Öffentliches RegisterGut
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-25 18:30 UTC
ximion / appstream
Tools and libraries to work with AppStream metadata
ximion/appstream erreicht einen Gesundheitsindex von 70 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (87/100) ab, am schwächsten bei AI Readiness (52/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
70
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
70
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Matthias KlumppPersönliches Konto
147 Follower109 öffentliche Reposseit Sept. 2010
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
87
Entwicklungsaktivität
92Exzellent
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 0 Tagen |
| 28.4/36 | Commit-Rhythmus — 41/52 Wochen mit Commits |
| 18/18 | Commit-Volumen — 272 Commits im letzten Jahr |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
Verwendete Eingangsdaten
| commits_last_year | 272 |
| human_commit_share | 0,98 |
| days_since_last_push | 0 |
| active_weeks_last_year | 41 |
Release-Disziplin
80Gut
Wie die Bewertung erfolgt
| 16.2/27 | Liefert Releases aus — 39 Versions-Tags (keine GitHub-Releases) |
| 36/36 | Release-Aktualität — letztes Release vor 1 Tagen |
| 19.8/27 | Release-Rhythmus — ein Release etwa alle 91,2 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 39 |
| latest_release_tag | v1.1.5 |
| releases_from_tags | ja |
| days_since_latest_release | 1 |
| mean_days_between_releases | 91,2 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
64
Popularität & Verbreitung
63Mittel
Wie die Bewertung erfolgt
| 39.5/60 | Stars — 273 Stars |
| 17.7/25 | Forks — 135 Forks |
| 6/15 | Watcher — 13 Watcher |
Verwendete Eingangsdaten
| forks | 135 |
| stars | 273 |
| watchers | 13 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
65Mittel
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (LGPL-2.1) |
| 0/18 | CONTRIBUTING-Leitfaden |
| 13.5/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | ja |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
56
Maintainer-Resilienz (Bus-Faktor)
39Gefährdet
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 6.8/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 70 % der Commits |
| 13.5/13.5 | Breite der Beitragenden — 99 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 40 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 99 |
| top_contributor_share | 0,698 |
Wie die Bewertung erfolgt
| 41.1/46.8 | Issue-Lösungsquote — 88 % der Issues geschlossen |
| 30.3/38.3 | PR-Annahme — 231/292 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 231 |
| open_issues | 54 |
| closed_issues | 391 |
| issue_closed_ratio | 0,879 |
| closed_unmerged_prs | 61 |
Eigentümerschaft & Trägerschaft
63Mittel
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 15.6/25 | Reichweite des Inhabers — 147 Follower von ximion |
| 25/25 | Kontohistorie — 109 öffentliche Repos, Kontoalter ca. 15 Jahre |
Verwendete Eingangsdaten
| followers | 147 |
| owner_type | User |
| is_verified | — |
| owner_login | ximion |
| public_repos | 109 |
| account_age_days | 5.780 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
77
Engineering-Praktiken
68Mittel
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 4 Workflow(s) |
| 24/24 | Tests vorhanden |
| 0/16 | Linter-Konfiguration |
| 0/9.6 | Pre-Commit-Hooks |
| 6.4/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — keine Daten |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | ja |
| has_linter_config | nein |
| has_precommit_config | nein |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.
Dokumentation
90Exzellent
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — http://www.freedesktop.org/wiki/Distributions/AppStream/ |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 5 Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | appstream, appstream-specification, freedesktop, metadata, metainfo |
| has_wiki | nein |
| homepage | http://www.freedesktop.org/wiki/Distributions/AppStream/ |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
67
Sicherheitslage
67Mittel
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — keine Daten |
| 0/2.5 | CI-Tests — keine Daten |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 40 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — keine Daten |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 6,7 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, ci_tests, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
52
AI-Agentenkontext & Leitlinien
40Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 40/40 | Lesbare Commit-Historie — 88 von 98 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,898 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
AI-Verify-Loop (Build / Test / Typprüfung)
48Gefährdet
Wie die Bewertung erfolgt
| 0/18 | Bootstrap mit einem Befehl |
| 22/22 | Automatisierte Tests |
| 0/11 | Lint-/Format-Konfiguration |
| 11/11 | Statische Typprüfung — C (statisch typisiert) |
| 0/10 | Reproduzierbare Umgebung |
| 6/10 | Belegte Agentenpraxis — 3 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben |
| 8/8 | Automatisierte Wartung — 2 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | — |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | nein |
| typecheck_configs | — |
| agent_commit_share | 0,03 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0,02 |
AI-Code-Lesbarkeit für Modelle
98Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — C (statisch typisiert) |
| 53.4/55 | Handhabbare Dateigrößen — 8/267 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | C |
| largest_source_bytes | 194.020 |
| source_files_sampled | 267 |
| oversized_source_files | 8 |
Maschinenlesbare AI-Schnittstellen
40Gefährdet
Wie die Bewertung erfolgt
| 0/40 | API-Schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP-Server |
| 40/40 | Lauffähige Beispiele — samples |
Verwendete Eingangsdaten
| example_dirs | samples |
| has_mcp_signal | nein |
| api_schema_files | — |
Eckdaten
273GitHub-Sterne
99Mitwirkende
272Commits, letzte 12 Monate
0Tage seit letztem Push
39Releases
1Bus-Faktor
54offene Issues
—Paket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 135 ⇿
0Sterne
135Forks
37Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 1Minor 5Patch 31
Jeder Punkt umfasst 11 Tage.
OpenSSF Scorecard 6.7 / 10
6.7Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| k. A. | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| k. A. | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 40 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
| k. A. | Packaging | packaging workflow not detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| k. A. | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Alle Abhängigkeiten 0
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 0 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
| Registry | Paket | Version | Beziehung |
|---|
Abhängigkeits-Advisories nicht bewertet
Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies to assess
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"appstream",
"appstream-specification",
"freedesktop",
"metadata",
"metainfo"
],
"is_fork": false,
"size_kb": 41138,
"has_wiki": false,
"homepage": "http://www.freedesktop.org/wiki/Distributions/AppStream/",
"languages": {
"C": 2648861,
"C++": 273556,
"SmPL": 1663,
"CMake": 5122,
"Meson": 36784,
"Shell": 8893,
"Python": 16816
},
"pushed_at": "2026-07-24T18:48:43Z",
"created_at": "2014-09-10T14:39:51Z",
"owner_type": "User",
"updated_at": "2026-07-24T18:49:01Z",
"description": "Tools and libraries to work with AppStream metadata",
"is_archived": false,
"is_disabled": false,
"license_spdx": "LGPL-2.1",
"default_branch": "main",
"license_spdx_raw": "LGPL-2.1",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "blog.tenstral.net",
"name": "Matthias Klumpp",
"type": "User",
"login": "ximion",
"company": null,
"location": "Heidelberg, Germany",
"followers": 147,
"avatar_url": "https://avatars.githubusercontent.com/u/417468?v=4",
"created_at": "2010-09-27T11:15:17Z",
"is_verified": null,
"public_repos": 109,
"account_age_days": 5780
},
"license": {
"state": "standard",
"spdx_id": "LGPL-2.1",
"raw_spdx": "LGPL-2.1",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2026-07-24T18:27:30Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2026-07-22T16:23:15Z"
},
{
"tag": "v1.1.3",
"kind": "patch",
"published_at": "2026-06-18T17:29:18Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-28T20:13:49Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2025-10-02T18:11:10Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-09-16T19:35:54Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2025-08-14T14:54:01Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2025-04-24T15:29:42Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2024-12-08T22:34:32Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2024-04-24T18:02:43Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2024-02-24T21:22:21Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2023-12-16T17:20:48Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2023-11-11T18:48:03Z"
},
{
"tag": "v0.16.4",
"kind": "patch",
"published_at": "2023-11-10T20:28:04Z"
},
{
"tag": "v0.16.3",
"kind": "patch",
"published_at": "2023-08-22T21:51:55Z"
},
{
"tag": "v0.16.2",
"kind": "patch",
"published_at": "2023-04-26T19:08:44Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2023-02-10T19:53:14Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2023-01-26T21:55:30Z"
},
{
"tag": "v0.15.6",
"kind": "patch",
"published_at": "2022-12-22T22:46:45Z"
},
{
"tag": "v0.15.5",
"kind": "patch",
"published_at": "2022-08-22T17:42:44Z"
},
{
"tag": "v0.15.4",
"kind": "patch",
"published_at": "2022-05-22T21:04:47Z"
},
{
"tag": "v0.15.3",
"kind": "patch",
"published_at": "2022-04-10T19:20:53Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2022-02-22T16:52:22Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2021-12-22T17:52:36Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2021-12-02T21:54:03Z"
},
{
"tag": "v0.14.6",
"kind": "patch",
"published_at": "2021-10-08T17:30:54Z"
},
{
"tag": "v0.14.5",
"kind": "patch",
"published_at": "2021-08-28T20:13:10Z"
},
{
"tag": "v0.14.4",
"kind": "patch",
"published_at": "2021-06-22T18:52:21Z"
},
{
"tag": "v0.14.3",
"kind": "patch",
"published_at": "2021-03-08T14:49:30Z"
},
{
"tag": "v0.14.2",
"kind": "patch",
"published_at": "2021-03-02T02:57:19Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2021-02-16T19:20:53Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2021-02-02T16:03:44Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2020-11-30T22:30:25Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2020-11-30T18:57:51Z"
},
{
"tag": "v0.12.11",
"kind": "patch",
"published_at": "2020-05-12T16:51:34Z"
},
{
"tag": "v0.12.10",
"kind": "patch",
"published_at": "2020-01-18T18:12:09Z"
},
{
"tag": "v0.12.9",
"kind": "patch",
"published_at": "2019-09-24T18:19:04Z"
},
{
"tag": "v0.12.8",
"kind": "patch",
"published_at": "2019-08-16T18:19:03Z"
},
{
"tag": "v0.12.7",
"kind": "patch",
"published_at": "2019-06-16T20:53:58Z"
}
],
"recent_commits": [
{
"oid": "ac1b68ef692f1415784091c7a01bfe66f85b09f4",
"body": null,
"is_bot": false,
"headline": "trivial: post release version bump",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T18:48:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "843c9ad7b3ac3bc9ad5a5b03abe7b87bbcdd333c",
"body": null,
"is_bot": false,
"headline": "Release version 1.1.5",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T18:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7e7a01fffeec13669f718911336f2fe2fdcd933",
"body": "Currently translated at 96.3% (781 of 811 strings)\n\nCo-authored-by: Gabriel <bloxgabriel18@gmail.com>",
"is_bot": false,
"headline": "l10n: Portuguese (Brazil) translation updated",
"author_name": "Gabriel",
"author_login": "AgenteGabrielofc",
"committed_at": "2026-07-24T11:01:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a350713cfa7e24a3ad94b8104983eef3320f501c",
"body": "This is a bit nicer to read.",
"is_bot": false,
"headline": "qt: Use strndup for C string-list conversion",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T02:17:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dd23ba5c83b4f79eadb8c83a5f4b26a7c12fdda",
"body": null,
"is_bot": false,
"headline": "trivial: Make semgrep happy, avoid strcpy",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T01:14:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc6210f0dfe72642bd63d8ff028d17e5ad8d11c1",
"body": "This worked before, but was broken in the libxmlb transition. Now,\nwildcard searches for modaliases should work again, in both directions.",
"is_bot": false,
"headline": "pool: Fix bidirectional wildcard search for modalias provides",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T00:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c02444f28534696e8d225390bb587a754bc8e13",
"body": null,
"is_bot": false,
"headline": "trivial: autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T00:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2f4a5cef067a4e25d5ab663825c60b44c39059e",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>",
"is_bot": false,
"headline": "l10n: Romanian translation updated",
"author_name": "Remus-Gabriel Chelu",
"author_login": "ramses-70",
"committed_at": "2026-07-23T20:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ad4ed3f0502f0c0525b5f8aa946365ed63e57d0",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Oğuz Ersen <oguz@ersen.moe>",
"is_bot": false,
"headline": "l10n: Turkish translation updated",
"author_name": "Oğuz Ersen",
"author_login": "oersen",
"committed_at": "2026-07-23T20:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28cb9d3401086614412508d8a67d64752df8e37e",
"body": "Resolves: #767",
"is_bot": false,
"headline": "qt: Add back wrong const Component::addBundle for ABI compatibility",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T07:11:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c282a075a661b19e7207898e1bf4ea5fc901b4fc",
"body": null,
"is_bot": false,
"headline": "trivial: qt: Require Qt6",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:54:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "437baba270bf8ba45d39b137800b4b7129773aa7",
"body": null,
"is_bot": false,
"headline": "trivial: autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "773c72540eb356fb56b7f23ea841b15488ffbc66",
"body": "Use the CoreGraphics (Quartz Display Services) API to find the largest\nactive display and read its size in points, which are already the\nlogical pixels we want, with any HiDPI (\"Retina\") scaling factored out.\n\nUnlike the Wayland backend, CoreGraphics is linked directly, as the\nframework is present on every macOS system.\n\nResolves: #765\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "sysinfo: Implement display size detection on macOS",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:46:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "42d34f87e84dc65a88eaaa05b13ae95ebf06d8ac",
"body": "CC: #765",
"is_bot": false,
"headline": "sysinfo: Make it easier to implement platform-specific display detection",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de2f0115a1bab3efafee55c3f075a972b92d9b2b",
"body": null,
"is_bot": false,
"headline": "trivial: post release version bump",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-22T16:41:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96c4c1fada6a0131a0b777577bdf353251a6021a",
"body": null,
"is_bot": false,
"headline": "Release version 1.1.4",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-22T16:23:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "761058d793f4a6e36a89d55e3699426b9bd5b389",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Yuri Chornoivan <yurchor@ukr.net>",
"is_bot": false,
"headline": "l10n: Ukrainian translation updated",
"author_name": "Yuri Chornoivan",
"author_login": "yurchor",
"committed_at": "2026-07-22T16:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48ed49a5afac2307c7317d983fdee3fbebc9b41c",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Martin Srebotnjak <miles@filmsi.net>",
"is_bot": false,
"headline": "l10n: Slovenian translation updated",
"author_name": "Martin Srebotnjak",
"author_login": "filmsi",
"committed_at": "2026-07-22T16:06:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a81c4759aa8264f6dbb88d456513948ab976ee2",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se>",
"is_bot": false,
"headline": "l10n: Swedish translation updated",
"author_name": "Anders Jonsson",
"author_login": "haaninjo",
"committed_at": "2026-07-21T23:02:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e22cd4a50e42b9d77433191e1f35307572dd2fa",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Matthaiks <kitynska@gmail.com>",
"is_bot": false,
"headline": "l10n: Polish translation updated",
"author_name": "Matthaiks",
"author_login": "Matthaiks",
"committed_at": "2026-07-21T23:02:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6906ea23211ed1f9706d779c1c308a07e988682",
"body": null,
"is_bot": false,
"headline": "pool: Properly implement cancellation of load operations",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T21:20:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a49df95ba8a5c015e3cd93edd37b6827261397",
"body": "Resolves: #720",
"is_bot": false,
"headline": "Make GResources we need outlive main thread destruction",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T21:20:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52883a64be71628d5eb3784575c840d987571fae",
"body": "Currently translated at 96.7% (785 of 811 strings)\n\nCo-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se>",
"is_bot": false,
"headline": "l10n: Swedish translation updated",
"author_name": "Anders Jonsson",
"author_login": "haaninjo",
"committed_at": "2026-07-21T19:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cd7a0233ebb43ec7be016b4eadc611896c88218",
"body": "Updated by \"Update PO files to match POT (msgmerge)\" add-on in Weblate.\n\nCo-authored-by: Hosted Weblate <hosted@weblate.org>\nTranslate-URL: https://hosted.weblate.org/projects/appstream/translations/\nTranslation: AppStream/Translations",
"is_bot": false,
"headline": "l10n: Update translation files",
"author_name": "Hosted Weblate",
"author_login": "weblate",
"committed_at": "2026-07-21T19:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "109886edf46768c20ccc91a5edd226b5e0525822",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Martin Srebotnjak <miles@filmsi.net>",
"is_bot": false,
"headline": "l10n: Slovenian translation updated",
"author_name": "Martin Srebotnjak",
"author_login": "filmsi",
"committed_at": "2026-07-21T19:33:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51ec54dcf06634c52402005b887386dcbb8471e4",
"body": null,
"is_bot": false,
"headline": "l10n: Update",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T19:27:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8937e0f74f023c4d81cdeb5808be52a70ee6249",
"body": "Currently translated at 43.1% (338 of 783 strings)\n\nCo-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>",
"is_bot": false,
"headline": "l10n: Georgian translation updated",
"author_name": "Temuri Doghonadze",
"author_login": "NorwayFun",
"committed_at": "2026-07-21T10:03:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f850ab4cd5831cfc0ffb10258a532374e5d33e3",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>",
"is_bot": false,
"headline": "l10n: Romanian translation updated",
"author_name": "Remus-Gabriel Chelu",
"author_login": "ramses-70",
"committed_at": "2026-07-21T10:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac9f38f864dbfe932b23513507256cf563379bba",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Yuri Chornoivan <yurchor@ukr.net>",
"is_bot": false,
"headline": "l10n: Ukrainian translation updated",
"author_name": "Yuri Chornoivan",
"author_login": "yurchor",
"committed_at": "2026-07-21T10:02:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24734349489473fa7d4e302ba276dc28e0091e65",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se>",
"is_bot": false,
"headline": "l10n: Swedish translation updated",
"author_name": "Anders Jonsson",
"author_login": "haaninjo",
"committed_at": "2026-07-21T10:02:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b4c08bddc4d81e4d62566cc9f2c4e74de64d2c3",
"body": "Currently translated at 99.6% (780 of 783 strings)\n\nCo-authored-by: Сергей <asvmail.as@gmail.com>",
"is_bot": false,
"headline": "l10n: Russian translation updated",
"author_name": "Сергей",
"author_login": "Ser82-png",
"committed_at": "2026-07-21T10:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7ee92a6ea4945f34dacfd821dbd1b5ca14bfaaf",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Matthaiks <kitynska@gmail.com>",
"is_bot": false,
"headline": "l10n: Polish translation updated",
"author_name": "Matthaiks",
"author_login": "Matthaiks",
"committed_at": "2026-07-21T10:02:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4936fe8f6fe649f1d3b093650282b66ea88d1e2b",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Libre <6n0n1m0s@proton.me>",
"is_bot": false,
"headline": "l10n: Spanish translation updated",
"author_name": "Libre",
"author_login": null,
"committed_at": "2026-07-21T10:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cfbe08305d468d21a080bb290a5c38e4deed79",
"body": "* Fix a memory leak of the display-name prompt string.\n* Honor the --locale flag for submit-review, instead of silently\n ignoring it.\n* Count the review summary length limit in characters, not bytes, so\n non-ASCII summaries are not rejected too early.\n* Keep the \"[y/n]\" hint of the publish confirmation untranslated, since\n only the literal answers \"y\" / \"yes\" are accepted.",
"is_bot": false,
"headline": "ascli: Fix some issues in the interactive review submission",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a60bddcd0694db0e9601aa6e3ddb0f0373947257",
"body": null,
"is_bot": false,
"headline": "trivial: autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17ad81ff2a678c572c05a650d68b96ea8dfec6f2",
"body": "When the reviews server received our request but rejected it with an\nerror description (e.g. a semantic 400), we raised ERROR_NETWORK, making\nit impossible for callers to tell an actual connectivity problem from a\nrejected submission. Such replies now yield ERROR_FAILED with the\nserver-provided message.",
"is_bot": false,
"headline": "reviews: Distinguish server-side rejections from network failures",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:06:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e36666d20ebda1dc6cee9acaea7337e8ee41569e",
"body": "…uests\n\nFailed download attempts could leave partial data (e.g. an HTML error\npage from a 5xx reply) in the write sink, which a successful retry would\nthen append to, corrupting the downloaded data. We now discard any\npartially received data before each retry attempt, for both in-memory\nbuffers and \n[…]\nigned on every path.\n\nSince POST requests may not be idempotent, they are now only retried\nwhen the connection could not be established at all, so a request can\nnever be processed twice by the server.",
"is_bot": false,
"headline": "curl: Fix retry-loop data corruption and don't blindly retry POST req…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:05:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34054b742301fc6df5a7bd1428b6a28b569ec957",
"body": null,
"is_bot": false,
"headline": "docs: ascli: Add missing documentation for list-reviews",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T04:28:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad795b0b0649f59afeadfe45143880283ef9a8a6",
"body": null,
"is_bot": false,
"headline": "reviews: Implement support for submitting reviews",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T04:08:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4ba11a18e6c92a4ba444b70e699c917b59eacde",
"body": null,
"is_bot": false,
"headline": "trivial: typo",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:54:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d97e1711af2dcfbea31d0ce02d8f009b70d7c6ee",
"body": null,
"is_bot": false,
"headline": "trivial: Fix build on ancient Fedora",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7be7a1c61edb5958faeb778afa8458d499a693b1",
"body": null,
"is_bot": false,
"headline": "reviews: Add start parameter for review pagination",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2cf07208bdd330c203621728baa810e780df0a5",
"body": null,
"is_bot": false,
"headline": "ci: Bump Ubuntu LTS version",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:12:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43e243ca044005c7b8352ad7d1fb8f2e01d9a3dc",
"body": null,
"is_bot": false,
"headline": "reviews: Add simply sync interface to fetch ODRS reviews for a component",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T01:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dff6769a6463de55da526824546bce798fe8145",
"body": null,
"is_bot": false,
"headline": "curl: Allow making POST requests and changing the user agent",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T23:26:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44062265dc179ae0519b653326719bd77c347223",
"body": "Updated by \"Update PO files to match POT (msgmerge)\" add-on in Weblate.\n\nCo-authored-by: Hosted Weblate <hosted@weblate.org>\nTranslate-URL: https://hosted.weblate.org/projects/appstream/translations/\nTranslation: AppStream/Translations",
"is_bot": false,
"headline": "l10n: Update translation files",
"author_name": "Hosted Weblate",
"author_login": "weblate",
"committed_at": "2026-07-20T21:02:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14b9c88171622ac6783b6a087cd16183cbad19d7",
"body": null,
"is_bot": false,
"headline": "l10n: Update",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T21:01:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3183bdbfb1ad671f2e540c47e8972368f377d44",
"body": null,
"is_bot": false,
"headline": "Implement support for GCVE as vulnerability database provider",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T20:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69fafebb26dfe8b77f050ef0fd56732fcb457be1",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T20:26:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b72cbe7335ddd28dd5146e8570b5c30f1d49d39c",
"body": null,
"is_bot": false,
"headline": "trivial: Update static data",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T19:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "357cbb413f4337034e1fbedda78dd45221533bc7",
"body": null,
"is_bot": false,
"headline": "trivial: Update clang-format",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T08:13:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "620503f74a47c339e78ec02cc9c2947f90eb1646",
"body": "Bring the remaining accessors in line with the C library, so that data\nreachable from libappstream is also reachable from Qt.\n\nTests extended using Claude Opus 4.8.",
"is_bot": false,
"headline": "qt: Wrap missing C API on existing classes",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca1738be981a70feef4702ad798a4a336a956536",
"body": "We omit AsIssue here, as that is in a separate branch that should be\nmerged soon.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "qt: Add Artifact, Checksum, Reference, Review and Agreement wrappers",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:21:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "014df81039133444cb4cfec006631f7d6243c262",
"body": "This fully harmonizes the enums and fixes a bunch of subtle conversion\nbugs that may have caused issues when using the Qt API.\n\nThis conversion was partially automated using Claude Opus 4.8.",
"is_bot": false,
"headline": "qt: Sync enum mirrors with the C library",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:15:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "339d0d02555d536b427a54af5c70b818341b1c79",
"body": "The array allocation reserved `sizeof(char *) * list.size() + 1`, which\nis\none *byte* of slack rather than one pointer slot. Writing the NULL\nterminator at array[list.size()] therefore overran the allocation by\nsizeof(char*) - 1 bytes on every call that passes a string list to C.\n\nFound via Scrutineer + Anthropic Opus 4.8",
"is_bot": false,
"headline": "qt: Fix buffer overrun in stringListToCharArray",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:10:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e9341b33d68fcbd817cbf98bccb6c653743249b",
"body": null,
"is_bot": false,
"headline": "ci: Update Ubuntu LTS to 26.04",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T06:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71711e6568be7c8df2af475f36b58b22440b7b6d",
"body": null,
"is_bot": false,
"headline": "trivial: yaml: Ensure branding color values are also consistently quoted",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-18T01:25:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "564e1d8ca2a9260b97648166735831794e6bcc28",
"body": null,
"is_bot": false,
"headline": "yaml: Ensure version relations are consistently quoted",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-18T01:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46cf6296663aabf82207a3191482a6ce5b94875f",
"body": "… change\n\nResolves: #756",
"is_bot": false,
"headline": "yaml: Adjust tests and emitter to work around libfyaml string-quoting…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-18T00:51:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52dc2d2654274e662e639ead8bc9169b29662110",
"body": "…YAML",
"is_bot": false,
"headline": "trivial: apt: Fix potential integer underflow when reading corrupted …",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T23:24:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab744841dd5bb44b0c953f4a50ff1fa1e922de8a",
"body": "…values",
"is_bot": false,
"headline": "yaml: Fix potential crashes when encountering missing relation entry …",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T23:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c5765330a797e35b211993a97074dcbee089f94",
"body": "AppStream only allows HTTP(S) URLs to be followed, allowing more is\nsimply an unnecessary attack surface. Restrict the usable protocols.\n\nThis was found using AlphaOmega's Scrutineer tool on Opus 4.6.",
"is_bot": false,
"headline": "curl: Harden downloader by restricting protocols to only HTTP(S)",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T22:47:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb3793dcc68b763c04e8b31a683a78609960bed",
"body": null,
"is_bot": false,
"headline": "ci: freebsd: Switch from Cirrus to GitHub Actions",
"author_name": "Gleb Popov",
"author_login": "arrowd",
"committed_at": "2026-07-17T16:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc6c5d0f5c910efca3f4377ac68431706eaf4021",
"body": "Like the handset template before, the tablet template described a\n2012-era device: 600x1024 logical pixels meant every application\ncarrying the implicit 768px minimum display requirement scored a\nhard zero on tablets. Modern tablets provide about 800x1280 logical\npixels, making them display-wise equivalent to the desktop template,\njust with touch input instead of keyboard and pointing devices.",
"is_bot": false,
"headline": "sysinfo: Assume a more modern display for the tablet chassis template",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T07:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "006c4453b80cc521f6e28a48d029bc48f513784b",
"body": "A relation check that fails with an error (status ERROR) means we\ncould not determine whether the requirement is met, not that it is\nunmet. The most common case is an unknown display length on systems\nwhere no GUI frontend has provided it (e.g. X11 sessions, where we\ncan not autodetect it), which vi\n[…]\nop application.\n\nTreat an errored required check like one with unknown status and\napply the same -30 penalty instead of returning 0 immediately.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "relation-check-result: Don't zero the score if a required check errored",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T07:18:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9ee831dfe74bcfb2282a14f3c5e2226ca1997d09",
"body": "…ints\n\nDisplay length relations compare against the shortest side of the\ndisplay rectangle by default. This makes upper-bound constraints\nineffective for excluding large screens: A 4K television has a\nshortest edge of only 2160 logical pixels and would happily satisfy\nthe \"lt 3840\" constraint our own example used to exclude television\nscreens.\n\nFix the example to constrain the longest side and add a note\nexplaining the pitfall.",
"is_bot": false,
"headline": "docs: Suggest using the longest display side for maximum size constra…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T07:18:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44486041932d16c29833f01cc56b689b8490da29",
"body": null,
"is_bot": false,
"headline": "trivial: ci: Install Wayland client development files",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T06:15:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bfd187bdcf749fe9992c3536608a966bcd4eabb",
"body": "Wayland initially was designed without fractional scaling in mind, so we\nneed the additional xdg-output protocol to get that information for such\ndisplays.\n\nIf the compositor provides the xdg-output protocol, we now read the\ntrue logical size of each output from it, and only fall back to the\ninteger\n[…]\nlly-generated code, which we just hardcoded for the\nzxdg-output-v1 protocol. Ugly, but the only wy to get this information\nfrom Wayland compositors (since there is no generic D-Bus protocol for\nthis).",
"is_bot": false,
"headline": "system-info: Handle fractional display scaling via xdg-output",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T06:08:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f40d1aca770cd9a2eedc53a599fd7364b20cc0c",
"body": "If no display length was set explicitly and we are in a Wayland\nsession, libappstream now determines the size of the largest connected\ndisplay automatically by connecting to the compositor and reading the\nlogical size (pixel mode / scale) of its outputs.\n\nSince libappstream must not gain a runtime dependency on any GUI\nlibrary, libwayland-client is dlopen'ed only if it is available at\nruntime.\n\nWe also do not yet handle fractional scaling, this needs to be added as\na separate patch.",
"is_bot": false,
"headline": "system-info: Initial code to autodetect the display size on Wayland",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T06:05:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0691471e165e147500ded10f93c1720d26be1cb",
"body": "…plate\n\nThe previous 320x480 (HVGA) assumption is very dated, a logical\nresolution of 360x720 is representative of modern phones and matches\nthe 360px shortest-edge minimum that adaptive mobile apps commonly\nrequire.\n\nThis also adjusts the compatibility-score test expectations for the\nnow-correct chassis template display values: A phone app that fits the\ndesktop display no longer gets a zero score there, it is only penalized\nfor its missing touch input.",
"is_bot": false,
"headline": "system-info: Assume a more modern display for the handset chassis tem…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T01:17:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff61a771b900f7391098e247de5bae229e0d250f",
"body": "as_system_info_set_display_length() was missing an else branch, so\nsetting the longest display edge also overwrote the shortest one.\nThis made all chassis templates end up with identical values for\nboth display sides.",
"is_bot": false,
"headline": "system-info: Fix display-length setter overriding the shortest edge",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-16T22:38:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c82fb161fa43b4d612613ef753061bef656898e4",
"body": "…tyles",
"is_bot": false,
"headline": "trivial: meson: Provide a nicer error message for missing Docbook 5 s…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-16T20:01:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd5987b44f52e2b5633a97c592e0faaffedd4ab2",
"body": "Currently translated at 99.4% (774 of 778 strings)\n\nCo-authored-by: Yago Raña Gayoso <yago.rana.gayoso@gmail.com>",
"is_bot": false,
"headline": "l10n: Galician translation updated",
"author_name": "Yago Raña Gayoso",
"author_login": "xuars",
"committed_at": "2026-07-01T03:01:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5bb687825e342acc086b164d17467560a6c5874",
"body": "Currently translated at 64.1% (499 of 778 strings)\n\nCo-authored-by: Kieli Puoli <kielipuoli@gmail.com>",
"is_bot": false,
"headline": "l10n: Finnish translation updated",
"author_name": "Kieli Puoli",
"author_login": null,
"committed_at": "2026-06-28T09:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4795fb5a18d878eddfbee57b8d7e8d951620d478",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T05:21:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782dee9bf49d2a74c7086d0b983aaa021dc4f1ec",
"body": null,
"is_bot": false,
"headline": "trivial: post release version bump",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-18T17:49:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "559d20cd46919346ef05916c58f75cbfe1a1c919",
"body": null,
"is_bot": false,
"headline": "Release version 1.1.3",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-18T17:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cad1b2149b29bc0d216c9eaed38ea75416aa666",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: Gabriel <bloxgabriel18@gmail.com>",
"is_bot": false,
"headline": "l10n: Portuguese (Brazil) translation updated",
"author_name": "Gabriel",
"author_login": "AgenteGabrielofc",
"committed_at": "2026-06-18T12:01:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "850de54a168df8cc129184c13ef4eb230dbae3af",
"body": "…e-blocks",
"is_bot": false,
"headline": "news-convert: Handle extra linebreaks better and add support for issu…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-17T06:23:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77f6ea152367385809c8db867a382558ec01794c",
"body": null,
"is_bot": false,
"headline": "trivial: Autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T18:40:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dab3900047586b4a1d26a003503db3617879eeda",
"body": null,
"is_bot": false,
"headline": "Never emit usertags that are missing a namespace",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T18:39:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec8e61f138c30357488465265c3d822b20913fd7",
"body": "The spec says \"The tag must also have a namespace attribute\",\nconsequently, since this is a *MUST* directive, we should reject any tag\nwithout namespace. It could be a warning, but since this may lead to\nmissing important data, an error is probably justified.",
"is_bot": false,
"headline": "validator: Tags without namespace are an error",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T18:28:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0867a92334096760e757f2031be7f5b429572a19",
"body": null,
"is_bot": false,
"headline": "Update static data",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T17:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "007d8d129d2b9f2aee14748aad8a2b3f19571181",
"body": null,
"is_bot": false,
"headline": "trivial: ci: Install Docbook 5 XSL",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T08:10:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1cf39e5a6dde65cbc887b35adac39acf386fa06",
"body": null,
"is_bot": false,
"headline": "docs: Convert to Docbook 5",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T08:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f88d7d5a1158ccfeed19f46f2644042f06cc52b1",
"body": "…letypes\n\nThis is alongside PNG, so both PNG and JXL are supported for icons. This\ndoes not change the available formats for screenshot images.",
"is_bot": false,
"headline": "Officially support & read JXL images for icons, validate permitted fi…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T03:42:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "892eff324bed895828e14c82ac32983000981c39",
"body": "This reverts commit de5a582789be4931f7fe3958386b21763360ce4b.\n\nThere will be some API-breaking changes coming with the next release,\nsuch as sandboxed media processing and JPEG-XL support, so it makes\nsense to hold off dropping it for one more release.",
"is_bot": false,
"headline": "Revert \"compose: Drop API instability warning\"",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T00:08:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "523a45ef9a09b646556a9b3bc777586d8ffc4f32",
"body": "…#750)\n\nAutomated fix generated by OrbisAI Security",
"is_bot": false,
"headline": "compose: add bounds checks when parsing malformed translation files (…",
"author_name": "OrbisAI Security",
"author_login": null,
"committed_at": "2026-06-16T00:03:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5402e3e9cd563425bca3b89995237d9d9d27fbbc",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: தமிழ்நேரம் <tamilneram247@gmail.com>",
"is_bot": false,
"headline": "l10n: Tamil translation updated",
"author_name": "தமிழ்நேரம்",
"author_login": "TamilNeram",
"committed_at": "2026-06-15T03:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e64433a1eaace498ba083efd760dcc3399d7b751",
"body": "```\nDirect leak of 16 byte(s) in 1 object(s) allocated from:\n #0 0x7f14ae4e6f2b in malloc (/lib64/libasan.so.8+0xe6f2b) (BuildId: 25975f766867e9e604dc5a71a8befeaed3301942)\n #1 0x7f14aebcaca9 in g_malloc (/lib64/libglib-2.0.so.0+0x47ca9) (BuildId: 7460891e8cbad6f228b9a8d1dfc92d12bb8a8a7d)\n #\n[…]\no.0+0x74751) (BuildId: 7460891e8cbad6f228b9a8d1dfc92d12bb8a8a7d)\n #6 0x7f14ae428ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 25975f766867e9e604dc5a71a8befeaed3301942)\n```",
"is_bot": false,
"headline": "compose: Free array from asc_result_get_component_ids_with_hints",
"author_name": "bbhtt",
"author_login": "bbhtt",
"committed_at": "2026-05-27T15:56:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "daa7d9608356f11715241589b448a80f6f19c6d4",
"body": "```\nIndirect leak of 12 byte(s) in 1 object(s) allocated from:\n #0 0x557432e34af8 in malloc (/__w/flatpak-builder/flatpak-builder/builddir/src/flatpak-builder+0x16baf8) (BuildId: fedaf9746ee75c7de57cf0bb3c5eb79d9c0f8dd8)\n #1 0x7f95fd995679 in g_malloc (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.\n[…]\nrt (/__w/flatpak-builder/flatpak-builder/builddir/src/flatpak-builder+0xc6554) (BuildId: fedaf9746ee75c7de57cf0bb3c5eb79d9c0f8dd8)\n```\n\nFixes: ba01b6f3 (\"compose: Implement more flexible icon policy\")",
"is_bot": false,
"headline": "compose: Unref icon_policy in asc_compose_finalize",
"author_name": "bbhtt",
"author_login": "bbhtt",
"committed_at": "2026-05-27T15:56:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "682671d5c35aa104f15159710cefb6f41a26db2f",
"body": "It's not actually generally useful, if we really need stuff to inline in\na specific case, more targeted activation of this flag makes more sense.",
"is_bot": false,
"headline": "meson: Drop -Winline from maintainer flags",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-05-27T15:53:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "510ec119e36a660d10db64be0bdadd2909434e53",
"body": "As of https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/\nb4b753d66dea17d645166adca239a0fba84d03a9 first included in 2.18.0\nFcFreeTypeQuery has been moved to fcfreetype.h",
"is_bot": false,
"headline": "Explicitly add fcfreetype.h include to asc-font.c",
"author_name": "Tom Pollard",
"author_login": "tom--pollard",
"committed_at": "2026-05-26T13:45:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1ba38ad68ff5d0ad6720163b5dbb056fbb8f9fa",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: Libre <6n0n1m0s@proton.me>",
"is_bot": false,
"headline": "l10n: Spanish translation updated",
"author_name": "Libre",
"author_login": null,
"committed_at": "2026-05-22T08:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd4a1003c870d4c7e47cdc315b1219bd31330751",
"body": "Currently translated at 20.0% (156 of 778 strings)\n\nCo-authored-by: jonnysemon <jonnysemon@users.noreply.hosted.weblate.org>",
"is_bot": false,
"headline": "l10n: Arabic translation updated",
"author_name": "jonnysemon",
"author_login": null,
"committed_at": "2026-04-30T09:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc0db6c21de467b42416c8d94b65e3d72aebc696",
"body": "Currently translated at 18.3% (143 of 778 strings)\n\nCo-authored-by: jonnysemon <jonnysemon@users.noreply.hosted.weblate.org>",
"is_bot": false,
"headline": "l10n: Arabic translation updated",
"author_name": "jonnysemon",
"author_login": null,
"committed_at": "2026-04-19T06:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a3c92930ac2a5526f5557ad17f5f9e8787a8c18",
"body": "Currently translated at 18.2% (142 of 778 strings)\n\nCo-authored-by: jonnysemon <jonnysemon@users.noreply.hosted.weblate.org>",
"is_bot": false,
"headline": "l10n: Arabic translation updated",
"author_name": "jonnysemon",
"author_login": null,
"committed_at": "2026-04-16T04:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7507b884b7cde297d67804862fe41d6d78e605fd",
"body": "Currently translated at 91.6% (713 of 778 strings)\n\nCo-authored-by: Alessandro Scarozza <xan.scale@gmail.com>",
"is_bot": false,
"headline": "l10n: Italian translation updated",
"author_name": "Alessandro Scarozza",
"author_login": "xanscale",
"committed_at": "2026-04-14T21:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f32a8d77fdfcdad2896c04769981f347a4d6a42b",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nl10n: Serbian (Latin script) translation updated\n\nCurrently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: Марко М. Костић <marko.m.kostic@gmail.com>",
"is_bot": false,
"headline": "l10n: Serbian translation updated",
"author_name": "Марко М. Костић",
"author_login": "kostich",
"committed_at": "2026-04-11T08:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fac9f939a599e69afae557844fb5e92c9f0e33a",
"body": "Currently translated at 85.0% (662 of 778 strings)\n\nCo-authored-by: Alessandro Scarozza <xan.scale@gmail.com>",
"is_bot": false,
"headline": "l10n: Italian translation updated",
"author_name": "Alessandro Scarozza",
"author_login": "xanscale",
"committed_at": "2026-04-09T04:09:54Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 39,
"commits_last_year": 272,
"latest_release_at": "2026-07-24T18:27:30Z",
"latest_release_tag": "v1.1.5",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 41,
"days_since_latest_release": 1,
"mean_days_between_releases": 91.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 135,
"stars": 273,
"watchers": 13,
"fork_history": {
"days": [
{
"date": "2015-01-21",
"count": 1
},
{
"date": "2015-04-28",
"count": 1
},
{
"date": "2015-05-04",
"count": 1
},
{
"date": "2016-01-11",
"count": 1
},
{
"date": "2016-01-15",
"count": 1
},
{
"date": "2016-02-10",
"count": 1
},
{
"date": "2016-05-04",
"count": 1
},
{
"date": "2016-08-03",
"count": 1
},
{
"date": "2016-08-16",
"count": 1
},
{
"date": "2016-08-28",
"count": 1
},
{
"date": "2016-09-08",
"count": 1
},
{
"date": "2016-09-29",
"count": 1
},
{
"date": "2016-11-08",
"count": 1
},
{
"date": "2016-11-24",
"count": 1
},
{
"date": "2017-02-08",
"count": 1
},
{
"date": "2017-05-31",
"count": 1
},
{
"date": "2017-06-13",
"count": 1
},
{
"date": "2017-06-20",
"count": 1
},
{
"date": "2017-06-28",
"count": 1
},
{
"date": "2017-08-31",
"count": 1
},
{
"date": "2017-11-05",
"count": 1
},
{
"date": "2017-11-23",
"count": 1
},
{
"date": "2017-12-27",
"count": 1
},
{
"date": "2017-12-28",
"count": 1
},
{
"date": "2018-01-30",
"count": 2
},
{
"date": "2018-02-02",
"count": 1
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-08-22",
"count": 1
},
{
"date": "2018-10-07",
"count": 1
},
{
"date": "2018-10-31",
"count": 1
},
{
"date": "2018-12-04",
"count": 1
},
{
"date": "2019-04-12",
"count": 1
},
{
"date": "2019-04-23",
"count": 1
},
{
"date": "2019-05-17",
"count": 1
},
{
"date": "2019-11-30",
"count": 1
},
{
"date": "2019-12-28",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-26",
"count": 1
},
{
"date": "2020-04-23",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-06-28",
"count": 1
},
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-07-22",
"count": 1
},
{
"date": "2021-09-13",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2021-11-14",
"count": 1
},
{
"date": "2021-12-28",
"count": 1
},
{
"date": "2021-12-31",
"count": 1
},
{
"date": "2022-01-06",
"count": 1
},
{
"date": "2022-01-07",
"count": 1
},
{
"date": "2022-01-26",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-26",
"count": 1
},
{
"date": "2022-03-08",
"count": 1
},
{
"date": "2022-06-23",
"count": 1
},
{
"date": "2022-08-01",
"count": 1
},
{
"date": "2022-12-01",
"count": 1
},
{
"date": "2023-01-26",
"count": 1
},
{
"date": "2023-01-31",
"count": 1
},
{
"date": "2023-02-11",
"count": 1
},
{
"date": "2023-02-14",
"count": 1
},
{
"date": "2023-02-17",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-04-07",
"count": 1
},
{
"date": "2023-04-12",
"count": 1
},
{
"date": "2023-04-18",
"count": 1
},
{
"date": "2023-04-19",
"count": 1
},
{
"date": "2023-05-11",
"count": 1
},
{
"date": "2023-05-28",
"count": 1
},
{
"date": "2023-06-04",
"count": 1
},
{
"date": "2023-06-19",
"count": 1
},
{
"date": "2023-07-12",
"count": 1
},
{
"date": "2023-07-23",
"count": 1
},
{
"date": "2023-07-26",
"count": 2
},
{
"date": "2023-08-14",
"count": 1
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-09-08",
"count": 1
},
{
"date": "2023-09-09",
"count": 1
},
{
"date": "2023-09-22",
"count": 1
},
{
"date": "2023-09-23",
"count": 1
},
{
"date": "2023-09-29",
"count": 1
},
{
"date": "2023-10-08",
"count": 1
},
{
"date": "2023-10-15",
"count": 1
},
{
"date": "2023-10-18",
"count": 1
},
{
"date": "2023-10-21",
"count": 1
},
{
"date": "2023-10-26",
"count": 2
},
{
"date": "2023-11-24",
"count": 1
},
{
"date": "2023-12-08",
"count": 1
},
{
"date": "2023-12-10",
"count": 1
},
{
"date": "2024-01-07",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-02-14",
"count": 1
},
{
"date": "2024-02-19",
"count": 1
},
{
"date": "2024-02-20",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-02",
"count": 1
},
{
"date": "2024-03-26",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-08-31",
"count": 1
},
{
"date": "2024-09-01",
"count": 1
},
{
"date": "2024-09-05",
"count": 1
},
{
"date": "2024-09-18",
"count": 1
},
{
"date": "2024-11-12",
"count": 1
},
{
"date": "2024-11-30",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-16",
"count": 1
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-10",
"count": 1
},
{
"date": "2025-03-31",
"count": 1
},
{
"date": "2025-04-23",
"count": 1
},
{
"date": "2025-05-13",
"count": 1
},
{
"date": "2025-07-06",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-12",
"count": 1
},
{
"date": "2025-11-05",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-03-12",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-05-16",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 133,
"total_forks": 135
},
"star_history": null,
"open_issues_and_prs": 60
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 194020,
"source_files_sampled": 267,
"oversized_source_files": 8,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 231,
"open_issues": 54,
"closed_ratio": 0.879,
"closed_issues": 391,
"closed_unmerged_prs": 61
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "ximion",
"commits": 2991,
"avatar_url": "https://avatars.githubusercontent.com/u/417468?v=4"
},
{
"type": "User",
"login": "weblate",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/1607653?v=4"
},
{
"type": "User",
"login": "piotrdrag",
"commits": 80,
"avatar_url": "https://avatars.githubusercontent.com/u/139229?v=4"
},
{
"type": "User",
"login": "yurchor",
"commits": 73,
"avatar_url": "https://avatars.githubusercontent.com/u/2255859?v=4"
},
{
"type": "User",
"login": "haaninjo",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/2112909?v=4"
},
{
"type": "User",
"login": "aleixpol",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/1282478?v=4"
},
{
"type": "User",
"login": "rffontenelle",
"commits": 43,
"avatar_url": "https://avatars.githubusercontent.com/u/1571783?v=4"
},
{
"type": "User",
"login": "zerng07",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/1706450?v=4"
},
{
"type": "User",
"login": "pwithnall",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/53172?v=4"
},
{
"type": "User",
"login": "milotype",
"commits": 27,
"avatar_url": "https://avatars.githubusercontent.com/u/43657314?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.698
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-test.yml",
"codeql-analysis.yml",
"coverity.yml",
"label.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 40 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ac1b68ef692f1415784091c7a01bfe66f85b09f4",
"ran_at": "2026-07-25T18:29:44Z",
"aggregate_score": 6.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T18:57:56Z",
"oldest_open_prs": [
{
"number": 492,
"created_at": "2023-04-21T15:49:05Z",
"last_comment_at": "2023-08-08T08:16:12Z",
"last_comment_author": "ximion"
},
{
"number": 497,
"created_at": "2023-05-28T20:38:39Z",
"last_comment_at": "2023-08-02T16:21:29Z",
"last_comment_author": "ximion"
},
{
"number": 503,
"created_at": "2023-06-19T19:04:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 539,
"created_at": "2023-10-18T07:24:58Z",
"last_comment_at": "2024-02-28T08:37:06Z",
"last_comment_author": "JakobDev"
},
{
"number": 701,
"created_at": "2025-03-09T18:14:53Z",
"last_comment_at": "2025-04-14T00:14:52Z",
"last_comment_author": "ximion"
},
{
"number": 749,
"created_at": "2026-05-18T11:17:54Z",
"last_comment_at": "2026-05-18T14:02:02Z",
"last_comment_author": "razzeee"
}
],
"last_merged_pr_at": "2026-07-20T20:26:55Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 157,
"created_at": "2017-12-22T15:12:05Z",
"last_comment_at": "2017-12-29T00:50:01Z",
"last_comment_author": "ximion"
},
{
"number": 168,
"created_at": "2018-01-20T23:07:28Z",
"last_comment_at": "2024-05-15T10:10:03Z",
"last_comment_author": "n8willis"
},
{
"number": 231,
"created_at": "2019-04-24T18:38:59Z",
"last_comment_at": "2025-12-18T00:23:11Z",
"last_comment_author": "ximion"
},
{
"number": 280,
"created_at": "2020-07-04T13:47:14Z",
"last_comment_at": "2023-11-04T02:09:04Z",
"last_comment_author": "torkus"
},
{
"number": 314,
"created_at": "2021-05-06T23:44:34Z",
"last_comment_at": "2022-04-10T01:33:40Z",
"last_comment_author": "ximion"
},
{
"number": 316,
"created_at": "2021-05-19T21:13:23Z",
"last_comment_at": "2021-11-10T14:31:30Z",
"last_comment_author": "elsiehupp"
},
{
"number": 344,
"created_at": "2021-08-10T08:27:20Z",
"last_comment_at": "2021-09-27T22:05:36Z",
"last_comment_author": "sophie-h"
},
{
"number": 358,
"created_at": "2021-09-22T22:34:09Z",
"last_comment_at": "2021-09-27T02:49:33Z",
"last_comment_author": "ximion"
},
{
"number": 368,
"created_at": "2021-12-09T14:26:50Z",
"last_comment_at": "2022-02-21T11:22:26Z",
"last_comment_author": "ximion"
},
{
"number": 388,
"created_at": "2022-03-10T09:42:08Z",
"last_comment_at": "2022-04-08T15:08:21Z",
"last_comment_author": "ximion"
},
{
"number": 400,
"created_at": "2022-05-13T13:43:33Z",
"last_comment_at": "2023-02-23T22:50:42Z",
"last_comment_author": "bertob"
},
{
"number": 412,
"created_at": "2022-06-22T06:17:46Z",
"last_comment_at": "2025-02-21T21:56:49Z",
"last_comment_author": "JakobDev"
},
{
"number": 413,
"created_at": "2022-06-22T09:58:43Z",
"last_comment_at": "2023-10-04T23:52:44Z",
"last_comment_author": "ximion"
},
{
"number": 427,
"created_at": "2022-08-23T07:42:23Z",
"last_comment_at": "2024-05-24T18:27:03Z",
"last_comment_author": "ferdnyc"
},
{
"number": 429,
"created_at": "2022-08-24T22:53:50Z",
"last_comment_at": "2022-08-25T16:18:21Z",
"last_comment_author": "ximion"
},
{
"number": 439,
"created_at": "2022-10-21T22:00:03Z",
"last_comment_at": "2022-10-22T20:32:14Z",
"last_comment_author": "van-de-bugger"
},
{
"number": 493,
"created_at": "2023-04-23T07:27:14Z",
"last_comment_at": "2023-04-24T16:05:27Z",
"last_comment_author": "darkdragon-001"
},
{
"number": 502,
"created_at": "2023-06-18T12:29:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 512,
"created_at": "2023-08-11T17:02:23Z",
"last_comment_at": "2024-03-13T15:18:02Z",
"last_comment_author": "razzeee"
},
{
"number": 524,
"created_at": "2023-09-08T04:23:30Z",
"last_comment_at": "2023-10-14T03:15:45Z",
"last_comment_author": "ximion"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ximion/appstream",
"host": "github.com",
"name": "appstream",
"owner": "ximion"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"security": 67,
"vitality": 87,
"community": 64,
"governance": 56,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"commits_last_year": 272,
"human_commit_share": 0.98,
"days_since_last_push": 0,
"active_weeks_last_year": 41
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "41/52 weeks with commits",
"points": 28.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 41
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "272 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 272
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"releases_count": 39,
"latest_release_tag": "v1.1.5",
"releases_from_tags": true,
"days_since_latest_release": 1,
"mean_days_between_releases": 91.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "39 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 39
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~91.2 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 91.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 64,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"forks": 135,
"stars": 273,
"watchers": 13,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "273 stars",
"points": 39.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 273
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "135 forks",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 135
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "13 watchers",
"points": 6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 13
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (LGPL-2.1)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "LGPL-2.1"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 56,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 99,
"top_contributor_share": 0.698
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 70% of commits",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 70
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 40 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"merged_prs": 231,
"open_issues": 54,
"closed_issues": 391,
"issue_closed_ratio": 0.879,
"closed_unmerged_prs": 61
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "88% of issues closed",
"points": 41.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 88
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "231/292 decided PRs merged",
"points": 30.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 231,
"decided": 292
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"followers": 147,
"owner_type": "User",
"is_verified": null,
"owner_login": "ximion",
"public_repos": 109,
"account_age_days": 5780
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "147 followers of ximion",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 147,
"login": "ximion"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "109 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 109
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"appstream",
"appstream-specification",
"freedesktop",
"metadata",
"metainfo"
],
"has_wiki": false,
"homepage": "http://www.freedesktop.org/wiki/Distributions/AppStream/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://www.freedesktop.org/wiki/Distributions/AppStream/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 67,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 67,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 6.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 40 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.898,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "88 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 88,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 194020,
"source_files_sampled": 267,
"oversized_source_files": 8
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "8/267 source files over 60KB",
"points": 53.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 267,
"oversized": 8
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:30:01.051286Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/x/ximion/appstream.svg",
"full_name": "ximion/appstream",
"license_state": "standard",
"license_spdx": "LGPL-2.1"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken.