Öffentliches RegisterKritisch
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-25 12:27 UTC
pgaskin / cmus
Fork of cmus/cmus for development, packaging, and testing PRs. For Fedora packages, see pgaskin/rpms.
pgaskin/cmus erreicht einen Gesundheitsindex von 17 von 100 und liegt damit im Bereich Kritisch. Am stärksten schneidet es bei Vitality (51/100) ab, am schwächsten bei Community & Adoption (14/100). Zuletzt vor 3 Tagen aktualisiert. 3 Mitwirkende tragen den Großteil der jüngsten Arbeit.
17
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
17
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Die Richtlinie für Hochrisikojurisdiktionen wendet einen Multiplikator von 50 % auf die gewichtete Gesamtgesundheit an und begrenzt sie auf die Obergrenze Gefährdet von 49.
Eigentümerschaft
Patrick GaskinPersönliches Konto
291 Follower99 öffentliche Reposseit Aug. 2015
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
51
Entwicklungsaktivität
64Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 3 Tagen |
| 13.2/36 | Commit-Rhythmus — 19/52 Wochen mit Commits |
| 14.5/18 | Commit-Volumen — 40 Commits im letzten Jahr |
| 0/10 | OpenSSF Scorecard: Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Verwendete Eingangsdaten
| commits_last_year | 40 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 19 |
Release-Disziplin
32Gefährdet
Wie die Bewertung erfolgt
| 16.2/27 | Liefert Releases aus — 52 Versions-Tags (keine GitHub-Releases) |
| 0/36 | Release-Aktualität — letztes Release vor 2.734 Tagen |
| 12.6/27 | Release-Rhythmus — ein Release etwa alle 252,7 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 52 |
| latest_release_tag | v2.8.0 |
| releases_from_tags | ja |
| days_since_latest_release | 2.734 |
| mean_days_between_releases | 252,7 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
14
Popularität & Verbreitung
5Kritisch
Wie die Bewertung erfolgt
| 4.9/60 | Stars — 3 Stars |
| 0/25 | Forks — 1 Forks |
| 0/15 | Watcher — 1 Watcher |
Verwendete Eingangsdaten
| forks | 1 |
| stars | 3 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
25Kritisch
Wie die Bewertung erfolgt
| 0/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (GPL-2.0) |
| 0/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | nein |
| has_license | nein |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
49
Wie die Bewertung erfolgt
| 36/54 | Bus-Faktor — 3 Beitragende decken die Hälfte aller Commits ab |
| 15.6/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 30 % der Commits |
| 13.5/13.5 | Breite der Beitragenden — 100 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 16 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 3 |
| contributors_sampled | 100 |
| top_contributor_share | 0,305 |
Reaktionsfähigkeit bei Issues & PRs
1Kritisch
Wie die Bewertung erfolgt
| 0/46.8 | Issue-Lösungsquote — keine Issues oder keine Daten |
| 0/38.3 | PR-Annahme — keine entschiedenen Pull Requests oder keine Daten |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote, PR-Annahme. Die verbleibenden Gewichte wurden renormalisiert.
Eigentümerschaft & Trägerschaft
66Mittel
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 17.7/25 | Reichweite des Inhabers — 291 Follower von pgaskin |
| 25/25 | Kontohistorie — 99 öffentliche Repos, Kontoalter ca. 10 Jahre |
Verwendete Eingangsdaten
| followers | 291 |
| owner_type | User |
| is_verified | — |
| owner_login | pgaskin |
| public_repos | 99 |
| account_age_days | 3.990 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
32
Engineering-Praktiken
30Gefährdet
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 1 Workflow(s) |
| 0/24 | Tests vorhanden |
| 0/16 | Linter-Konfiguration |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — keine Daten |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | nein |
| has_editorconfig | nein |
| has_linter_config | nein |
| has_precommit_config | nein |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.
Dokumentation
35Gefährdet
Wie die Bewertung erfolgt
| 0/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 0/15 | Dokumentations-/Homepage-Site |
| 0/10 | Repository-Beschreibung |
| 10/10 | Topics — 4 Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | cmus, package, experimental, no-delete-fork |
| has_wiki | nein |
| homepage | — |
| has_readme | nein |
| has_docs_dir | ja |
| has_description | nein |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
16
Sicherheitslage
16Kritisch
Jurisdiktionsrisiko-Warnung
Exposition gegenüber einer Hochrisikojurisdiktion erkannt
1 Profile wichtiger MitwirkenderRussiaSicherheit und Gesamtbewertung: Obergrenze Gefährdet
Grundlage sind selbst veröffentlichte öffentliche Profilstandorte. Dieses Governance-Signal bestimmt weder Nationalität, Staatsangehörigkeit, Absicht, Sanktionsstatus noch persönliche Vertrauenswürdigkeit.
So wird Jurisdiktionsexposition bewertetWie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — keine Daten |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 16 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 0/7.5 | Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3,3 |
| high_risk_jurisdiction_cap | 49 |
| high_risk_jurisdiction_multiplier | 50 |
| security_posture_after_multiplier | 16 |
| security_posture_before_jurisdiction | 33 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert. Die Richtlinie für Hochrisikojurisdiktionen wendet einen Multiplikator von 50 % an und begrenzt die Sicherheitslage auf die Obergrenze Gefährdet von 49.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
43
AI-Agentenkontext & Leitlinien
35Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 35.2/40 | Lesbare Commit-Historie — 66 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,66 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Wie die Bewertung erfolgt
| 18/18 | Bootstrap mit einem Befehl — Makefile |
| 0/22 | Automatisierte Tests |
| 0/11 | Lint-/Format-Konfiguration |
| 11/11 | Statische Typprüfung — C (statisch typisiert) |
| 0/10 | Reproduzierbare Umgebung |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100 |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | nein |
| lockfiles | — |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | Makefile |
| has_devcontainer | nein |
| has_linter_config | nein |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
99Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — C (statisch typisiert) |
| 54.4/55 | Handhabbare Dateigrößen — 2/172 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | C |
| largest_source_bytes | 67.658 |
| source_files_sampled | 172 |
| oversized_source_files | 2 |
Eckdaten
3GitHub-Sterne
100Mitwirkende
40Commits, letzte 12 Monate
3Tage seit letztem Push
52Releases
3Bus-Faktor
0offene Issues
—Paket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Community profile unavailable
Weitere Details
OpenSSF Scorecard 3.3 / 10
3.3Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| k. A. | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 16 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| k. A. | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| k. A. | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Alle Abhängigkeiten 0
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 0 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
| Registry | Paket | Version | Beziehung |
|---|
Abhängigkeits-Advisories nicht bewertet
Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies to assess
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"cmus",
"package",
"experimental",
"no-delete-fork"
],
"is_fork": true,
"size_kb": 6839,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 1297168,
"Shell": 32763,
"Python": 6168,
"Makefile": 12260
},
"pushed_at": "2026-07-21T22:13:58Z",
"created_at": "2019-02-10T17:05:15Z",
"owner_type": "User",
"updated_at": "2026-05-03T03:36:16Z",
"description": "Fork of cmus/cmus for development, packaging, and testing PRs. For Fedora packages, see pgaskin/rpms.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-2.0",
"default_branch": "exp",
"license_spdx_raw": "GPL-2.0",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "https://pgaskin.net",
"name": "Patrick Gaskin",
"type": "User",
"login": "pgaskin",
"company": null,
"location": "Ottawa, Canada",
"followers": 291,
"avatar_url": "https://avatars.githubusercontent.com/u/13909717?v=4",
"created_at": "2015-08-21T21:08:51Z",
"is_verified": null,
"public_repos": 99,
"account_age_days": 3990
},
"license": {
"state": "standard",
"spdx_id": "GPL-2.0",
"raw_spdx": "GPL-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v2.8.0",
"kind": "minor",
"published_at": "2019-01-29T09:09:08Z"
},
{
"tag": "v2.8.0-rc0",
"kind": "prerelease",
"published_at": "2016-11-20T12:29:46Z"
},
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2015-07-13T10:00:56Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2015-06-29T09:56:08Z"
},
{
"tag": "v2.6.2",
"kind": "patch",
"published_at": "2015-06-29T10:48:03Z"
},
{
"tag": "v2.6.1",
"kind": "patch",
"published_at": "2015-06-29T10:11:39Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2014-08-11T07:48:28Z"
},
{
"tag": "v2.6.0-rc0",
"kind": "prerelease",
"published_at": "2014-05-14T07:59:42Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2014-05-14T09:50:55Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2012-11-07T08:46:17Z"
},
{
"tag": "v2.4.3",
"kind": "patch",
"published_at": "2011-11-30T08:57:20Z"
},
{
"tag": "v2.4.2",
"kind": "patch",
"published_at": "2011-07-24T09:42:22Z"
},
{
"tag": "v2.4.1",
"kind": "patch",
"published_at": "2011-05-26T18:47:33Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2011-04-23T20:35:36Z"
},
{
"tag": "v2.4.0-rc0",
"kind": "prerelease",
"published_at": "2011-04-10T12:17:40Z"
},
{
"tag": "v2.3.5",
"kind": "patch",
"published_at": "2011-04-10T11:30:07Z"
},
{
"tag": "v2.3.4",
"kind": "patch",
"published_at": "2011-02-10T16:23:55Z"
},
{
"tag": "v2.3.3",
"kind": "patch",
"published_at": "2010-06-17T16:34:29Z"
},
{
"tag": "v2.3.2",
"kind": "patch",
"published_at": "2010-04-15T14:48:36Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2010-03-13T20:46:52Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2010-03-02T15:37:18Z"
},
{
"tag": "v2.3.0-rc1",
"kind": "prerelease",
"published_at": "2010-02-22T13:33:56Z"
},
{
"tag": "v2.3.0-rc0",
"kind": "prerelease",
"published_at": "2010-02-14T20:20:01Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2007-07-27T14:45:56Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2006-12-21T18:03:31Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2006-08-20T12:23:08Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2006-06-18T13:52:26Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2006-04-20T15:43:40Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2006-04-20T11:17:26Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2006-02-23T18:59:28Z"
},
{
"tag": "v1.6.8",
"kind": "patch",
"published_at": "2006-01-11T16:43:07Z"
},
{
"tag": "v1.6.7",
"kind": "patch",
"published_at": "2006-01-02T17:14:51Z"
},
{
"tag": "v1.6.6",
"kind": "patch",
"published_at": "2006-01-01T13:29:06Z"
},
{
"tag": "v1.6.5",
"kind": "patch",
"published_at": "2005-12-05T16:36:15Z"
},
{
"tag": "v1.6.4",
"kind": "patch",
"published_at": "2005-11-18T16:44:26Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2005-11-03T22:50:15Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2005-10-21T18:19:49Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2005-10-15T18:03:14Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2005-10-13T17:22:54Z"
},
{
"tag": "v1.5.8",
"kind": "patch",
"published_at": "2005-09-28T14:44:36Z"
},
{
"tag": "v1.5.7",
"kind": "patch",
"published_at": "2005-09-20T12:06:24Z"
},
{
"tag": "v1.5.6",
"kind": "patch",
"published_at": "2005-09-01T17:30:37Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2005-08-24T13:54:50Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2005-08-20T15:36:12Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2005-08-17T19:17:25Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2005-08-02T13:32:34Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2005-07-13T15:33:54Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2005-07-01T13:01:32Z"
},
{
"tag": "v1.4.6",
"kind": "patch",
"published_at": "2005-06-18T21:28:35Z"
},
{
"tag": "v1.4.5",
"kind": "patch",
"published_at": "2005-06-11T16:09:35Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2005-06-07T16:14:24Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2005-06-07T13:46:44Z"
}
],
"recent_commits": [
{
"oid": "a6b82eb2e38e24f8a7ceda5a2e0b191480513944",
"body": "* cmus/master (cmus/cmus@d335e90abd5d000eef128debcb979d852f0f6b7f)\n* gavtroy/system_wcwidth_fix (gavtroy/cmus@07f690188f1109ddcbf350263f20f7722d743248)\n* Endg4meZer0/master (Endg4meZer0/cmus@41e255716f62ff2e1659ac8f4d6b8507c6ca7179)\n* jdholtz/clear-marked-playlist (jdholtz/cmus@f538a3a50ec3d9858200a2424bc01b7dc4305716)\n* LunaPresent/master (LunaPresent/cmus@b2814bc3eb0d0c728b0c13d91b14caf544a357be)\n* jchook/playlists-are-sacred (jchook/cmus@e83c1e161171cc4482830381e094fcb11312668e)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2026-05-03T03:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07f690188f1109ddcbf350263f20f7722d743248",
"body": "Fixes #1497.",
"is_bot": false,
"headline": "Define _XOPEN_SOURCE so wcwidth can be found",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2026-03-30T04:04:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d335e90abd5d000eef128debcb979d852f0f6b7f",
"body": "When compiling with GCC 15.2.1, the compiler issues a maybe-uninitialized warning with\nmessage: rb_parent_color may be used uninitialized. This is happening because the\nRB_CLEAR_NODE macro currently expands to rb_set_parent(node, node), which in turn\nattempts to read the node->rb_parent_color. In ce\n[…]\nthe RB_CLEAR_NODE macro\nto directly set the parent pointer without reading the potential garbage color value.\nThe new RB_CLEAR_NODE macro implementation is similar to what is used in the Linux kernel.",
"is_bot": false,
"headline": "Fix compiler warning about uninitialized rb_parent_color (#1484)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2026-01-10T12:00:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "058e69ab0e1b77ea48fa5d64cf4ed1459955489b",
"body": null,
"is_bot": false,
"headline": "Fix memory leak in bass.c (#1477)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2026-01-05T12:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ec703afc3e76d22bb63141871fd008e1e3a9764",
"body": null,
"is_bot": false,
"headline": "Standardise in using xmalloc (#1478)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2026-01-02T09:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56446f70e86445caa96f6f4f0188f175fc1fd9a0",
"body": null,
"is_bot": false,
"headline": "Fix stringop-truncation warning (#1473)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2025-12-12T07:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a7f1ffcfa4293dd7e0264242a751fab5ea4224",
"body": "When compiling cmus I get multiple warnings around unterminated string\ninitialization. This patch fixes the warnings by using the nonstring\nattribute.",
"is_bot": false,
"headline": "Fix unterminated-string-initialization warnings (#1472)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2025-12-11T07:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e83c1e161171cc4482830381e094fcb11312668e",
"body": "Playlists are important user-supplied data.\n\nPreviously, if playlist entries lived on an external hard drive, and\nthe drive was unplugged, cmus would cause data loss by deleting the\nentries from the playlist.\n\nThis change fixes that case, ensuring that when users add files to a\nplaylist, they are never deleted automatically by cmus.",
"is_bot": false,
"headline": "Do not delete missing files from playlists.",
"author_name": "Wes Roberts",
"author_login": "jchook",
"committed_at": "2025-11-24T01:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced892aea2e006b7514ba64b1d40a05e42be40dd",
"body": null,
"is_bot": false,
"headline": "Fix compilation failure (#1467)",
"author_name": "ARRiMEKi OTOMANi",
"author_login": "4rrimeki",
"committed_at": "2025-11-13T15:59:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4252dbd72f58b09ddbcfe39f98894f2bab1b59b",
"body": null,
"is_bot": false,
"headline": "ip/flac: remove debug output spam",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-11-04T18:40:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36b9071baca13d57a97940661a8b3624a11038e2",
"body": "This polling is there since the initial commit, but there is no apparent\nreason for it to exist. Sometimes it would wait infinitely and block\nthe main thread and hang the whole player.",
"is_bot": false,
"headline": "op/alsa: remove polling for events before pause",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-11-04T18:40:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c81a0ba7c7b3d7e4d98a9d120f41d37cf0a6b4d9",
"body": null,
"is_bot": false,
"headline": "Make sure to not try freeing an uninitialized pointer",
"author_name": "Andrea Guzzo",
"author_login": "xant",
"committed_at": "2025-11-04T18:36:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32e0cde0a3c8d082d71342577e33c380219d25a6",
"body": "The modern gcc default is -std=gnu23 which the mp4v2 headers are not\ncompatible with. This was only a problem for the check, since for the\nactual compile we add EXTRA_CFLAGS that set -std=gnu11 or -std=c11\nanyway.",
"is_bot": false,
"headline": "Fix libmp4v2 check",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2025-10-08T05:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c9c109bd754f30d215480510bf9bdfeab323652",
"body": "av_rescale() accepts int64_t, so offset was implicitly converted\nand rounded down to an integer number of seconds which has been causing\nmore samples to be discarded to reach the wanted time.",
"is_bot": false,
"headline": "ip/ffmpeg: optimize seeking (less sample discards)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-10-05T13:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4612c2de44db8c1a8b380222d9db777a3eb5e7ef",
"body": "%lld expects long long but int64_t may be long. And GCC warns about that",
"is_bot": false,
"headline": "ip/ffmpeg: treat compiler warning about %lld",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-10-05T13:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "226a046acf3108ce1fd48958a9c53c03711c9498",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: add alsamixer's volume scale",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-27T07:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b85a2237afc29e645c3f3e12145c5379524c95d",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: setting mixer control like in aplay",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-27T07:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3157b788a7eeb8d1a02d6dad2c05fde6f900f4aa",
"body": "If a stream specifies its bitrate in an \"icy-br\" header, we can use it\nto populate the bitrate in the track info. Without this fix, no bitrate\nwas displayed for a stream, either in the track info or the status bar.\n\nAlso changed a print format specifier from %ld to %lld to fix a warning\nas the former is too small for the int64_t type.",
"is_bot": false,
"headline": "Fix for missing Icecast streaming bitrate display.",
"author_name": "Ken McLeod",
"author_login": "thecloudexpanse",
"committed_at": "2025-09-21T13:40:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0788a0759399a61324b2373e4300d970c0a51b66",
"body": null,
"is_bot": false,
"headline": "cue: handle adding a directory with cue files",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c09f3ccf5ad37d8201b3cc865154ef23e7a9284d",
"body": null,
"is_bot": false,
"headline": "Fix ptr_array_unique always removing 1st element",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390c8a15e768f3e5c4a9ec7438b1efe28421bad0",
"body": "Imagine we have a directory with these files:\ntest.cue\ntest.wav\ncd.wav\n\ntest.cue content:\nFILE \"cd.wav\" WAVE\n TRACK 01 AUDIO\n\nWhen we do `:add test.wav`, cd.wav is added to the library instead of\ntest.wav. Obviously it wasn't user's intention.\n\nI think if the user wants to add a Cue file, then they would just write\n`:add test.cue`. This 'associated cue' mechanism seems obsolete.",
"is_bot": false,
"headline": "cue: remove 'associated cue' mechanism",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "123a8d34d36996896f5794306718fdbd04922168",
"body": "Now Cue file can be added like `:add file.cue`",
"is_bot": false,
"headline": "cue: enable adding cue file directly (not by url)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75fdd9b0e87c264e1c40c2b3c14adeeb4e8184b6",
"body": null,
"is_bot": false,
"headline": "cue: add replaygain and genre to track info",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ada493b6abc582ca907220c1620bfede9eed7996",
"body": "When cue sheet is written for a lossy audio source, ip_duration may\nreturn an estimation. We shouldn't take it as end_offset.",
"is_bot": false,
"headline": "cue: more precise time tracking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ff092774b3f10661fbcea0d35f340fcdb47235f",
"body": "PREGAP and POSTGAP directives tell how much silence (that is not present\nin the audio file) to add to the track.\nThis definitely should be handled in input plugin instead of the parser.",
"is_bot": false,
"headline": "cue: fix incorrect track timing calculation",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48a630f1f38ce397de989a3a249d9628f9902643",
"body": "1. Multiple FILEs are now allowed.\nMultiple FILE directives with same file name are treated as different files.\n\n2. Track numbers may not start at 1 and may not be sequential, but still\nmust be ordered (this is just to make program simpler).\nExample:\n3, 6, 7 - correct;\n3, 2, 7 - incorrect;\n1, 1 - incorrect.",
"is_bot": false,
"headline": "cue: multiple FILEs; non sequential TRACK numbers",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "139dcdef09cb9524425b9af32f176cff7415318f",
"body": null,
"is_bot": false,
"headline": "cue: fix memory leak",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4dffacb9188dbd1004fd289de4e7661e08aa415",
"body": "* cmus/master (cmus/cmus@d73726dece599cf2b8d5103b20eb1a5e0095bc43)\n* 0ax1/fix-locale-macos (0ax1/cmus@3bbb60845156e5504f264879453643d4d7aae08d)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d38672fc53534503b6958c74960670851\n[…]\n3a50ec3d9858200a2424bc01b7dc4305716)\n* LunaPresent/master (LunaPresent/cmus@b2814bc3eb0d0c728b0c13d91b14caf544a357be)\n* hunkyburrito/master (hunkyburrito/cmus@9c5643d2a0e5a7c99dbb8e689b3dae72614c737b)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-09-03T03:47:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d38672fc53534503b6958c749606708515148a7d",
"body": null,
"is_bot": false,
"headline": "cue: handle adding a directory with cue files",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0275c978ce75eb1f09976cadfa6ebfd6f27ca8b0",
"body": null,
"is_bot": false,
"headline": "Fix ptr_array_unique always removing 1st element",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2683792c8ff2c84253b779cbe3d01c3fce693886",
"body": "Imagine we have a directory with these files:\ntest.cue\ntest.wav\ncd.wav\n\ntest.cue content:\nFILE \"cd.wav\" WAVE\n TRACK 01 AUDIO\n\nWhen we do `:add test.wav`, cd.wav is added to the library instead of\ntest.wav. Obviously it wasn't user's intention.\n\nI think if the user wants to add a Cue file, then they would just write\n`:add test.cue`. This 'associated cue' mechanism seems obsolete.",
"is_bot": false,
"headline": "cue: remove 'associated cue' mechanism",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a11ac322707352b712ea2a0f4281cce753ebf02c",
"body": "Now Cue file can be added like `:add file.cue`",
"is_bot": false,
"headline": "cue: enable adding cue file directly (not by url)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bddbe4f1b6bcda308b40f150996c6cfbd3a6fa12",
"body": null,
"is_bot": false,
"headline": "cue: add replaygain and genre to track info",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a8fc03f496fbfd9a9294ee1e17348801a96b495",
"body": "When cue sheet is written for a lossy audio source, ip_duration may\nreturn an estimation. We shouldn't take it as end_offset.",
"is_bot": false,
"headline": "cue: more precise time tracking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9fd8cfabd46dd295e8eef63218d87dbb3b567f6",
"body": "PREGAP and POSTGAP directives tell how much silence (that is not present\nin the audio file) to add to the track.\nThis definitely should be handled in input plugin instead of the parser.",
"is_bot": false,
"headline": "cue: fix incorrect track timing calculation",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dc4d529474d35349c1d7267ebea1bc84c79e8b3",
"body": "1. Multiple FILEs are now allowed.\nMultiple FILE directives with same file name are treated as different files.\n\n2. Track numbers may not start at 1 and may not be sequential, but still\nmust be ordered (this is just to make program simpler).\nExample:\n3, 6, 7 - correct;\n3, 2, 7 - incorrect;\n1, 1 - incorrect.",
"is_bot": false,
"headline": "cue: multiple FILEs; non sequential TRACK numbers",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a04985c27b13cbd338d8cabac3e1608a94dbe2",
"body": null,
"is_bot": false,
"headline": "cue: fix memory leak",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d73726dece599cf2b8d5103b20eb1a5e0095bc43",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: change sample format conversions",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3810797e4afb4272d2623a8745a15eb32fdcd9a3",
"body": "avcodec_close() can be safely removed because avcodec_free_context()\nis its replacement since 2016. See ffmpeg commit 2ef6dab0a79\n\nBuilds with v3.3.9 v4.0.6 v6.1.3 v7.1.1 v8.0",
"is_bot": false,
"headline": "ip/ffmpeg: fix building for ffmpeg 8.0",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee60ef049e977632b05e827b450953b9d0dc13a8",
"body": "Previously ffmpeg_read()'s while loop was kinda leaking into\nffmpeg_get_frame(), now it doesn't.",
"is_bot": false,
"headline": "ip/ffmpeg: improve readability",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cebaa7b5b9793c47bc7cba3181e729e5bcceebd",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: don't process empty frames",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30304f4780051ea72fb2787d8c95ec688914aace",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: better frame skipping logic",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb7965415d298903ff0a0f0c1d909ca46698bc7b",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: reset swr_frame_start when seeking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e109c45a3be88517984e6a4ec4843884560cdd95",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: remember swr_frame's capacity",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bb25cf3eabbdb7911ea8144778ab43f76c58b10",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: flush swresample buffer when seeking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9d3c684387cb73d75fdc074a8388c0209987680",
"body": "To prevent segfault in ip_setup() because channels=0, validate ip_data->sf\nafter opening ip.",
"is_bot": false,
"headline": "Validate sample format in ip_open()",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef58a5677c39c2627f66dcc31507f741f6ed2094",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: major refactor",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24b157cca699443d23664f126430f28fa98f7c24",
"body": "ffmpeg download page states that v4.0.6 has\n- libavutil 56.14.100\n- libavcodec 58.18.100\n- libavformat 58.12.100\n(https://ffmpeg.org/olddownload.html)\n\nAfter removing all checks for versions lower than these, the plugin\nstill compiles with v3.3.9 headers.\n\nAfter all, why be better with compatibility than developers themselves?",
"is_bot": false,
"headline": "ip/ffmpeg: remove excessive version checks",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "308877bc1107a85fcde4ada027c1e5f6a6e4473b",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: skip samples only when needed",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb038ed977df26624fd409d8819b947c2b490064",
"body": "av_seek_frame() and avformat_seek_file() seek to nearest \"keyframe\". For\ncodecs like, for example, ape this means that seeking will be very off\n(5 seconds or more). So what we do is:\n1. seek to nearest \"keyframe\" before the desired time,\n2. discard some frames to approach the desired time.",
"is_bot": false,
"headline": "ip/ffmpeg: more precise seeking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8c4df8fc407e45463e09628ba2b60850650e8dd",
"body": "Drain stream before closing. Do it only if the stream is playing to\navoid \"hang at quit while paused\" issue.",
"is_bot": false,
"headline": "pulse: drain stream before closing",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac5098cdd23c4d0f1f9eb94517beeecbb8ab03ab",
"body": null,
"is_bot": false,
"headline": "pulse: more linux-like code style",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50d3ce26f406ef83788e227ebb7d8ded0cf48ecd",
"body": null,
"is_bot": false,
"headline": "pulse: style changes; more error checks",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78a1e2ccad95c331f1832d25072f0a14143cc26f",
"body": null,
"is_bot": false,
"headline": "pulse: add APPLICATION_ID prop",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f012fd50c6a7161f774f89a90044a4a00b70bd20",
"body": null,
"is_bot": false,
"headline": "pulse: rearrange functions",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1445956f1c0e20de88e7149cc917eed7aed9584",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: use alsa-lib provided parse_sid()",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T07:09:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e70770f1ad3a07310079edfbd8202b38f14b6d",
"body": null,
"is_bot": false,
"headline": "op/alsa: add -lm",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T15:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a87a66492475e8f81f632a7be47878ede7cdf3c",
"body": "I think that is not very intuitive. Maybe it would've been better to keep\nfalling back to 'Master' but at least set the config variable accordingly,\nIDK; it might be annoying though.",
"is_bot": false,
"headline": "op/mixer_alsa: don't use 'Master' as a fallback",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T01:54:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de855cdf5f6b733ca946e729015832d47a6a1578",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: add alsamixer's volume scale",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T01:48:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8162fd8c157824b4cb5e5b0a014077d303b50581",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: setting mixer control like in aplay",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T01:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dd9997c61dfbbbd35c16da4485dfcf3bdd6931",
"body": null,
"is_bot": false,
"headline": "Do not call op_select_any() after startup",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-08-20T19:32:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffb9bfee888dd79c8272e25fe9e6bb1ec10660fa",
"body": null,
"is_bot": false,
"headline": "Try to fallback to any plugin upon failure to init output plugin",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-08-20T19:32:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8c8541c1499e051ce691bc40f875f35325c8ff0",
"body": "(Or if we add/remove tracks to the current \"window\", although that's\nrather uncommon.)",
"is_bot": false,
"headline": "Respect scroll_offset setting when resizing window",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2025-08-20T17:48:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "382ce81254450d3cb189cf1982cacd7e01896567",
"body": null,
"is_bot": false,
"headline": "add sort by duration",
"author_name": "hunkyburrito",
"author_login": "hunkyburrito",
"committed_at": "2025-08-20T17:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a542e85a3b7c779571e62e769a8df2434d21210a",
"body": "* cmus/master (cmus/cmus@d33870808d007a6456ddbc9fcc65fcdd08332e28)\n* 0ax1/fix-locale-macos (0ax1/cmus@3bbb60845156e5504f264879453643d4d7aae08d)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d15713cce697a43f1e161e56e09b2d7d4\n[…]\n3a50ec3d9858200a2424bc01b7dc4305716)\n* LunaPresent/master (LunaPresent/cmus@b2814bc3eb0d0c728b0c13d91b14caf544a357be)\n* hunkyburrito/master (hunkyburrito/cmus@9c5643d2a0e5a7c99dbb8e689b3dae72614c737b)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-08-06T14:07:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9c5643d2a0e5a7c99dbb8e689b3dae72614c737b",
"body": null,
"is_bot": false,
"headline": "add sort by duration",
"author_name": "hunkyburrito",
"author_login": "hunkyburrito",
"committed_at": "2025-07-30T22:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2814bc3eb0d0c728b0c13d91b14caf544a357be",
"body": null,
"is_bot": false,
"headline": "mpris: set xesam:url tag",
"author_name": "Luna Present",
"author_login": "LunaPresent",
"committed_at": "2025-07-15T14:26:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bbb60845156e5504f264879453643d4d7aae08d",
"body": null,
"is_bot": false,
"headline": "drop core audio from list",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-06-17T09:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7570d3cfd73b3d1d615e8e6bbab8dfcce827d0f3",
"body": "* cmus/master (cmus/cmus@d33870808d007a6456ddbc9fcc65fcdd08332e28)\n* 0ax1/fix-locale-macos (0ax1/cmus@0c638eaa70fd60c73bc6f8a5cd0687aee61cb058)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d15713cce697a43f1e161e56e09b2d7d4\n[…]\nc1b69ba0a6a40ecfa4c9d78d03e887)\n* Endg4meZer0/master (Endg4meZer0/cmus@41e255716f62ff2e1659ac8f4d6b8507c6ca7179)\n* jdholtz/clear-marked-playlist (jdholtz/cmus@f538a3a50ec3d9858200a2424bc01b7dc4305716)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-06-13T14:28:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f538a3a50ec3d9858200a2424bc01b7dc4305716",
"body": null,
"is_bot": false,
"headline": "Clear the marked playlist when focus is in the playlist list",
"author_name": "jdholtz",
"author_login": "jdholtz",
"committed_at": "2025-05-10T19:19:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c638eaa70fd60c73bc6f8a5cd0687aee61cb058",
"body": null,
"is_bot": false,
"headline": "drop obsolete impls from header",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-23T21:26:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb344def2c4445596630a2617b6c332ede3e7664",
"body": "* cmus/master (cmus/cmus@d33870808d007a6456ddbc9fcc65fcdd08332e28)\n* 0ax1/fix-locale-macos (0ax1/cmus@78f585366c391e5732b3cc3c2bf5107d3255133b)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d15713cce697a43f1e161e56e09b2d7d46e572df)\n* ihy123/pulse_fix (ihy123/cmus@c713341575c1b69ba0a6a40ecfa4c9d78d03e887)\n* Endg4meZer0/master (Endg4meZer0/cmus@41e255716f62ff2e1659ac8f4d6b8507c6ca7179)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-04-23T14:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78f585366c391e5732b3cc3c2bf5107d3255133b",
"body": null,
"is_bot": false,
"headline": "clean: invert condition",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T21:04:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1859b1539abd6da188809ba86f66f00ef656b8f",
"body": null,
"is_bot": false,
"headline": "clean: drop 'A'",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T21:02:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82903aba0b895f2d03294488a7452f8f0953f86e",
"body": null,
"is_bot": false,
"headline": "clean: drop unused functions",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T20:56:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ceef387c13601e95561183b6ea5f2893f8fd20c1",
"body": null,
"is_bot": false,
"headline": "ref: diff core foundation check",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T20:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84a5df2a7c5efc271aebf31ebf4d528679ff15e1",
"body": null,
"is_bot": false,
"headline": "fix: local macos error",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-15T19:47:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9034e838609268d940a42e9f7e764323d239aa2",
"body": null,
"is_bot": false,
"headline": "Do not call op_select_any() after startup",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-03-25T20:07:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35a7479831279d768bcfa0a73008a6a0e5a9eee5",
"body": null,
"is_bot": false,
"headline": "Try to fallback to any plugin upon failure to init output plugin",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-03-19T05:39:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41e255716f62ff2e1659ac8f4d6b8507c6ca7179",
"body": null,
"is_bot": false,
"headline": "fix: MPRIS seeked signals reporting old position instead of new",
"author_name": "Endg4me_",
"author_login": "Endg4meZer0",
"committed_at": "2025-03-16T11:17:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d15713cce697a43f1e161e56e09b2d7d46e572df",
"body": null,
"is_bot": false,
"headline": "cue: handle adding a directory with cue files",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beede71d4a24586cbb2aac523e0d145f53eca005",
"body": null,
"is_bot": false,
"headline": "Fix ptr_array_unique always removing 1st element",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d01ecbd266d0652ab4afb1705fac861e7b34618",
"body": "Imagine we have a directory with these files:\ntest.cue\ntest.wav\ncd.wav\n\ntest.cue content:\nFILE \"cd.wav\" WAVE\n TRACK 01 AUDIO\n\nWhen we do `:add test.wav`, cd.wav is added to the library instead of\ntest.wav. Obviously it wasn't user's intention.\n\nI think if the user wants to add a Cue file, then they would just write\n`:add test.cue`. This 'associated cue' mechanism seems obsolete.",
"is_bot": false,
"headline": "cue: remove 'associated cue' mechanism",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113125578db974add3c46f9453710ac4b0629706",
"body": "Now Cue file can be added like `:add file.cue`",
"is_bot": false,
"headline": "cue: enable adding cue file directly (not by url)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77fb7e47698347ae5a86b0c2e4d2af91edf6fa79",
"body": null,
"is_bot": false,
"headline": "cue: add replaygain and genre to track info",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dbcedd47924696b952651138ae7d6aad69bbf44",
"body": "When cue sheet is written for a lossy audio source, ip_duration may\nreturn an estimation. We shouldn't take it as end_offset.",
"is_bot": false,
"headline": "cue: more precise time tracking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6791b0ed6274c5f3e183a840199bba2a6502d82c",
"body": "PREGAP and POSTGAP directives tell how much silence (that is not present\nin the audio file) to add to the track.\nThis definitely should be handled in input plugin instead of the parser.",
"is_bot": false,
"headline": "cue: fix incorrect track timing calculation",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9ee96e3d82431f82607a492fdc7d2480e8190ab",
"body": "1. Multiple FILEs are now allowed.\nMultiple FILE directives with same file name are treated as different files.\n\n2. Track numbers may not start at 1 and may not be sequential, but still\nmust be ordered (this is just to make program simpler).\nExample:\n3, 6, 7 - correct;\n3, 2, 7 - incorrect;\n1, 1 - incorrect.",
"is_bot": false,
"headline": "cue: multiple FILEs; non sequential TRACK numbers",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18af06b985eb4a3b03876f16d84a5115808437e5",
"body": null,
"is_bot": false,
"headline": "cue: fix memory leak",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d33870808d007a6456ddbc9fcc65fcdd08332e28",
"body": "The updated list (including order) is copied directly from the README.\nNo additions. Removals:\n\n- bash-completion (not used)\n- libcue-dev (not used)\n- libroar-dev (no longer available, breaking the CI build)",
"is_bot": false,
"headline": "[CI] Update dependency list to fix ubuntu build setup",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2025-03-16T11:14:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c713341575c1b69ba0a6a40ecfa4c9d78d03e887",
"body": "Drain stream before closing. Do it only if the stream is playing to\navoid \"hang at quit while paused\" issue.",
"is_bot": false,
"headline": "pulse: drain stream before closing",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T17:27:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dd6468552ed8a95549eb6c5f70a41a043b3b85d",
"body": null,
"is_bot": false,
"headline": "pulse: more linux-like code style",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T17:27:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf83e88f77693927a672f125398e96472bf05584",
"body": null,
"is_bot": false,
"headline": "pulse: style changes; more error checks",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eab8cc845d910130b553e4d59ca72dd266346be",
"body": null,
"is_bot": false,
"headline": "pulse: add APPLICATION_ID prop",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4900f9bb06dabb266bcb5921e5f38d6b00ae1779",
"body": null,
"is_bot": false,
"headline": "pulse: rearrange functions",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66ee9c3cab7f2d5b0a72ec9b77f51e7cf46ac4bb",
"body": "It's required for av_strerror.",
"is_bot": false,
"headline": "Check for libavutil pkg-config",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-01-11T07:09:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a15a9e0522d3a8d56dedfbb447d4499c78ceceb1",
"body": null,
"is_bot": false,
"headline": "op/aaudio: Make the requested buffer capacity configurable",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2024-11-29T12:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b96ab56184626d01a3a89ce1647b0488cf22391",
"body": "On some devices (e.g., the Pixel 9 with Android 15), the minimum audio\ndevice latency is low enough that the default buffer capacity selected\nby AAudio is low enough that cmus can't keep up with producing audio.\n\nThis doesn't seem to be an issue on most other devices.\n\nFor reference, the default sel\n[…]\n\ncapacity and burst size of 4000/2000 on the Pixel 9, and 6734/3367 on\nthe Pixel 8. Higher values result in slightly lower CPU usage, but\nmore UI lag. Lower values start running into buffer underruns.",
"is_bot": false,
"headline": "op/aaudio: Ensure the buffer is at least 80ms",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2024-11-29T12:46:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e328d34e28d379997d4bd56b2f63b67f1a993d16",
"body": "* cmus/master (cmus/cmus@58d34cf9db5c29e01a985a48a9b6947855cb6cc9)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2024-10-26T18:22:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58d34cf9db5c29e01a985a48a9b6947855cb6cc9",
"body": null,
"is_bot": false,
"headline": "cmus 2.12.0",
"author_name": "Gregory Petrosyan",
"author_login": "flyingmutant",
"committed_at": "2024-10-26T10:27:42Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 52,
"commits_last_year": 40,
"latest_release_at": "2019-01-29T09:09:08Z",
"latest_release_tag": "v2.8.0",
"releases_from_tags": true,
"days_since_last_push": 3,
"active_weeks_last_year": 19,
"days_since_latest_release": 2734,
"mean_days_between_releases": 252.7
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 1,
"stars": 3,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2020-01-22",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 67658,
"source_files_sampled": 172,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "tihirvon",
"commits": 761,
"avatar_url": "https://avatars.githubusercontent.com/u/484431?v=4"
},
{
"type": "User",
"login": "flyingmutant",
"commits": 424,
"avatar_url": "https://avatars.githubusercontent.com/u/73059?v=4"
},
{
"type": "User",
"login": "pgaskin",
"commits": 349,
"avatar_url": "https://avatars.githubusercontent.com/u/13909717?v=4"
},
{
"type": "User",
"login": "weisslj",
"commits": 275,
"avatar_url": "https://avatars.githubusercontent.com/u/99803?v=4"
},
{
"type": "User",
"login": "mahkoh",
"commits": 193,
"avatar_url": "https://avatars.githubusercontent.com/u/1882250?v=4"
},
{
"type": "User",
"login": "gavtroy",
"commits": 109,
"avatar_url": "https://avatars.githubusercontent.com/u/3988605?v=4"
},
{
"type": "User",
"login": "ihy123",
"commits": 61,
"avatar_url": "https://avatars.githubusercontent.com/u/87945041?v=4"
},
{
"type": "User",
"login": "nefthy",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/218968?v=4"
},
{
"type": "User",
"login": "Wang-Yue",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/889340?v=4"
},
{
"type": "User",
"login": "jolange",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/6584443?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.305
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"build.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 16 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a6b82eb2e38e24f8a7ceda5a2e0b191480513944",
"ran_at": "2026-07-25T12:26:50Z",
"aggregate_score": 3.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-05-03T03:37:41Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pgaskin/cmus",
"host": "github.com",
"name": "cmus",
"owner": "pgaskin"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "jurisdiction_overall_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 17,
"inputs": {
"security": 16,
"vitality": 51,
"community": 14,
"governance": 49,
"engineering": 32,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"weighted_overall_before_jurisdiction": 34,
"overall_after_jurisdiction_multiplier": 17
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 51,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 40,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "40 commits in the last year",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 40
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"releases_count": 52,
"latest_release_tag": "v2.8.0",
"releases_from_tags": true,
"days_since_latest_release": 2734,
"mean_days_between_releases": 252.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "52 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 52
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2734 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2734
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~252.7 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 252.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 83,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 83 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 83
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 14,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 1,
"stars": 3,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 100,
"top_contributor_share": 0.305
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 30% of commits",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 30
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 16 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"followers": 291,
"owner_type": "User",
"is_verified": null,
"owner_login": "pgaskin",
"public_repos": 99,
"account_age_days": 3990
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "291 followers of pgaskin",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 291,
"login": "pgaskin"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "99 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 99
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 32,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"topics": [
"cmus",
"package",
"experimental",
"no-delete-fork"
],
"has_wiki": false,
"homepage": null,
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 16,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "jurisdiction_posture_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 16,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.3,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"security_posture_after_multiplier": 16,
"security_posture_before_jurisdiction": 33
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 16 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "moderate",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 50,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": true,
"exposures": [
{
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "Russia: top_contributor (1)",
"points": 50,
"status": "partial",
"details": [
{
"code": "jurisdiction_exposure",
"params": {
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 43,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.66,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "66 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 66,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 67658,
"source_files_sampled": 172,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/172 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 172,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Community profile unavailable"
],
"report_type": "repository",
"generated_at": "2026-07-25T12:27:08.527465Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pgaskin/cmus.svg",
"full_name": "pgaskin/cmus",
"license_state": "standard",
"license_spdx": "GPL-2.0"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken.