26T14:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d32450f0a2645d53e221376f1e702ac30111b26b",
"body": "- Align hash literal keys/assignment in vendor:compile task\n- Add desc to spec:opal task alias and use new hash syntax\n- Replace select+is_a? with grep(Moxml::Element) in opal_oga_features_spec\n- Use double-quoted strings in opal_oga_features_spec\n- Replace match(/item/) with include('item') in node_functions_spec\n- Exclude opal_oga_adapter_spec and platform_spec from RSpec/SpecFilePathFormat",
"is_bot": false,
"headline": "style: clear remaining rubocop offenses",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3af958923e509902789a134eaac25392760e987",
"body": "Bundler does not always build native extensions for path-source gems\nduring 'bundle install'. Under CRuby this surfaces as a LoadError on\nrequire \"oga\" (which loads libll via ll/setup.rb).\n\nAdd a vendor:compile task that runs each fork's ext/c/extconf.rb and\ncopies the resulting .bundle into lib/. Wire it into rake.yml and all\nthree round-trip.yml jobs.",
"is_bot": false,
"headline": "ci: explicitly compile liboga/libll for path-source forks",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02ef21efe88650e5083184ce6ff6e7ec53314b65",
"body": "The previous guard only protected the top-level :spec task definition.\nThe nested namespace :spec block defines :unit, :adapter, :integration,\n:consistency, :examples, and :performance tasks via RSpec::Core::RakeTask,\nwhich still fails in CI before bundle install:\n\n NameError: uninitialized constant RSpec\n\nWrap the whole namespace in 'if defined?(RSpec)' so vendor:prepare\nloads cleanly with only rake + bundler available.",
"is_bot": false,
"headline": "ci: wrap spec task namespace in if defined?(RSpec) guard",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba735d04b4657ce74915bcbce957414583dbd44",
"body": "…file\n\nTwo follow-ups to the previous CI fix:\n\n1. Bump actions/checkout from v4 to v6 across rake, round-trip, and\n docs workflows. opal.yml already used v6.\n\n2. The Rakefile loads rspec/core/rake_task and rubocop/rake_task at\n top level. In CI, `rake vendor:prepare` runs BEFORE `bundle\n insta\n[…]\nror so vendor:prepare\n works in a bare environment. The :spec and :rubocop tasks are\n defined only when their gems are present, which matches the\n existing pattern used for opal/rspec/rake_task.",
"is_bot": false,
"headline": "ci: bump actions/checkout to v6; guard rspec/rubocop requires in Rake…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f31286c74fa98c849b1bc4e1991023155ad97d50",
"body": "PR #91 switched the Gemfile to path-source oga and ruby-ll forks. The\nopal workflow was updated at the same time, but rake.yml and\nround-trip.yml were not — they still use bundler-cache: true with a\nplain checkout, so bundle install fails with:\n Could not find gem 'oga' in source at `vendor/opal-og\n[…]\n\n gitignored lexer/parser outputs (.rb from ruby-ll, .c from ragel)\n that each fork's extconf.rb requires.\n* bundler-cache: false — path-source gems cannot be cached before\n vendor:prepare has run.",
"is_bot": false,
"headline": "ci: checkout submodules + run vendor:prepare in rake and round-trip",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d6733617e75c4f14d1e2691896cf93f65ef4862",
"body": "The existing Opal coverage exercised the adapter contract and a small\nsmoke set (parse, serialize, single entity decode). The following\nfeature areas had no Opal coverage and could regress silently:\n\n* Builder DSL — the block form, method_missing form, trailing-underscore\n tag stripping, and namesp\n[…]\ns' `Moxml.with_config` around hooks cannot flip the adapter\nunder test. Under CRuby the file is a no-op (`if: RUBY_ENGINE == \"opal\"`).\n\nOpal suite now: 91 examples, 0 failures, 1 pending (was 70/0/1).",
"is_bot": false,
"headline": "test: add opal_oga_features_spec.rb for builder/declaration/round-trip",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "640813f97e21c8a0be82d467f3cc803055d9a738",
"body": "Moxml's default Opal adapter is :oga (set in af93f71), but upstream\noga and ruby-ll ship no pure-Ruby fallbacks for their C extensions\n(liboga's XML lexer, libll's parser driver). Without those fallbacks\nthe adapter cannot run on Opal at all.\n\nThis wires in the Opal-compatible forks maintained at lu\n[…]\nemfile wiring, Opal\n load-path configuration, and how to verify via rake spec:opal.\n\nVerified:\n* CRuby suite: 3786 examples, 0 failures, 194 pending.\n* Opal suite: 70 examples, 0 failures, 1 pending.",
"is_bot": false,
"headline": "build: vendor lutaml/opal-oga and lutaml/opal-ruby-ll forks",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "11eebfc9fcf990ea36f87f6ad0d1bf7e75eade62",
"body": "spec_helper.rb referenced :oga / :nokogiri by literal symbol, so\nupdating the default in Moxml::Config required three edits instead\nof one. Replace the literals with Moxml::Config::OPAL_DEFAULT_ADAPTER\nand DEFAULT_ADAPTER — Config is now the single source of truth.\n\nAdd two invariant guards so a fut\n[…]\nsolidate the six top-level RSpec.describe blocks in platform_spec\ninto a single top-level describe with nested describe \".method\" /\ndescribe \"CONSTANT\" sub-groups, per the one-top-level-describe rule.",
"is_bot": false,
"headline": "test: derive defaults from Config constants; consolidate platform_spec",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-25T11:31:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dba3bd7477ab03b64ad398fc2e98cce6045c9479",
"body": "Commit d7dcebc reverted PR #71's :oga default to :rexml and shipped a\npile of REXML-on-Opal compat shims to make it work. Those shims are\nreactive patches for an unsustainable direction — every new REXML\nrelease risks introducing another regex or string API that doesn't\ntranspile to JavaScript.\n\nOga\n[…]\n flag groups).\n\n:rexml remains in OPAL_AVAILABLE_ADAPTERS so anyone who explicitly\nopts into Moxml.new(:rexml) under Opal can still use it — the compat\noverrides stay in place for that path.\n\nRefs #89",
"is_bot": false,
"headline": "fix: restore :oga as the Opal default adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-25T11:31:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16bc325281147a1ed6de2e714e6b8bb6ac59bab2",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.24",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-06-02T07:15:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99094cdf450d9d96f40db193ad2a6f5151d66197",
"body": "…dling\n\n- Replace all require_relative with autoload throughout library\n- Eliminate respond_to? in favor of is_a? type checks (~30 instances)\n- Replace send-based dispatch with explicit case statements\n- Fix with_config to use public API instead of instance_variable_set\n- Fix Declaration#remove to p\n[…]\napper tag\n- Clean up XPath engine: remove dead code, add on_neq handler\n- Ensure Opal loads autoloaded dependencies explicitly in Rakefile\n- Add specs for all new features and fix existing test issues",
"is_bot": false,
"headline": "refactor: autoload, eliminate forbidden patterns, fix declaration han…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-02T07:13:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37eae10eb819e7ac7679cd763d3b2e58ff09be52",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.23",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-06-01T03:32:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9084067742a0a77b7a9a960dd4a4affae98bda1",
"body": ".bundle/config was accidentally re-tracked in 4ad3a2a (rubocop\nauto-correct). It should not be committed because CI steps\n(gh-rubygems-setup-action, ruby/setup-ruby) modify it at runtime,\ncausing gem bump to abort with 'Uncommitted changes found.'",
"is_bot": false,
"headline": "fix: stop tracking .bundle/config",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-01T03:30:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cc5b11ec2a3b1c7525986fbc5231d10053c62e5",
"body": "…rmat\n\nGenerate declaration string directly instead of relying on Oga's native\nto_xml which adds a trailing space before ?>.",
"is_bot": false,
"headline": "fix: Oga declaration serialization — no trailing space, consistent fo…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "752b90c9ed34e175d4c6a0954f409a49b8d8f73e",
"body": "Simplify serialize to output declaration from attachment first, then\ndoctype, then children. Eliminates ordering issues where declaration\nappeared after root element.",
"is_bot": false,
"headline": "fix: Oga adapter stores declaration in attachments only, no child node",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:23:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b26fbec823bc97b8fc32fcf80b95f71cf176339f",
"body": "…hild\n\nPrepend declaration from attachment data during serialize instead of\nrelying on PI child node (which appeared after root element).",
"is_bot": false,
"headline": "fix: Nokogiri adapter stores declaration in attachments only, no PI c…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:13:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdaab7f2a72fc39e52cb43d92ec6d6c952aeec1f",
"body": "- Document#add_child always uses adapter.add_child for declarations\n (not add_previous_sibling), so adapter-specific handling fires\n- Nokogiri: suppress native declaration when custom one is stored\n in attachments (prevents duplicates)\n- Ox: don't add declaration PI as child node; attrs stored in document\n (prevents duplicate PI in output)",
"is_bot": false,
"headline": "fix: declaration handling across adapters",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:06:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87fd875d67e1f8b098bb20c994df2ccf5c878028",
"body": "Oga::XML::NodeSet#index does not accept a block — use each_with_index\nto find the root element position.",
"is_bot": false,
"headline": "fix: use each_with_index for Oga NodeSet compatibility",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:52:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b5f540b343eeb90696484cd512df73eccfc29a5",
"body": "Parallel fix to Ox adapter — ensures doctype appears before root\nin serialized output.",
"is_bot": false,
"headline": "fix: position doctype before root element in Oga adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6934ae2a2f4607265903e6fec3a78931955f565",
"body": "- create_native_doctype now uses SYSTEM format when public_id is nil\n- add_child positions doctype before root element in document\n- Fixes doctype output ordering for Ox adapter",
"is_bot": false,
"headline": "fix: Ox doctype creation and positioning",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf8b00235757abe27fb83c4edfa1c83a3c816703",
"body": "- Ox adapter set_root now replaces only the root element, not all children\n- Document#add_child now allows Doctype nodes after root element exists\n- Fixes doctype serialization for Ox adapter",
"is_bot": false,
"headline": "fix: preserve doctype when setting root element in Ox adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e387cef3d61277106645c86b6005d53e4ec184f",
"body": null,
"is_bot": false,
"headline": "feat: add public preprocess_entities and restore_entities API",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:17:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ad3a2a9c83054a94086cc7c89cbb851437cde14",
"body": "Auto-corrected 785 offenses, 0 remaining. Updated .rubocop_todo.yml\nto reflect current codebase state.",
"is_bot": false,
"headline": "style: rubocop -A --auto-gen-config across entire repo",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T10:12:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74a5f4144d4adafb6fa079aa577d5bca25b96ada",
"body": "- Config validation specs: accepts LF/CRLF, rejects nil/invalid/bare-CR/empty\n- New shared example 'Moxml Line Ending' exercised by all 6 adapters:\n LF default, CRLF config, per-call override, LF override wins,\n idempotent re-serialization, element structure round-trip\n- Remove duplicate line ending specs from node_spec.rb (now covered\n by cross-adapter shared examples)",
"is_bot": false,
"headline": "spec: add line ending validation specs and cross-adapter shared examples",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T09:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba56f9b94394128b4d1b21e64a35a5eb1b3b653d",
"body": "…nd defensive conversion\n\n- Add VALID_LINE_ENDINGS constant and validated setter to Config\n (rejects nil, arbitrary strings, bare CR — prevents crashes and\n corrupted output)\n- Remove unused line_ending from Context#default_options (parse path\n — no adapter reads this option; line_ending is serialization-only)\n- Use \\r?\\n regex in apply_line_ending for idempotent conversion\n (prevents double-conversion if adapter ever produces CRLF)\n- Update entity_registry_opal_data.rb comment header",
"is_bot": false,
"headline": "fix: harden line ending support with validation, dead code removal, a…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T09:57:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3905b34d92d85ad95496229f032a27c26ac6cf7a",
"body": "Add default_line_ending config to Moxml::Config with LINE_ENDING_LF and\nLINE_ENDING_CRLF constants. Node#to_xml applies the configured line\nending when serializing to XML. Context threads line_ending through\ndefault_options. Specs cover default LF, config CRLF, per-call override,\nand identity cases.",
"is_bot": false,
"headline": "Add configurable line ending support (LF/CRLF) for XML serialization",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-28T15:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a56a6c39eb30b62cfa9a2ff1d893a60ae77349eb",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.22",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-25T15:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7dcebcd155e44f5e018671a095cbb5490805d8d",
"body": "Architecture audit:\n- Fix typos, DRY violations, OCP violations, deprecation warnings\n- Resolve ReDoS polynomial regex in add_newlines_to_xml\n\nOpal (Ruby-to-JavaScript) compatibility:\n- Add REXML compat overrides for Opal runtime (String, Encoding, StringIO)\n- Override baseparser.rb with JS-compatib\n[…]\n Add opal_smoke_spec.rb covering parse, serialize, build, CDATA, comments, PIs, namespaces\n- Add opal_spec.rb for NativeAttachment sidecar registry\n- Add platform_spec.rb for Opal adapter availability",
"is_bot": false,
"headline": "fix: architecture audit improvements and Opal CI support",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-25T15:42:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6717650724c83b0dfbe4398369b4cc1b12b2d018",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.21",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-25T11:42:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5335aac7848d6260d4af44d3ea006cfabdff96f7",
"body": "* fix performance hotspots for libxml\n\n* use native parser\n\n* code refactoring and increase threshold\n\n* reduce threshold for ci",
"is_bot": false,
"headline": "Fixed performance issues for libxml (#86)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-05-25T11:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b4380f475b56e16cdb7c63478a25811b44709ae",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.20",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-03T13:28:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d87c4f1ae5f14a19b1f309ca2ef4b863556b2435",
"body": "…alization\n\n- Use escape_xml_text() in serialize early return for CustomizedOx::Text\n to prevent emitting unescaped < > & characters in XML output\n- Remove alias_method :inspect, :to_s from Moxml::Text and\n CustomizedOx::Text to preserve diagnostic debugging output\n- Use value accessor instead of \n[…]\nlue instance variable access\n in CustomizedOx::Text#to_s\n- Add tests for XML escaping, to_s cross-adapter consistency\n- Document Text#to_s in node API consistency guide\n- Rubocop -A --auto-gen-config",
"is_bot": false,
"headline": "fix(:ox adapter): proper XML escaping and encapsulation for Text seri…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-03T13:26:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0758daf2d2ce1617cca84bd38b2e9e436f4dc2bf",
"body": "Under the :ox adapter, Moxml::Text#to_xml emitted an Ox `mode=\"object\"`\nmarshalling blob (`<o c=\"…CustomizedOx::Text\"><s a=\"@value\">…</s>…</o>`)\ninstead of the text value. Moxml::Text#to_s and string interpolation\nreturned `\"#<Moxml::Text:0xaddr>\"`. The :nokogiri adapter is unaffected.\n\nCause: Moxml\n[…]\nAdapter::CustomizedOx::Text: same #to_s/#inspect overrides\n for direct interpolation of the native node.\n\nRefs: lutaml/moxml#81\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(:ox adapter): emit Text node value, not Ox object marshalling",
"author_name": "Nick Nicholas",
"author_login": "opoudjis",
"committed_at": "2026-05-03T13:26:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce08eae2a38d4ba0a2c71f5d5bfbc8b5b119ba78",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.19",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-01T10:56:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0af82499d67dcccc3f3c4fa39d673340f2b4102b",
"body": null,
"is_bot": false,
"headline": "docs: document runtime default adapter detection in README",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-30T07:51:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edd6996828b92ad67020dcb45232681c05b3f717",
"body": "The previous commit (e94961e) introduced runtime adapter detection but\nused ||= for memoization in Config.default_adapter. This meant that\nonce the class-level @default_adapter was set (even implicitly by a\nfirst call), it could never revert to runtime detection. Changing to ||\npreserves explicit ov\n[…]\nes (from the recent whitespace preservation\n fix in aa58888)\n- Pass indent: 0 in lazy_parse round-trip test for consistent output\n- Adjust libxml benchmark thresholds to reflect actual measured times",
"is_bot": false,
"headline": "fix: correct default_adapter memoization and clean up tests",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-30T07:51:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a8895a264c798360a3896350077e92bce56a53b",
"body": null,
"is_bot": false,
"headline": "test native attachment backends by source structure",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e548db340aa0f44f8b359daa55e59dccbae3bd2",
"body": null,
"is_bot": false,
"headline": "copilot suggested change",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1a3fbe16f7fe856b05a6d81e9bed938db7bfa16",
"body": null,
"is_bot": false,
"headline": "Refactor NativeAttachment runtime backend loading",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df0f0bdd32637d2d739b8230b044cabebc188cdd",
"body": null,
"is_bot": false,
"headline": "test: OPAL specific changes",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99d0d527a1112a6386c12cce8b78527d370100c5",
"body": null,
"is_bot": false,
"headline": "refactor: load Opal-specific NativeAttachment via runtime compatibility",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0190d733802c78f718fac550bf32940f1cfdffa",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.18",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-27T01:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e94961eb95a77d16ffc802da14980bf1b47dbc5b",
"body": null,
"is_bot": false,
"headline": "Detect default XML adapter by runtime and availability",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-24T12:47:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa588884adf15dedba6adf278bd265b8d963c5c4",
"body": "Remove whitespace-only text node filtering from Nokogiri, REXML, OGA,\nand LibXML adapters children() methods. Whitespace text nodes between\nelements (e.g. the space in FigureA.1) were being silently discarded,\ncausing content loss.\n\nFixes OGA TypeError (NodeSet to Array conversion) and adds document-level\nwhitespace filtering for OGA to match other adapters. Updates affected\nintegration tests for the new behavior and adds dedicated whitespace\npreservation tests.",
"is_bot": false,
"headline": "fix: preserve whitespace text nodes in children() across adapters",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-24T07:28:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82f1a2bc8725b030de0e562895928fd99936b849",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.17",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-24T07:17:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68a76a8965b3bdbe77afe365bbf2c3d44ea4917d",
"body": "* add consistent in_scope_namespaces api for all adapters",
"is_bot": false,
"headline": "Added consistent `in_scope_namespaces` API for all adapters (#75)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-23T15:00:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d84a822bb3b7ff69e77a33110d6e8e96d3c7fba",
"body": "* fix xml entities handling for all adapters",
"is_bot": false,
"headline": "Fix: XML entities handling for all adapters (#70)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-23T11:18:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22b91d6e70c6b6b0784a58cfcd8e5b67f76b1b13",
"body": "- Add EntityReference node tests across 4 adapters (nokogiri, oga, ox, rexml)\n covering creation, serialization, tree integration, and name validation\n- Add entity restoration integration tests for standard and non-standard\n entities via DocumentBuilder (oga, rexml)\n- Add EntityRegistry tests for standard_entity?, should_restore?,\n and restorable_codepoints methods\n- Add builder DSL entity_reference test\n- Add scripts/ to .gitignore\n- Regenerate .rubocop_todo.yml",
"is_bot": false,
"headline": "feat: add entity reference test coverage and cleanup hygiene",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-23T09:38:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530a3f5e7fc645cef835cc22238d0d656e4ec017",
"body": "- Add @* attribute wildcard support in XPath parser (//book/@*)\n- Fix //* element wildcard count by using node() in // expansion\n per XPath spec, and including document node in descendant-or-self\n- Fix CDATA ]]> escaping in Ox/HeadedOx serialization (splits across\n CDATA sections per XML spec)\n- O\n[…]\nA marker scans\n- Unskip 11 tests: CDATA escaping (Ox+HeadedOx), XPath wildcards,\n text content from nested XPath, wildcard element counting\n- Add utility scripts (format_xml.rb, pretty_format_xml.rb)",
"is_bot": false,
"headline": "feat: XPath @/* wildcard, CDATA ]]> escaping, and test unskips",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-23T02:35:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "00deb14cadb9052253dd607a3ae90b8d36c8b892",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.16",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-22T23:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb24a61accb36009f3e138c7c3da4209a0893575",
"body": "* add method_missing dsl to builder\n\n* remove trailing underscores just like nokogiri dsl",
"is_bot": false,
"headline": "add method_missing dsl to builder (#67)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-22T14:19:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb59f6e5884822da0c4f1a21435d5e940b794330",
"body": "- Fix HeadedOx xpath() to return native arrays matching adapter contract,\n eliminating NodeSet double-wrapping that broke nested XPath queries\n- Add entity_restoration_mode config (:strict/:lenient) for entity handling\n- Fix has_call_node? in XPath compiler to check ast.value for function names\n- Fix round-trip test element traversal to use type-based filtering\n- Add xmllint-based fixture validation rake task\n- Enable 7 previously-skipped tests (HeadedOx nested XPath, position/last, id())",
"is_bot": false,
"headline": "fix: resolve HeadedOx double-wrapping and multiple TODO items",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T12:29:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0583d3e841c69102cb5c0c6b4b87524c34cdd7b",
"body": "… registry\n\nIntroduce NativeAttachment, a GC-safe sidecar registry that stores\nMoxml state on native adapter objects via object_id keys with finalizer\ncleanup. This replaces the anti-pattern of using instance_variable_set/get\non foreign library objects (Nokogiri, REXML, Oga, Ox, LibXML nodes).\n\nKey \n[…]\nwriter :parent_node replacing ivar access across classes\n- Full EntityReference integration tests passing across all adapters\n- Doc link updates (HEADED_OX_LIMITATIONS.md → headed-ox-limitations.adoc)",
"is_bot": false,
"headline": "feat: replace instance_variable_get/set with NativeAttachment sidecar…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T12:29:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8492fab1aa7a1cd125f59363da6f0eaf8083c172",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.15",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-22T01:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "496a8337a02e2433e5d4484c8c9eeb60d3b72c90",
"body": null,
"is_bot": false,
"headline": "chore: rubocop",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b428399dd2fbdf77d1a45c82ac742eebd18214a",
"body": null,
"is_bot": false,
"headline": "fix: correct type checks for Declaration/Instruct/Attribute wrappers",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebaf2ce1438332e5e8e57fae52ca5c4dcfdcda18",
"body": "Replace duck-typed respond_to? guards with is_a? type checks for\nclearer intent and better type safety. LibXML adapter uses\n::LibXML::XML::Node checks (all node types share this base class),\nOga adapter accounts for Document not inheriting from Node, and\nOx adapter checks against ::Ox::Element/Node/Instruct directly.\n\nAlso includes rubocop -A --auto-gen-config formatting fixes.",
"is_bot": false,
"headline": "refactor: replace respond_to? with explicit type checks across adapters",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "580187fd6e3b410bea07afe8ee9daba0531c1607",
"body": "…en restoration\n\n- Add EntityReference wrapper classes for Ox, REXML, and LibXML adapters\n- Ox: dual-path serialization (fast Ox.dump vs custom walker when EntityReferences present)\n- Oga: marker-tagged text nodes with @moxml_entity_name for EntityReference detection\n- REXML: instance variable stora\n[…]\nrestorable_codepoints\n- DocumentBuilder: model-driven restoration with Set-based O(1) codepoint guard and buffered text\n- Refactor adapter requires to use autoload for all customized module namespaces",
"is_bot": false,
"headline": "feat: add EntityReference support across all adapters with model-driv…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48b3f18db0d6de5a696b2a28199fd06c202900ab",
"body": null,
"is_bot": false,
"headline": "docs: update namespace_uri_mode references to namespace_validation_mode",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59de8bbe75a96a48c5822d11c6f2b20eff550005",
"body": "- Regenerate .rubocop_todo.yml\n- Auto-fix linting offenses (47 corrected)\n- Update README: rename namespace_uri_mode to namespace_validation_mode\n and document prefix validation behavior",
"is_bot": false,
"headline": "chore: rubocop -A --auto-gen-config and update docs",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf3e96b2aea49a8a602e61f341c5a9dbe931c1a4",
"body": "- Generalize namespace validation to cover both URI and prefix\n- In lenient mode, skip prefix validation (let underlying parser decide)\n- Rename NAMESPACE_URI_MODES to NAMESPACE_VALIDATION_MODES\n- Add specs for validate_prefix NCName compliance including dots",
"is_bot": false,
"headline": "refactor: rename namespace_uri_mode to namespace_validation_mode",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf049c160967bf848df19b6285dac64008c4b5db",
"body": "Covers valid prefixes with dots (e.g. abc_1.0, xmlns_1.0),\ndigits in prefixed positions, and rejection of invalid prefixes.",
"is_bot": false,
"headline": "spec: add validate_prefix tests for NCName compliance",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0614a8ab99d183f1513b5e69162ad085c4685611",
"body": "…EXML perf\n\n- NodeSet#[]: support negative indices (e.g. nodes[-1])\n- Attribute#remove: invalidate parent element attributes cache\n- Ox/HeadedOx: assign parent refs after parse, validate single root\n- REXML: use deep_clone instead of Marshal for Element duplication\n- Skip Nokogiri empty-namespace XPath test (known limitation)",
"is_bot": false,
"headline": "fix: NodeSet negative index, Attribute cache, Ox parent validation, R…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T11:35:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "346fb834e633dda6f216de7b05f441f51811038b",
"body": "XML NCName spec permits dots in namespace prefixes but the regex\nwas too restrictive, rejecting valid prefixes like xmlns_1.0.",
"is_bot": false,
"headline": "fix: allow dots in namespace prefix validation",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T09:28:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8164c9b2a9ffd486e9394a57550f7a75b8e98d4b",
"body": "- Fix Oga doctype SYSTEM/PUBLIC identifier mapping (Oga stores SYSTEM\n identifier in public_id, not system_id)\n- Add Builder#doc alias for document accessor\n- Add doctype parsing specs for all adapters",
"is_bot": false,
"headline": "fix: Oga doctype SYSTEM identifier mapping and Builder doc alias",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T03:05:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "757590405b8305ea94e0c054f0e6be92bb763608",
"body": "Replace DocumentBuilder (eager tree construction) with Document.new\n(lazy wrapping) in HeadedOx adapter, matching the Ox adapter approach.\nThe XPath engine already wraps nodes on-demand via Moxml::Node.wrap,\nso the eager DocumentBuilder was pure overhead.\n\nImpact on 100-element parse:\n Before: 1764\n[…]\nlity - nearly quadratic)\n After: 1001 allocations (2.0x scalability - linear)\n\nAlso tighten HeadedOx allocation guard thresholds from the bloated\nDocumentBuilder budgets to match Ox-level budgets.",
"is_bot": false,
"headline": "perf: migrate HeadedOx to lazy parse - 176x allocation reduction",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T02:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba265694c31f348d263276b8352cbcf89fd6cc50",
"body": "Add CI-gated allocation benchmarks covering Nokogiri, Ox, HeadedOx, and\nOGA adapters. These guards run in every CI build (no :performance tag)\nand enforce per-adapter allocation budgets for:\n\n- Parse allocations (100/50 element documents)\n- Cache hit verification (children, attributes, iteration)\n- \n[…]\non guard failure (allocation hotspots)\n- Extend lazy_parse, node_cache, node_set_cache specs to all adapters\n- Remove :performance tag from correctness tests (now run in CI)\n- Add stackprof to Gemfile",
"is_bot": false,
"headline": "test: add comprehensive cross-adapter allocation guards",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T02:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bebb68e7c1233072a617c1ad986d514781d2f521",
"body": "…caching\n\nTODOs 1-5 from the moxml performance plan:\n\n1. Lazy parse (TODO 1): Replace eager DocumentBuilder with\n Document.new(native, ctx). Nodes are wrapped on access, not during\n parse. ~36,640 allocations eliminated per 200-element doc.\n\n2. Cache Node#children (TODO 2): Memoize children Node\n[…]\nrs via\nNodeSet, propagate invalidation upward on remove/replace/sibling ops.\n\nAll adapters (Nokogiri, Ox, Oga, REXML) pass the shared contract tests.\n73 performance specs pass under RUN_PERFORMANCE=1.",
"is_bot": false,
"headline": "perf: eliminate ~40K allocations per XML parse via lazy wrapping and …",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T02:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e8259480dba45624e1f75bf9acc5879fadf7061",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.14",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-20T12:06:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4691d63c253beedf81a34a9c2d9185bb2015b83",
"body": "Co-authored-by: suleman-uzair <suleman@workytical.com>",
"is_bot": false,
"headline": "Fix Oga serialization buffers for Opal compatibility (#57)",
"author_name": "Suleman Uzair",
"author_login": "suleman-uzair",
"committed_at": "2026-04-20T11:01:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cf1c57926a0e800ff3087f578aefa58f5098a9c",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.13",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-20T07:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "582b3497084afb24246a310b5798759c56589270",
"body": "- Pass owner_doc to create_native_* methods so Nokogiri creates nodes\n in the target document instead of a fresh document, avoiding silent\n failures when reparenting nodes across documents\n- Add Element#in_scope_namespaces to return all namespaces visible at\n an element including inherited ones (wraps Nokogiri namespace_scopes)\n- Update all adapter signatures to accept optional owner_doc parameter",
"is_bot": false,
"headline": "feat: same-document node creation and in_scope_namespaces",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-20T07:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f296751c355831c817c3d85fbd27ef5b6ed28bb",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.12",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-16T06:29:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07bb30378f186f4df4470c4a3d06623200f18ba9",
"body": "Nokogiri's native inner_text correctly excludes XML comments, but\nMoxml's Nokogiri adapter was including comment content in inner_text.\nThis affected downstream libraries like lutaml-model where comment\ntext leaked into mixed content text nodes.\n\nFix: Use explicit reject { |c| c.element? || c.comment? } instead\nof node.children - node.element_children.\n\nIncludes integration specs for comment exclusion from inner_text.",
"is_bot": false,
"headline": "fix: exclude comment nodes from inner_text in Nokogiri adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-16T04:46:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "609aa7618cf0d56a6f94fb0cdf4e89121602883e",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.11",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-16T01:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b125d046df873668f7d35df3339329ed9254d5bc",
"body": "* remove strict uri validation for namespace uri\n\n* add rfc3986 validation and specs from w3c\n\n* add lenient mode for xml namespace uri\n\n* add license and update docs",
"is_bot": false,
"headline": "remove strict uri validation for namespace uri (#55)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-14T07:41:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0735faa98be2bb4403d4b5aecb3e2bf4fe8a10bd",
"body": "fix oga entities parsing and serializing",
"is_bot": false,
"headline": "Merge pull request #53 from lutaml/oga-entities-fix",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-10T07:30:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69c37594cde772be2aa88dcce7b146e249a716a1",
"body": null,
"is_bot": false,
"headline": "fix copilot comments",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-09T07:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2fa2f787ca2b97e2b228f9ba0ae5f498de562bf",
"body": null,
"is_bot": false,
"headline": "fix oga entities parsing and serializing",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-09T06:34:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0995c0219015bf59e2cd5324a6492103dbe54a4",
"body": null,
"is_bot": false,
"headline": "fix: proper handling of Oga entity read and write",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T09:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70f8359b75470a35f9659f408f979a261429aecf",
"body": "Issue: lutaml/moxml#48\n\nOga's XML parser only supports the 5 standard XML entities\n(&, <, >, ", '). HTML entities like are\nsilently dropped during parsing.\n\nSolution: Pre-process XML to convert known named entities to\nnumeric character references before parsing. Oga correc\n[…]\nes (amp, lt, gt, quot, apos) are preserved as-is\n- Known W3C entities from EntityRegistry are converted to numeric form\n\nTests: Round-trip tests pass between Nokogiri and Oga (40 examples, 0 failures)",
"is_bot": false,
"headline": "Fix Oga adapter dropping HTML entities like ",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T04:39:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6e73f1e5b50d514f6254dc1fd042d605d498251d",
"body": null,
"is_bot": false,
"headline": "docs: update round-trip CI references to nokogiri-ox job name",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73cbe5bda09a3d0d66441c7ddfeb9dc224b1428b",
"body": "Use atomic group (?>) to prevent polynomial backtracking when\nmatching XML declarations. Without it, [^>]* can cause exponential\nbacktracking on certain input patterns.",
"is_bot": false,
"headline": "fix: prevent ReDoS in REXML encoding extraction regex",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34c5dd016e11248901bd934cb681a5ec3379cbc1",
"body": "- ruby-versions: Ruby 3.1/3.2/3.3/3.4/4.0 × categories, nokogiri+oga\n- nokogiri-ox: Ruby 3.3/4.0 × categories, nokogiri+ox (experimental)\n- nokogiri-rexml: Ruby 3.3/4.0 × categories, nokogiri+rexml (50KB limit, experimental)",
"is_bot": false,
"headline": "ci: merge round-trip workflows into single file",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faccb917fa43c3a2af7a664a2f5bafd9783d3a5a",
"body": null,
"is_bot": false,
"headline": "chore: gha",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0672d4476dbe84c2993611ab366fb726ea71de3",
"body": "…d-trip.yml)",
"is_bot": false,
"headline": "ci: override rake workflow to skip consistency tests (handled by roun…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d04eaf4ff1e6fa7b1d1cda4596eae99b88469dbb",
"body": null,
"is_bot": false,
"headline": "ci: limit REXML to 50KB fixtures max (REXML exponentially slow)",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ce22ba60e3e486691997649d0e28bf1a622c140",
"body": "…large fixtures)",
"is_bot": false,
"headline": "ci: mark nokogiri-rexml job as continue-on-error (REXML too slow for …",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10f0e525bd6bf171006e3a95cc5ae2c039a738ff",
"body": null,
"is_bot": false,
"headline": "ci: use nokogiri as central tester for ox+rexml in round-trip-slow",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 172,
"latest_release_at": "2026-07-22T11:21:42Z",
"latest_release_tag": "v0.1.26",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 17,
"days_since_latest_release": 0,
"mean_days_between_releases": 9.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "moxml",
"exists": true,
"license": "BSD-2-Clause",
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/moxml",
"is_deprecated": false,
"latest_version": "0.1.26",
"repository_url": "https://github.com/lutaml/moxml",
"versions_count": 26,
"total_downloads": 207900,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2024-10-30T10:39:19.374000Z",
"latest_published_at": "2026-07-22T11:21:48.599000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 3,
"stars": 2,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2024-11-05",
"count": 2
},
{
"date": "2026-05-03",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 60594,
"source_files_sampled": 299,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile",
"docs/Gemfile"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 28,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [
{
"name": "benchmark",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "benchmark-ips",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "get_process_mem",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "libxml-ruby",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 5.0"
},
{
"name": "nokogiri",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.18"
},
{
"name": "openssl",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 3.0"
},
{
"name": "ox",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 2.14"
},
{
"name": "rake",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rexml",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "oga",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "ruby-ll",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop-performance",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop-rake",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop-rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "simplecov",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "stackprof",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "tempfile",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "sys-proctable",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "opal",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.8"
},
{
"name": "opal-rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.0"
},
{
"name": "opal-sprockets",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "benchmark",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "benchmark-ips",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "get_process_mem",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "libxml-ruby",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "nokogiri",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "oga",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "opal",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "opal-rspec",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "opal-sprockets",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "openssl",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "ox",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rake",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rexml",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rspec",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-performance",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-rake",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-rspec",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "ruby-ll",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "stackprof",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "tempfile",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "asciidoctor",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll-asciidoc",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll-seo-tag",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll-sitemap",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "just-the-docs",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 28,
"direct_count": 22,
"indirect_count": 6
}
},
"maintainership": {
"issues": {
"open_prs": 4,
"merged_prs": 52,
"open_issues": 6,
"closed_ratio": 0.824,
"closed_issues": 28,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ronaldtse",
"commits": 132,
"avatar_url": "https://avatars.githubusercontent.com/u/11865?v=4"
},
{
"type": "User",
"login": "kraft001",
"commits": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/983140?v=4"
},
{
"type": "User",
"login": "HassanAkbar",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/5301572?v=4"
},
{
"type": "User",
"login": "kwkwan",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/29566367?v=4"
},
{
"type": "User",
"login": "opoudjis",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1911039?v=4"
},
{
"type": "User",
"login": "suleman-uzair",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/96812483?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.635
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"dependent-tests.yml",
"docs.yml",
"opal.yml",
"rake.yml",
"release.yml",
"round-trip.yml"
],
"has_docs_dir": true,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/16 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 28 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "948532a670fc7218d22dee216f316348ee733a9f",
"ran_at": "2026-07-22T11:30:11Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T11:23:52Z",
"oldest_open_prs": [
{
"number": 39,
"created_at": "2025-11-18T01:38:02Z",
"last_comment_at": "2025-11-24T07:01:42Z",
"last_comment_author": "copilot-swe-agent"
},
{
"number": 42,
"created_at": "2025-11-24T07:01:40Z",
"last_comment_at": "2025-11-27T11:33:22Z",
"last_comment_author": "copilot-swe-agent"
},
{
"number": 47,
"created_at": "2025-11-26T04:42:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 83,
"created_at": "2026-05-20T14:44:18Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T11:06:37Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 3,
"created_at": "2024-10-30T12:41:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 23,
"created_at": "2025-05-15T18:27:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2025-05-15T21:30:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2025-05-16T09:51:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2025-11-17T09:17:08Z",
"last_comment_at": "2026-02-14T08:09:21Z",
"last_comment_author": "ronaldtse"
},
{
"number": 45,
"created_at": "2025-11-24T11:34:47Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/lutaml/moxml",
"host": "github.com",
"name": "moxml",
"owner": "lutaml"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 48,
"vitality": 81,
"community": 35,
"governance": 64,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 172,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "172 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 172
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 26,
"latest_release_tag": "v0.1.26",
"releases_from_tags": true,
"days_since_latest_release": 0,
"mean_days_between_releases": 9.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 35,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 6,
"inputs": {
"forks": 3,
"stars": 2,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 69,
"inputs": {
"packages": [
"moxml"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 207900,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "207,900 downloads all-time across rubygems",
"points": 55.3,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 207900,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.635
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 64% of commits",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 64
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 28 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"merged_prs": 52,
"open_issues": 6,
"closed_issues": 28,
"issue_closed_ratio": 0.824,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "82% of issues closed",
"points": 38.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 82
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "52/55 decided PRs merged",
"points": 36.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 52,
"decided": 55
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"followers": 2,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "lutaml",
"public_repos": 66,
"account_age_days": 2223
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of lutaml",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "lutaml"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "66 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 66
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"moxml"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "26 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 26
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 28 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 40,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.78,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "78 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 78,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 60594,
"source_files_sampled": 299,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/299 source files over 60KB",
"points": 54.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 299,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T11:30:25.078414Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/lutaml/moxml.svg",
"full_name": "lutaml/moxml",
"license_state": "custom",
"license_spdx": null
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit lutaml/moxml teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.26.0 — vollständige Methodik · Metriken-Wiki.
