ramonmalcolm10/next-bun-compile erreicht einen Gesundheitsindex von 59 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (81/100) ab, am schwächsten bei Security (36/100). Zuletzt vor 1 Tag aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
59
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
59
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 8 ⇿
0Sterne
8Forks
26Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 6Patch 20
OpenSSF Scorecard 3.6 / 10
3.6Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-25 10:33 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 228,
"has_wiki": true,
"homepage": null,
"languages": {
"Shell": 7999,
"JavaScript": 28032,
"TypeScript": 101888
},
"pushed_at": "2026-07-24T00:47:31Z",
"created_at": "2026-02-20T03:20:03Z",
"owner_type": "User",
"updated_at": "2026-07-24T00:47:33Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "ramonmalcolm10",
"company": null,
"location": null,
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/36176996?v=4",
"created_at": "2018-02-06T00:27:50Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 3091
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-07-19T13:07:12Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-07-08T15:39:21Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-07-07T20:35:29Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2026-07-07T17:48:28Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2026-07-07T14:53:33Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-07-05T02:11:54Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2026-07-03T21:48:04Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-07-03T19:53:54Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-07-03T18:49:56Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-06-24T16:08:23Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-06-14T12:49:50Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-06-14T11:49:34Z"
},
{
"tag": "v0.6.13",
"kind": "patch",
"published_at": "2026-06-14T10:08:55Z"
},
{
"tag": "v0.6.12",
"kind": "patch",
"published_at": "2026-06-11T23:53:52Z"
},
{
"tag": "v0.6.11",
"kind": "patch",
"published_at": "2026-06-11T22:55:49Z"
},
{
"tag": "v0.6.10",
"kind": "patch",
"published_at": "2026-06-11T22:19:54Z"
},
{
"tag": "v0.6.9",
"kind": "patch",
"published_at": "2026-06-11T22:06:06Z"
},
{
"tag": "v0.6.8",
"kind": "patch",
"published_at": "2026-06-11T21:22:16Z"
},
{
"tag": "v0.6.7",
"kind": "patch",
"published_at": "2026-06-11T15:05:17Z"
},
{
"tag": "v0.6.6",
"kind": "patch",
"published_at": "2026-06-11T14:45:54Z"
},
{
"tag": "v0.6.5",
"kind": "patch",
"published_at": "2026-06-11T13:50:20Z"
},
{
"tag": "v0.6.4",
"kind": "patch",
"published_at": "2026-06-11T13:19:57Z"
},
{
"tag": "v0.6.3",
"kind": "patch",
"published_at": "2026-06-11T09:37:35Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2026-05-25T13:39:44Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-03-21T00:26:32Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-03-20T22:15:56Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-03-17T10:28:37Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-02-26T02:02:27Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-02-25T23:51:21Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-02-25T03:34:00Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-02-25T01:44:52Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-02-24T14:53:48Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-02-23T23:52:18Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-02-22T16:58:15Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-02-22T10:52:46Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-02-21T12:57:21Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-02-20T05:11:21Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-02-20T03:44:39Z"
}
],
"recent_commits": [
{
"oid": "68824fd6f2ba6dd8af56a713448f54c5e2674c1d",
"body": "Add out/binaryName options plus NBC_OUT/NBC_BINARY env overrides so callers\ncan place the binary off-root (e.g. dist/app) instead of the hardcoded\n<projectDir>/server. The output directory is created if missing.\n\nThe default stays <projectDir>/server, so existing deploys are unaffected;\na future major will move the default to dist/app. Document both in the docs\nsite's configuration page.",
"is_bot": false,
"headline": "build: allow overriding the compiled binary's output path (#46)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-24T00:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "429c906c637bc0e012869567c134f3879d5f6d26",
"body": "Every routine client disconnect (k8s probes, gateways cutting idle\nstreams, users navigating away) surfaced as\n\"unhandledRejection: Error: aborted\" from Bun's response pump — at\nproduction volume, a log-noise firehose.\n\nCause: on abort, NodeResponseShim._destroy error()'d the response body's\nReadabl\n[…]\n passes unchanged after\nthe fix. The regression suite gains an e2e check — aborted curls against\nthe compiled binary must leave no unhandledRejection in the server log.\n28/28 e2e + 19 unit tests pass.",
"is_bot": false,
"headline": "Tear down aborted responses cleanly instead of erroring the stream (#45)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-19T13:05:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "730e44e8a5f1e20c9fe8175cc32613960dcc9a7a",
"body": "…(#44)\n\nAdd ClientRouter (view transitions) via a Head component override so\nnavigation swaps the changed DOM instead of doing a full-page reload.\nEnabling it also turns on prefetch (prefetchAll, hover strategy) for all\ninternal links, so hovering a link fetches the page before the click.\n\nAlso bumps astro ^6 -> ^7, @astrojs/starlight ^0.40 -> ^0.41, and\nsharp ^0.34 -> ^0.35. No config migration needed — the content collection\nand sidebar were already on the current Starlight APIs.",
"is_bot": false,
"headline": "docs: SPA navigation + prefetch, upgrade to Astro 7 / Starlight 0.41 …",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-10T20:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87dd7e7801a8799300985ca67cb961995c23f565",
"body": "adapterPath: \"next-bun-compile\" (the root default export, shipped in\n0.11.2) is now the single supported form. The /adapter subpath was a\nback-compat alias for configs written against 0.11.0/0.11.1; removing it\nleaves one documented way in. Configs still pointing at\n\"next-bun-compile/adapter\" now fa\n[…]\n rather than the old silent no-op.\n\nAlso clean the outdir before building so stale local artifacts (old\nsplit chunks, the removed cli.js) can't linger — CI already built clean,\nthis makes local match.",
"is_bot": false,
"headline": "Drop the next-bun-compile/adapter subpath export (#43)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-07T20:23:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3d75ffbcfcf8fe17550eb5ca62adec10058c098",
"body": "Point adapterPath at the bare package name — the obvious specifier\neveryone reaches for first. Next loads the module at adapterPath and\nsilently skips the adapter when the default export lacks onBuildComplete\n(no binary, green build), so the root must carry it. The root index now\ndefault-exports the\n[…]\nre now use the bare form. The\nhermetic suite builds through Next's real adapter loader with\nadapterPath: \"next-bun-compile\", so a regressed/missing default export\nfails the suite (no binary produced).",
"is_bot": false,
"headline": "Make \"next-bun-compile\" work as adapterPath (root default export) (#42)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-07T17:44:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "990e88c231280894414d093f47cce729c2f86766",
"body": "…(#41)\n\nTwo production bugs found dogfooding 0.11.0 on a real app:\n\n- With NEXT_DEPLOYMENT_ID set, Next emits internal onMatch header rules\n (x-nextjs-deployment-id skew stamping) including a catch-all /:path*\n source. The routing-rule filter classified them as user response-\n altering rules and \n[…]\nte: main build now runs with NEXT_DEPLOYMENT_ID, fixture\ngains app/icon.svg, plus checks for the skew header on RSC, tier-served\nmetadata content-type, hermetic seeds+module presence, and /404 status.",
"is_bot": false,
"headline": "Fix deploymentId disabling tiers and missing static-metadata outputs …",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-07T14:50:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "70b9d91389a1cd799bbe912ef4b2db40863b53e4",
"body": "BREAKING: the CLI is removed; the build adapter is the only path.\n- adapterPath: \"next-bun-compile/adapter\" (or NEXT_ADAPTER_PATH) makes\n `next build` produce the binary directly — no output: \"standalone\",\n no separate compile step\n- Single Bun.serve runtime with three tiers: static assets and\n f\n[…]\nct end-to-end; docs rewritten for the adapter flow\n\nMeasured vs. v0 CLI baseline (same app): ~11-13x throughput on\ncacheable routes, -35% RSS after boot, first byte ~60ms (lazy Next\nboot), binary +4%.",
"is_bot": false,
"headline": "Rebuild as a Next.js Build Adapter with in-memory serving tiers (#40)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-05T01:46:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f498bbf0f2124b603d0b15b9c357a36602ae970d",
"body": "toVarName built names from the sanitized urlPath truncated to 40 chars\nplus a 6-hex hash. Deep node_modules trees (puppeteer's ~1500 files)\nput thousands of assets behind the same 40-char prefix, and 24 bits of\nhash birthday-collides at that scale — two puppeteer files produced the\nsame identifier and `bun build` failed with \"has already been declared\"\nin assets.generated.js.\n\nNames now embed the asset's index, making them unique by construction.",
"is_bot": false,
"headline": "Fix asset var-name collisions with index-based naming (#39)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-03T21:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6942b7a44121f95859673a0ed61ad71854c89e2",
"body": "Bytecode only covers the statically bundled entry graph. Nearly all\nrequest-path code (SSR chunks, pages, externalized packages) is\nextracted raw JS loaded at runtime, outside bytecode's reach.\n\nMeasured on a demo app (1224 assets), median of 5 alternating warm\nboots: 504ms with bytecode, 474ms with\n[…]\n Cold boot also favors the smaller binary.\n\n--sourcemap stays (3.8 MiB for readable stack traces). Anyone who\nwants bytecode back can pass it as a CLI extra arg — extra args\nappend after the defaults.",
"is_bot": false,
"headline": "Drop --bytecode: +30% binary size for zero startup gain (#38)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-03T19:47:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0dca6abbaf22faed3c0196b1505857e978b416e4",
"body": "…#37)\n\nAsset extraction previously skipped any file that already existed on\ndisk. That let stale files win forever: a crashed half-extraction,\nchunks from a previous build, a pre-placed file, or rewritten chunks\ncarrying an old baseDir after the deploy directory moved were never\nrepaired — the binar\n[…]\nckage.json in fixModuleResolution\n- Clear error when `bun` is missing from PATH\n- Drop stale bun-compile-ctx.json comment, stray doc comments,\n redundant NaN check, and the obsolete \"adapter\" keyword",
"is_bot": false,
"headline": "Manifest-stamped extraction: overwrite stale files, skip warm boots (…",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-07-03T18:47:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "794548558e0ce6f7e2323fc358f2f0bc8ad2e07f",
"body": "…#36)\n\nThe fallback was added in v0.8.0 as a back-compat path for anyone who\nupgraded mid-build with the old adapter ctx file still on disk. In\npractice it's a latent stale-data bug: a leftover bun-compile-ctx.json\nwould be preferred over the live nextConfig in required-server-files.json,\nsilently u\n[…]\n.\n\nrequired-server-files.json is written by every `next build` and contains\nthe full live nextConfig, so it's the sole source of truth.\n\nUpdate generate.test.ts fixtures to write the rsf file instead.",
"is_bot": false,
"headline": "Drop bun-compile-ctx.json fallback — read assetPrefix from rsf only (…",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-24T16:13:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "06b0b66f8554bbc7d0f0eee7a8ba7361c608e20a",
"body": "* Drop the Next adapter, require output: standalone in user config\n\nWiring next-bun-compile via adapterPath caused Turbopack on Next.js\n16.3 canary/preview to skip writing next-server.js.nft.json, which\nthe standalone bundler then crashes on with ENOENT. The Next.js\nadapter API is designed to replac\n[…]\nobs remain — they cover\nnative deps and monorepo layouts at a stable pin.\n\nAlso renamed leftover \"Build adapter\" step label to \"Build next-bun-compile\"\nto match the package no longer being an adapter.",
"is_bot": false,
"headline": "Drop adapter, require output: standalone (unblocks 16.3 canary) (#35)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-24T16:03:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c5b387f2763a2afb975ea896ffec0a6c9d316d7",
"body": "The single-binary deploy story: build the Linux binary in CI, scp it\nto a VPS over SSH, run under systemd. The VPS needs nothing installed\nbut ssh, systemd, and glibc — no node, no bun, no node_modules, no\nDocker.\n\nIncludes:\n\n- `examples/vps-deploy/` — minimal Next.js app + complete deploy\n pipelin\n[…]\nin front for TLS, done.\n\nNot added to CI as an e2e job (would need a real VPS to exercise\nthe SSH/systemd flow). The Next.js build + binary boot path is\nalready covered by the sharp/monorepo e2e jobs.",
"is_bot": false,
"headline": "Add VPS deploy recipe: GitHub Actions → scp → systemd (#34)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T13:13:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2fa92e87454789979c0014ab60399d91cce3e146",
"body": "`extractAssets` was writing ~1000 files serially via\n`await Bun.write` in a for-loop. Switch to a planning pass (collect\ntargets, dedupe parent dirs) followed by `Promise.all` over the\nwrites. ~45% faster cold start on the e2e fixtures:\n\n examples/sharp: 151ms → 83ms\n examples/monorepo: ~140ms \n[…]\nle count\nand mkdir is cheap.\n\nEach write targets a distinct path, so concurrent writes can't race.\nThe `__NBC_BASE__` placeholder substitution path is preserved\nunchanged inside the parallel callback.",
"is_bot": false,
"headline": "Extract embedded assets in parallel at boot (#33)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T12:47:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d59d3cad7833746229f8749b4744b3b921510bcc",
"body": "… (#31)\n\n* Add examples/ directory with Dockerfile recipes; monorepo e2e fixture\n\nPromotes the test/e2e/sharp-app fixture into a user-facing example\nwith a Dockerfile and a proper README, and adds a second example\ncovering bun workspaces monorepos. Both examples double as the e2e\nregression tests in\n[…]\nild location, which\n doesn't have our `fixModuleResolution` shims (those live in the\n standalone, extracted to a different on-disk path at runtime).\n\nBoth fixes are caught by the new e2e jobs in CI.",
"is_bot": false,
"headline": "Add examples/ directory with Dockerfile recipes; monorepo e2e fixture…",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T11:45:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ccfbfe6c55d8e320f8b813427ea9ee8a2ad41c3b",
"body": "* Add build-time pre-flight validator for alias resolutions\n\nWhen `buildCanonicalResolutions` can't find a concrete file for an\nalias or subpath reference, the rewrite skips it and the chunk keeps\nthe mangled name — which throws at runtime when the reference is hit.\nThe user only finds out after dep\n[…]\noints in the hook flow:\n- Alias map redirect (only logs when request changed)\n- Fallback walk success (with resolved file + parent dir)\n- Fallback walk failure (with the original error path preserved)",
"is_bot": false,
"headline": "Add NEXT_BUN_COMPILE_DEBUG=1 resolver hook logging (#30)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T11:44:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ef82d8ae254e2efde35074d1371628390da0b23",
"body": "When `buildCanonicalResolutions` can't find a concrete file for an\nalias or subpath reference, the rewrite skips it and the chunk keeps\nthe mangled name — which throws at runtime when the reference is hit.\nThe user only finds out after deploying.\n\nValidate at build time instead. For every alias + su\n[…]\n verifying exports-map handling\nchose the right variant (.mjs vs .js vs .cjs).\n\nDoesn't fail the build: some references may be in optional code\npaths that never fire at runtime. The warning is enough.",
"is_bot": false,
"headline": "Add build-time pre-flight validator for alias resolutions (#29)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T11:41:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3bfc6878984d8292b1822403e4c6987f68c4feab",
"body": "Astro 6 + Starlight 0.40 documentation site under docs/, deployed\nto GitHub Pages at https://ramonmalcolm10.github.io/next-bun-compile/.\n\nContent covers what's currently documented across READMEs, recipes,\ncommit messages, and the issue/troubleshooting cycles from\ndogfooding:\n\n- Splash homepage with\n[…]\n (mirror the\n examples/ directory)\n\nDeploy workflow runs on push to main when docs/ changes; builds with\nbun and publishes to the github-pages environment.\n\nAdds a docs link to the top of the README.",
"is_bot": false,
"headline": "Add Starlight docs site + GitHub Pages deploy workflow (#32)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T11:37:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6fecc72d9675d5e8e6726e2850e4173dce27e56",
"body": "Unit tests scaffold inputs and assert on transformed outputs, but they\ndon't compile a real binary, boot it, and exercise the externalized-\npackage chain. That gap let v0.6.11→v0.6.12's ESM bypass slip through\nunit tests and only surface in deploy.\n\nAdd test/e2e/sharp-app/ — a minimal Next 16 app wi\n[…]\nhich\n happens when Next.js's trace pulls deps into the app-local node\n modules) were never extracted, leaving runtime requires for\n next/dist/compiled/* etc. unresolvable. Now walks the whole tree.",
"is_bot": false,
"headline": "Add E2E test fixture (sharp) and CI job (#28)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T10:37:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "875ffca9e8f187e8ec2269c7925b81ae907a0b82",
"body": "…(#27)\n\nv0.6.12 rewrote alias references to canonical names on the assumption\nthat bun's ESM resolver would walk node_modules from the chunk\nlocation like a standard Node resolver. It doesn't — bun's compiled-\nbinary ESM resolver has the same node_modules-walk quirk as its CJS\nresolver on some Linux\n[…]\nSM.\n\nThe Module._resolveFilename hook + alias map from v0.6.10/v0.6.11\nremain in place for internal package requires inside extracted\npackages (e.g. sharp/lib/sharp.js doing `require('detect-libc')`).",
"is_bot": false,
"headline": "Rewrite chunks to absolute file paths for both CJS and ESM externals …",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-14T10:08:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76ec882fd63af790119c8b01703c92c9346f5a5c",
"body": "v0.6.11 dropped the build-time chunk rewrite on the assumption that the\nruntime Module._resolveFilename hook handled everything. Field reports\nshow that's only true for CJS — ESM `import()` bypasses Module hooks\nentirely. Turbopack-generated chunks use `await a.y(\"<mangled>/<sub>\")`\nfor externalImpo\n[…]\nical\npackage through its standard `exports` map handling.\n\nThe CJS hook + alias map from v0.6.10/v0.6.11 stays as\nbelt-and-suspenders for any require() that still ends up referencing\nthe mangled name.",
"is_bot": false,
"headline": "Rewrite alias names in chunks for the ESM import() path (#26)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T23:53:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd84415e984c59e9c47abdf86ccc11df0977ae6d",
"body": "…#25)\n\nv0.6.10's Module._resolveFilename hook resolves every package require\nthat bun's compiled-binary resolver fails on — including the chunks'\nown externalized requires when the hook also knows the mangled-alias\nmapping. With the hook in place, the v0.6.9 chunk-rewrite pass\n(canonical-name and ab\n[…]\ned in v0.6.10 takes over.\n\nNet effect: chunks are no longer modified on disk; one mechanism\nhandles both the entry hop (alias redirect) and internal-package\nhops (Node-compatible resolution fallback).",
"is_bot": false,
"headline": "Drop chunk-rewrite machinery, redirect aliases in the resolver hook (…",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T22:55:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75363a0e4ab54234f860a67378e9198f18c5a55a",
"body": "Even with chunks rewritten to absolute file paths (v0.6.9), the compiled\nbinary still hits bun's resolver quirk one hop deeper: once execution\nenters an extracted package, that package's own `require('detect-libc')`\n/ `require('@img/sharp-${platform}/sharp.node')` all hit the same broken\nwalk — bun'\n[…]\nrough detect-libc/colour/semver/@img\ndiscovery cleanly on macOS; the remaining macOS-specific error is sharp's\nown dlopen of the darwin-arm64 native binding, a platform issue\ndistinct from resolution.",
"is_bot": false,
"headline": "Install fallback Module._resolveFilename hook in runtime entry (#24)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T22:19:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4ed650fd2d1bb3cd1d98dcf3cddee50dbc96de9f",
"body": "v0.6.8 rewrote chunk references from `\"<mangled>\"` to `\"<canonical>\"`,\nrelying on bun's compiled-binary resolver to walk node_modules from the\nchunk's on-disk location and find the canonical package. Field reports\nshow that walk doesn't work in some Linux/Docker configurations even\nwhen the canonica\n[…]\nlands the real path, require resolves the canonical file,\nsharp/prettier JS execute. Subsequent failures are package-internal\n(e.g. sharp's native binding load on macOS) — outside the adapter's\nscope.",
"is_bot": false,
"headline": "Rewrite mangled-alias references to absolute file paths (#23)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T22:06:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f3dd9a364d9ef711c00099245405c6cbd540fa52",
"body": "Versions 0.6.3–0.6.7 tried to make `require(\"<mangled>\")` from server\nchunks resolve to a shim package at `.next/node_modules/<mangled>/`.\nEvery variant — symlink, relative require, absolute directory path,\nabsolute file path, with/without main resolution — failed somewhere in\nbun's compiled-binary \n[…]\n` become\n`a.y(\"prettier/plugins/html\")` and resolve through prettier's own\npackage.json `exports` map — which the shim approach couldn't honor\nwithout effectively cloning the entire canonical package.",
"is_bot": false,
"headline": "Rewrite turbopack mangled-alias references in chunks at build time (#22)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T21:22:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "153215d3f92154687cdabc258a5e7d0e5cbc223e",
"body": "v0.6.6 wrote the shim as `module.exports = require(\"../<canonical>\")`.\nField reports show bun's compiled-binary resolver throws `Cannot find\nmodule '../<canonical>'` from the shim path, even when the canonical\ntarget exists at exactly the resolved on-disk location (verified via\nkubectl debug). Bun a\n[…]\nhims switch to this form. Side effect: the\nshim's content is anchored to the boot-time baseDir; in normal\nsingle-process container deployments this is constant per pod, so the\ntrade-off is acceptable.",
"is_bot": false,
"headline": "Use absolute paths in turbopack-alias shims (#21)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T15:05:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50d27a769ce304344220c7bd9abfe52b4ababd02",
"body": "Two follow-up issues to #19:\n\n1. Bun's resolver in the compiled binary won't walk up to find the\n canonical package by name from inside the alias shim. v0.6.5's\n `module.exports = require(\"<canonical>\")` failed with `Cannot find\n package '<canonical>'`. Change the shim to a relative require\n \n[…]\nnce `a.y(\"prettier-.../plugins/html\")`\nand `a.y(\"prettier-.../standalone\")`; both subpaths now appear in the\nalias map and materialize as `<alias>/plugins/html.js` and\n`<alias>/standalone.js` at boot.",
"is_bot": false,
"headline": "Resolve turbopack alias subpaths and shim via relative require (#20)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T14:45:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abd888e32beb0dc1252e10afbf86eb3f0f970c17",
"body": "v0.6.4 created each alias as a symlink (e.g. `sharp-457... -> sharp`).\nOn macOS the compiled bun binary's resolver follows it, but on Linux\nunder Docker the symlink lands on disk and the resolver still throws\n`Cannot find package`. The require chain never reaches the canonical\npackage even though it\n[…]\nlver on every platform.\n\nSubpath imports (`require(\"<alias>/lib/foo\")`) aren't supported by the\nshim. In practice turbopack only emits top-level externalized package\nrequires, so this hasn't surfaced.",
"is_bot": false,
"headline": "Materialize turbopack aliases as shim packages, not symlinks (#19)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T13:50:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1b2933287ee34ac01a4ca0a1520f48eec33ca0a",
"body": "v0.6.3 discovered aliases by scanning `.next/node_modules/` for\n`<name>-<16hex>` symlinks. That works locally but on some Linux/Docker\nbuilds Next.js doesn't create those symlinks, so discovery returns an\nempty array and the runtime entry never recreates the aliases — the\n`require(\"sharp-457ea9eae1a\n[…]\nme is the prefix\nbefore the 16-hex content hash. Works regardless of whether the\nbuild-time symlinks exist. The symlink scan stays as a fallback for\naliases referenced outside literal require() calls.",
"is_bot": false,
"headline": "Discover turbopack mangled aliases by grepping server chunks (#18)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T13:19:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1db26717c5e15eaf74c9fc500eea508289b8d73a",
"body": "Next.js with turbopack emits server chunks that reference externalized\npackages by mangled names like `require(\"sharp-457ea9eae1af1a9c\")`, and\ncreates symlinks at `.next/node_modules/<mangled>` pointing to the real\npackage so the require resolves at build time.\n\nPreviously, walkDir traversed those s\n[…]\na real symlink in the\nruntime entry's extractAssets() (with a require-shim fallback for\nfilesystems that block symlinks). Side benefit: smaller binary, since\naliased packages are no longer duplicated.",
"is_bot": false,
"headline": "Recreate turbopack mangled-alias symlinks at runtime (#17)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-06-11T09:36:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c5633829a2a52fecd475880d2cf73980fbadfa5",
"body": "Bun's hoisted store puts dependency symlinks at\nnode_modules/.bun/<pkg>@<ver>/node_modules/<dep> pointing into other\n.bun/ entries. On Windows, statSync on these can throw EPERM when the\nsymlink target is locked (bun#4533), crashing the build. The same\ncrash is reproducible on macOS by dangling-syml\n[…]\nlModules,\nand fixModuleResolution. The real package contents are always reachable\nvia the canonical .bun/<dep>@<ver>/node_modules/<dep>/ path, so skipping\nthe unstattable entry doesn't lose any files.",
"is_bot": false,
"headline": "Tolerate unstattable node_modules symlinks (fixes #15) (#16)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-05-25T13:38:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93b5193180175d90ef8d91bad04c98c7504ae2f2",
"body": "Switch examples from require.resolve to import.meta.resolve for\nbroader compatibility. Add troubleshooting section for stale\nstandalone output after Next.js version upgrades.",
"is_bot": false,
"headline": "Update README: use import.meta.resolve, add stale output guide (#12)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-03-21T00:25:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e81784642ea7a8d9c10e8d7acb2a68ae6c95fb8d",
"body": "Embed all standalone node_modules/ instead of tracing individual\nnext/dist/ files. Fix bun compiled binary resolution: create index.js\nshims for compiled packages with non-standard main fields, and\nfilesystem shims for @swc/helpers exports maps. Scan .bun/.pnpm stores\nfor real package files in hoisted layouts.\n\nFixes #10",
"is_bot": false,
"headline": "Add Next.js 16.2 compatibility (#11)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-03-20T22:11:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1745930771a711feb3fa61850ae1733f2bbe72c3",
"body": "Extend findPackageDirs to scan .pnpm/ store in addition to .bun/,\nfixing stub placement for pnpm monorepos.\n\nFixes #8",
"is_bot": false,
"headline": "Support pnpm hoisted node_modules layout for stubs (#9)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-03-17T10:27:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b72984908caa962182db6a3f621ffcd5ebbf3c67",
"body": "Drop generate.ts and compile.ts as separate entry points (they're only\nconsumed as imports) and enable --splitting so shared code lives in a\nsingle chunk. Reduces unpacked size from 45KB to 14KB.",
"is_bot": false,
"headline": "Deduplicate dist output with code splitting (#7)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-26T02:01:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7397fad420fa612c648fc12ff30f0cd810d0696",
"body": "Introduce serverDir concept so standalone output with nested server.js\n(e.g. standalone/apps/web/) works correctly. Add findServerDir() to\nauto-detect monorepo layouts. Fix stubs and require-hook patching to\nhandle bun's .bun/ hoisted node_modules layout. Add test suite and CI\nworkflow requiring tests to pass on PRs.",
"is_bot": false,
"headline": "Add Turborepo monorepo support and CI checks (#6)",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-25T23:49:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25058f8fb15cafbe75f2ba15ef7919ee10c2f0d1",
"body": "Route handler chunks (favicon.ico, API routes) live under\n.next/server/chunks/ alongside SSR chunks in chunks/ssr/.\nUse walkDir to recursively scan all chunks for externalRequire()\nreferences so route handlers work in deployed binaries.",
"is_bot": false,
"headline": "Scan all server chunks for external modules, not just SSR",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-25T03:32:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1651d7e4d2cb4926fde0df0a0cb0bb6360ef263d",
"body": "SSR chunks use externalRequire() to load next/dist/* modules at runtime.\nIn deployed binaries without node_modules, these fail. Fixes this by:\n\n- Scanning SSR chunks for all require(\"next/dist/...\") references\n- Recursively tracing their require() dependencies (44 files, ~750KB)\n- Copying them into \n[…]\n resolution\n- Patching require-hook.js resolve for styled-jsx compatibility\n\nThe binary is now fully portable — copy it anywhere and run. No .next/,\nnode_modules/, or any other files needed. Fixes #4.",
"is_bot": false,
"headline": "Embed external modules for fully portable SSR in compiled binaries",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-25T01:41:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a0b59b7b256397ed580501094596a5bc11ef75c",
"body": "- Embed .next/ runtime files (BUILD_ID, manifests, server chunks) from\n standalone output so the binary works without any external files\n- Patch require-hook.js resolve function to handle missing node_modules\n in compiled binaries (fixes styled-jsx resolution error)\n- Binary is now fully self-contained: runs from any directory without\n .next/, node_modules/, or any other files present\n\nFixes #4",
"is_bot": false,
"headline": "Embed runtime files and patch require-hook for fully portable binaries",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-24T14:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41ca58c3af91dc7d89dc9100b5e5aa3e7b5eff9b",
"body": "Passes all arguments from next-bun-compile through to bun build --compile,\nenabling --target for cross-compilation (e.g. --target=bun-linux-x64).",
"is_bot": false,
"headline": "Forward CLI flags to bun compile for cross-compilation support",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-23T23:48:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfb0784314b7eacd7168c4a92d1f2df16c1f604b",
"body": "- Detect missing ctx parameter in modifyConfig to identify Next.js 15 and throw\n a clear error requiring Next.js 16+\n- Block --webpack flag since standalone output includes unresolvable webpack\n references that break compilation\n- Both produce actionable error messages telling users exactly what to change",
"is_bot": false,
"headline": "Block unsupported configurations: webpack builds and Next.js <16",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-22T16:54:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f489e2b11812f95cb41520a37edea488802738e",
"body": "…sions",
"is_bot": false,
"headline": "Fix TypeError when modifyConfig ctx is undefined on older Next.js ver…",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-22T10:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d08bca9c7e4be037643662d77a5a32e74b8f20e8",
"body": "fix: normalize windows file paths to prevent legacy octal literal errors",
"is_bot": false,
"headline": "Merge pull request #1 from xellanix/fix-windows-paths",
"author_name": "ramonmalcolm10",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-22T10:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dbcff87eb086a06b93b02129f39e070d414a937",
"body": "…teral errors",
"is_bot": false,
"headline": "fix: normalize windows backslashes in asset paths to prevent octal li…",
"author_name": "xellanix",
"author_login": "xellanix",
"committed_at": "2026-02-22T07:39:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f11cba51e9fd520148ca4e9abbc48bd0880babb",
"body": null,
"is_bot": false,
"headline": "Add performance benchmarks to README",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-21T12:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93b44239c4a84470057f76164f647c592033c597",
"body": null,
"is_bot": false,
"headline": "Auto-skip static asset embedding when assetPrefix is configured",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-21T12:41:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abd41d30f1689f3f6dde39065db5f43c381407d9",
"body": "…mode",
"is_bot": false,
"headline": "Auto-transpile known problematic packages and skip standalone in dev …",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-20T05:10:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0618fb968c76f7c366e51a706143fe67e010255f",
"body": null,
"is_bot": false,
"headline": "Remove NPM_TOKEN from publish workflow, use trusted publishing",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-20T04:01:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a2d0d4ecba533b2ad631843184665a6ca95214",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Ramon Malcolm",
"author_login": "ramonmalcolm10",
"committed_at": "2026-02-20T03:44:16Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 38,
"commits_last_year": 49,
"latest_release_at": "2026-07-19T13:07:12Z",
"latest_release_tag": "v1.0.2",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 11,
"days_since_latest_release": 5,
"mean_days_between_releases": 2.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 28,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "next-bun-compile",
"exists": true,
"license": "MIT",
"keywords": [
"nextjs",
"bun",
"compile",
"standalone",
"executable"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/next-bun-compile",
"is_deprecated": false,
"latest_version": "1.0.2",
"repository_url": "https://github.com/ramonmalcolm10/next-bun-compile",
"versions_count": 39,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 4665,
"first_published_at": "2026-02-20T03:52:55.868000Z",
"latest_published_at": "2026-07-19T13:07:28.589000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 8,
"stars": 68,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-02-22",
"count": 2
},
{
"date": "2026-02-23",
"count": 1
},
{
"date": "2026-02-25",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-29",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples",
"recipes"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"docs/tsconfig.json",
"examples/monorepo/apps/web/tsconfig.json",
"examples/sharp/tsconfig.json",
"examples/vps-deploy/tsconfig.json",
"test/regression/fixture/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 49861,
"source_files_sampled": 33,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"docs/package.json",
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 37,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ramonmalcolm10",
"commits": 48,
"avatar_url": "https://avatars.githubusercontent.com/u/36176996?v=4"
},
{
"type": "User",
"login": "xellanix",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/107340353?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.98
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"docs.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "32 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "68824fd6f2ba6dd8af56a713448f54c5e2674c1d",
"ran_at": "2026-07-25T10:33:11Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T00:48:00Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-24T00:47:29Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ramonmalcolm10/next-bun-compile",
"host": "github.com",
"name": "next-bun-compile",
"owner": "ramonmalcolm10"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"security": 36,
"vitality": 81,
"community": 48,
"governance": 55,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"commits_last_year": 49,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "49 commits in the last year",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 49
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 38,
"latest_release_tag": "v1.0.2",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 2.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "38 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 38
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 48,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"forks": 8,
"stars": 68,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "68 stars",
"points": 29.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 68
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"next-bun-compile"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 4665
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,665 downloads/month across npm",
"points": 48.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4665,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 12,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.98
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 98% of commits",
"points": 0.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 98
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 37,
"open_issues": 0,
"closed_issues": 9,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "37/37 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 37,
"decided": 37
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 42,
"inputs": {
"followers": 1,
"owner_type": "User",
"is_verified": null,
"owner_login": "ramonmalcolm10",
"public_repos": 16,
"account_age_days": 3091
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of ramonmalcolm10",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "ramonmalcolm10"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~8 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"next-bun-compile"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "39 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 39
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 36,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "32 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 50,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.878,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "43 of 49 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 43,
"sampled": 49
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"docs/tsconfig.json",
"examples/monorepo/apps/web/tsconfig.json",
"examples/sharp/tsconfig.json",
"examples/vps-deploy/tsconfig.json",
"test/regression/fixture/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "docs/tsconfig.json, examples/monorepo/apps/web/tsconfig.json, examples/sharp/tsconfig.json, examples/vps-deploy/tsconfig.json, test/regression/fixture/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "docs/tsconfig.json, examples/monorepo/apps/web/tsconfig.json, examples/sharp/tsconfig.json, examples/vps-deploy/tsconfig.json, test/regression/fixture/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 49",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 49
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 49861,
"source_files_sampled": 33,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/33 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 33,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples",
"recipes"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples, recipes",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples, recipes"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T10:33:28.243156Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/ramonmalcolm10/next-bun-compile.svg",
"full_name": "ramonmalcolm10/next-bun-compile",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit ramonmalcolm10/next-bun-compile teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
