Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-30 22:54 UTC

zeebo / xxh3

XXH3 algorithm in Go

GoBSD-2-Clause★ 572 Sterne⑂ 33 Forksseit März 2019Auf GitHub ansehen ↗

zeebo/xxh3 erreicht einen Gesundheitsindex von 56 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Sustainability & Governance (69/100) ab, am schwächsten bei Engineering Quality (47/100). Zuletzt vor 7 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

56
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

56
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Jeff WendlingPersönliches Konto
356 Follower105 öffentliche Reposseit Juni 2009

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Gogithub.com/zeebo/xxh3v1.1.0-15vor 188 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

47Gefährdet · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 7 Tagen
1.4/36Commit-Rhythmus — 2/52 Wochen mit Commits
6.3/18Commit-Volumen — 4 Commits im letzten Jahr
1/10OpenSSF Scorecard: Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Verwendete Eingangsdaten
commits_last_year4
human_commit_share1
days_since_last_push7
active_weeks_last_year2
Wie die Bewertung erfolgt
16.2/27Liefert Releases aus — 15 Versions-Tags (keine GitHub-Releases)
16.2/36Release-Aktualität — letztes Release vor 188 Tagen
12.6/27Release-Rhythmus — ein Release etwa alle 187,9 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count15
latest_release_tagv1.1.0
releases_from_tagsja
days_since_latest_release188
mean_days_between_releases187,9
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

57Mittel · 18 % des Gesamtindex
Wie die Bewertung erfolgt
44.7/60Stars — 572 Stars
12.5/25Forks — 33 Forks
6.2/15Watcher — 14 Watcher
Verwendete Eingangsdaten
forks33
stars572
watchers14
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (BSD-2-Clause)
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

69Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
9.7/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 57 % der Commits
8.1/13.5Breite der Beitragenden — 6 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10
Verwendete Eingangsdaten
bus_factor1
contributors_sampled6
top_contributor_share0,571
Wie die Bewertung erfolgt
46.8/46.8Issue-Lösungsquote — 100 % der Issues geschlossen
32.2/38.3PR-Annahme — 16/19 entschiedene PRs gemergt
10.5/15OpenSSF Scorecard: Code-Review — Found 12/17 approved changesets -- score normalized to 7
Verwendete Eingangsdaten
merged_prs16
open_issues0
closed_issues8
issue_closed_ratio1
closed_unmerged_prs3
Wie die Bewertung erfolgt
10/30Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20Verifizierte Domain — für Nutzerkonten nicht anwendbar
18.4/25Reichweite des Inhabers — 356 Follower von zeebo
25/25Kontohistorie — 105 öffentliche Repos, Kontoalter ca. 17 Jahre
Verwendete Eingangsdaten
followers356
owner_typeUser
is_verified
owner_loginzeebo
public_repos105
account_age_days6.250
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

91Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf go
26/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 188 Tagen
20/20Versionshistorie — 15 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesgithub.com/zeebo/xxh3
ecosystemsgo
any_deprecatednein
min_days_since_publish188

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

47Gefährdet · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 1 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
4/20OpenSSF Scorecard: CI-Tests — 3 out of 12 merged PRs checked by a CI test -- score normalized to 2
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein

Dokumentation

40Gefährdet
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
0/10Topics
0/10Wiki
Verwendete Eingangsdaten
topics
has_wikinein
homepage
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

61Mittel · 16 % des Gesamtindex
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0.5/2.5CI-Tests — 3 out of 12 merged PRs checked by a CI test -- score normalized to 2
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
5.2/7.5Code-Review — Found 12/17 approved changesets -- score normalized to 7
2.5/2.5Contributors — project has 3 contributing companies or organizations -- score normalized to 10
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
0.8/7.5Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
0/5Packaging — keine Daten
5/5Pinned-Dependencies — all dependencies are pinned
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
7.5/7.5Token-Permissions — GitHub workflow tokens follow principle of least privilege
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate5,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories4
affected_packages2
assessed_packages11
unassessed_packages0
affected_by_severitymoderate 1, unknown 1
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 11 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

55Mittel · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
12.5/40Lesbare Commit-Historie — 18 von 77 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,234
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — Makefile
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — Go (statisch typisiert)
10/10Reproduzierbare Umgebung — lockfile
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 77
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
10/10OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesgo.sum
has_dockerfilenein
typed_languageja
bootstrap_filesMakefile
has_devcontainernein
has_linter_confignein
typecheck_configs
agent_commit_share0
toolchain_manifestsavo/go.mod, go.mod, internal/compare/go.mod
dependency_bot_commit_share0
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — Go (statisch typisiert)
52.8/55Handhabbare Dateigrößen — 1/25 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageGo
largest_source_bytes517.841
source_files_sampled25
oversized_source_files1

Eckdaten

572GitHub-Sterne
6Mitwirkende
4Commits, letzte 12 Monate
7Tage seit letztem Push
15Releases
1Bus-Faktor
0offene Issues
GoPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 33 ⇿
0Sterne
33Forks
15Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

01325383322019-032022-112026-07
Major 1Minor 7Patch 4

Jeder Punkt umfasst 7 Tage.

OpenSSF Scorecard 5.1 / 10
5.1Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-30 22:54 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
2CI-Tests3 out of 12 merged PRs checked by a CI test -- score normalized to 2
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
7Code-ReviewFound 12/17 approved changesets -- score normalized to 7
10Contributorsproject has 3 contributing companies or organizations -- score normalized to 10
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
1Maintained2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
k. A.Packagingpackaging workflow not detected
10Pinned-Dependenciesall dependencies are pinned
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
10Token-PermissionsGitHub workflow tokens follow principle of least privilege
8Vulnerabilities2 existing vulnerabilities detected
Direkte Abhängigkeiten 3
RegistryPaketVersionsvorgabeManifest
Gogithub.com/mmcloughlin/avov0.4.0avo/go.mod
Gogithub.com/klauspost/cpuid/v2v2.2.10go.mod
Gogithub.com/zeebo/assertv1.3.0go.mod
Alle Abhängigkeiten 11

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 4 direkte und 7 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Gogithub.com/klauspost/cpuid/v22.2.10direkt
Gogithub.com/mmcloughlin/avo0.2.0direkt
Gogithub.com/mmcloughlin/avov0.4.0direkt
Gogithub.com/zeebo/assert1.3.0direkt
Gogithub.com/cespare/xxhash1.1.0indirekt
Gogithub.com/zeebo/xxh30.0.0-20190706061215-e3a4ded7d14findirekt
Gogolang.org/x/modv0.4.2indirekt
Gogolang.org/x/sys0.30.0indirekt
Gogolang.org/x/sysv0.0.0-20211030160813-b3129d9d1021indirekt
Gogolang.org/x/toolsv0.1.7indirekt
Gogolang.org/x/xerrorsv0.0.0-20200804184101-5ec99f83aff1indirekt
Abhängigkeits-Advisories 2

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 11 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 2 tragen bekannte Advisories, davon 0 direkte.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
golang.org/x/sysv0.0.0-20211030160813-b3129d9d1021indirektmittel31.18.2
golang.org/x/sys0.30.0indirektunbekannt10.44.0

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 5414,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "C": 848,
        "Go": 600105,
        "Assembly": 59919,
        "Makefile": 719
      },
      "pushed_at": "2026-07-23T22:41:38Z",
      "created_at": "2019-03-17T23:26:43Z",
      "owner_type": "User",
      "updated_at": "2026-07-26T16:11:54Z",
      "description": "XXH3 algorithm in Go",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-2-Clause",
      "default_branch": "master",
      "license_spdx_raw": "BSD-2-Clause",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Jeff Wendling",
      "type": "User",
      "login": "zeebo",
      "company": null,
      "location": "Virginia Beach, VA",
      "followers": 356,
      "avatar_url": "https://avatars.githubusercontent.com/u/96925?v=4",
      "created_at": "2009-06-19T05:19:54Z",
      "is_verified": null,
      "public_repos": 105,
      "account_age_days": 6250
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-2-Clause",
      "raw_spdx": "BSD-2-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-01-23T19:18:08Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2022-03-05T19:10:09Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2021-11-11T20:57:19Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2021-11-11T18:25:25Z"
        },
        {
          "tag": "v1.0.0-rc3",
          "kind": "prerelease",
          "published_at": "2021-09-18T14:58:39Z"
        },
        {
          "tag": "v1.0.0-rc2",
          "kind": "prerelease",
          "published_at": "2021-09-09T16:25:19Z"
        },
        {
          "tag": "v1.0.0-rc1",
          "kind": "prerelease",
          "published_at": "2021-08-25T19:10:33Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2021-08-25T19:10:33Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2021-06-22T16:15:34Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2021-06-07T21:47:43Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2021-01-12T23:13:13Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2020-12-22T03:54:38Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2020-08-04T21:20:10Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2020-08-04T16:06:42Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2020-07-28T03:12:38Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "c88f7bdcf992747bcde31a76de5e94cad79426c3",
          "body": null,
          "is_bot": false,
          "headline": "Clarify seed impact.",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2026-07-23T22:41:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2753f35c38f296b7b001337a90dfe2fb16932cf0",
          "body": "Adds benchmarks on AMD Ryzen 9 9950X as well as 128 and seeded small sizes.",
          "is_bot": false,
          "headline": "Update benchmarks",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2026-07-23T22:41:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84cc04fc61771ea2a564c57277a19f83217a84ff",
          "body": null,
          "is_bot": false,
          "headline": "Just run `gofmt -w .`",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2026-01-23T19:18:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d67f069b68d7b71152be7653b42f571b7feb0322",
          "body": "Tested with QEMU. My test script:\n\n```\necho Building ARM64 test binary...\nset GOOS=linux\nset GOARCH=arm64\ngo test -c -o xxh3_arm64.test\n\nif %ERRORLEVEL% neq 0 (\n    echo Build failed!\n    SET GOOS=windows\n    SET GOARCH=amd64\n    exit /b %ERRORLEVEL%\n)\n\nSET GOOS=windows\nSET GOARCH=amd64\n\necho Runnin\n[…]\nLIMIT=2GiB -v \"%cd%:/work\" -w /work arm64v8/alpine ./xxh3_arm64.test %*\n```\n\nAdding CI for `ubuntu-24.04-arm` which should test on real HW. Updates various CI aspects as well.\n\nAI assisted code, fwiw.",
          "is_bot": false,
          "headline": "Add arm64 NEON path",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2026-01-23T19:18:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77e65e1f514fb3917bee0f8b08d8055f8f2d06c0",
          "body": "Combine 2 iterations into one, instead of relying on out-of-order execution.\n\nSomewhere in the area of 1.3x speed:\n\n```\nBenchmarkFixed128/1024-AVX512/default-32          44128.15      44238.53      1.00x\nBenchmarkFixed128/1024-AVX512/seed-32             34396.41      34763.09      1.01x\nBenchmarkFix\n[…]\n/65536/sse2/plain-32            46018.63      45949.57      1.00x\nBenchmarkHasher128/65536/sse2/seed-32             45743.47      45791.77      1.00x\n```\n\nTested on AMD Ryzen 9 9950X 16-Core Processor",
          "is_bot": false,
          "headline": "Improve AVX512 hashing",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2025-07-24T18:59:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4b2280ee9dafac56b843a55cbf330a9f80fc8f5e",
          "body": "The Hasher returns size 8. Add a Hasher128 type that returns size 16.\n\nOtherwise it is mostly just a wrapper around Hasher.\n\nAdds `ResetSeed(uint64)` to both that allows re-use with a new seed.\n\nBumps dependencies, CI and min version to 1.22.",
          "is_bot": false,
          "headline": "Add 128 bit hasher",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2025-03-10T22:37:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3808c706a06a56abd56cecf5a2760d3ba1e2e49a",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade CI versions",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2023-05-02T18:19:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a4a65f1295e046689e9636ab562396cadea38e7",
          "body": "* Accumulate in separate registers in large loop to reduce latency.\n* Load (reused) keys in unused AVX2 registers.\n* Increase prefetch length in AVX2.\n\nBenchmarks are a bit noisy from run to run, probably allocation alignment.\n\n```\nname                                old time/op    new time/op    de\n[…]\n   21.4GB/s ± 0%  21.7GB/s ± 1%   +1.11%          (p=0.024 n=3+6)\n```\n\nMy Zen 2 has memory -> register aliasing - this is not present on Intel, so they preloaded keys should help other platforms more.",
          "is_bot": false,
          "headline": "Small speedup in AVX2/AVX512",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2023-05-02T18:19:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b1e819c6d4dd3d92c02786b8817781eb1907f33",
          "body": "* Only accumulate once to memory.\n* Use cast instead of AND to truncate.\n* Use binary.LittleEndian - observed some cases where it didn't use single instruction to load while testing.\n* Make code a bit easier to copy+paste. Tried a function, but it wouldn't inline properly.\n\n```\nbenchmark            \n[…]\need-32       8352.93      11624.47     1.39x\nBenchmarkHasher64/268435456/go/plain-32     8106.82      11731.01     1.45x\nBenchmarkHasher64/268435456/go/seed-32      8086.88      11628.85     1.44x\n```",
          "is_bot": false,
          "headline": "Improve pure Go speed up to 45%",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2023-01-05T19:08:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44d8fda7850acee1b5f3af5b347300eda0e51c3a",
          "body": "…gitignore. (#20)\n\n* add license header. gitignore Go test coverage output files.\r\n\r\n* update license\r\n\r\n* update license\r\n\r\n* update license\r\n\r\n* update license",
          "is_bot": false,
          "headline": "Make LICENSE recognized by GitHub. Add test coverage output files to …",
          "author_name": "Wu Tingfeng",
          "author_login": "elliotwutingfeng",
          "committed_at": "2022-09-11T13:41:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6b0fd3c7bb50f49d637174ab61e39c0aa684c8c",
          "body": "the trick to dispatch to one of two functions by picking it\nand putting it into a variable to allow the body to be inlined\nhas a problem: the compiler, seeing the virtual dispatch, is\nnot smart enough to notice that every option does not escape\nthe argument, and so it escapes the argument.\n\nremove that and refactor some to gain some lost performance.\nsome smaller sizes are worse by <1ns, but some larger sizes\nare better by up to 15%, and nothing escapes anymore.\n\nfixes #19",
          "is_bot": false,
          "headline": "stop escaping input argument",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2022-03-05T19:10:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d10cc761c3ac023dca9b8430e283c0cd1a2ec8d4",
          "body": null,
          "is_bot": false,
          "headline": "run generation in avo dir",
          "author_name": "Michael McLoughlin",
          "author_login": "mmcloughlin",
          "committed_at": "2021-11-13T22:31:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "299cfcfbc94ebb9fc63bdfb5b94a1ad592ec2ea1",
          "body": null,
          "is_bot": false,
          "headline": "bump action versions",
          "author_name": "Michael McLoughlin",
          "author_login": "mmcloughlin",
          "committed_at": "2021-11-13T22:31:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a54267d32c1cd4c9b552f032bbf1f628ebb2d452",
          "body": null,
          "is_bot": false,
          "headline": "ci: initial setup",
          "author_name": "Michael McLoughlin",
          "author_login": "mmcloughlin",
          "committed_at": "2021-11-13T22:31:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68d38d44cdcb65f09d27d5b33073b37166984e86",
          "body": null,
          "is_bot": false,
          "headline": "avo: enable avx-512 code generation",
          "author_name": "Michael McLoughlin",
          "author_login": "mmcloughlin",
          "committed_at": "2021-11-13T21:58:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c705a75d35378ad312eb792db00f0f8cfab22d3",
          "body": null,
          "is_bot": false,
          "headline": "make zero value Hasher valid",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-11-11T20:57:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6f3405609608b273c1432491e03ab66c3cc9b9f",
          "body": null,
          "is_bot": false,
          "headline": "go vet on more combos and fix test builds",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-11-11T18:25:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fcf65311c1ed53de8363080067f1174478a9ae0",
          "body": "Add missing stub.\n\nFixes #15",
          "is_bot": false,
          "headline": "Fix non-amd64 builds",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-11-11T18:18:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c77878a38204ad8387a289edbfcd673b34733b1d",
          "body": "1. moves some shared things into utils.go\n2. allows the Hash*Seed versions to be inlined\n3. changes the Hasher copy-avoiding loop to avoid bounds checks\n\nselected benchmarks with double digit deltas:\n\n\tname                         old time/op   new time/op    delta\n\tFixed128/0/seed              5.79\n[…]\ningle digit improvements and some minor\nregressions on the order of 3% or less that, when looking at\nprofiles, seem to be due to code alignment motion because\nthe profile deltas are in untouched code.",
          "is_bot": false,
          "headline": "some code motion and minor improvements",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-09-21T23:24:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae2b1423b2eea97bbc49dfc7d20de688bde5e3a7",
          "body": "Add loop that processes initial blocks without copying:\n```\nbenchmark                                      old ns/op     new ns/op     delta\nBenchmarkHasher64/16/go/plain-32               9.07          9.34          +2.95%\nBenchmarkHasher64/16/go/seed-32                9.92          10.5          +5\n[…]\n2      10765.79     19965.06     1.85x\nBenchmarkHasher128/268435456/sse2/plain-32     8963.10      16125.60     1.80x\nBenchmarkHasher128/268435456/sse2/seed-32      8926.73      15872.16     1.78x\n```",
          "is_bot": false,
          "headline": "Add preloop processing",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-21T21:23:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "226faff1ffc94829a47683946a34eb2e32db803d",
          "body": null,
          "is_bot": false,
          "headline": "Add hasher benchmark.",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-21T21:23:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d489ec08be0ddb0cb69440e4542fcdcb7f5ab1c",
          "body": "…peed of unseeded operations.\n\n64 bits ported from #4, and added to Hasher. 128 bits: New code.\n\n```\ncpu: AMD Ryzen 9 3950X 16-Core Processor\nBenchmarkFixed64/0/default-32         \t502115580\t         2.427 ns/op\nBenchmarkFixed64/0/seed-32            \t456687386\t         2.626 ns/op\nBenchmarkFixed64/1\n[…]\n00000/default-32           \t      81\t  13826001 ns/op\t7406.34 MB/s\nBenchmarkFixed128/102400000/seed-32              \t      90\t  13166462 ns/op\t7777.34 MB/s\nPASS\nok  \tgithub.com/zeebo/xxh3\t121.753s\n```",
          "is_bot": false,
          "headline": "Updated version of #4 that duplicates code for seed support to keep s…",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-21T21:23:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b240456d6788ac4be6c7826daa84f545f70bbb6a",
          "body": "for sizes larger than a block+stripe (so 1088 bytes)\nthe Hasher would output the wrong value. this was due\nto a bug caused by having reversed arguments to a copy\ncall. the test did not catch it because it too had a\nbug where it was generating very aligned data bytes.\n\nthe reason why it does this cop\n[…]\nis because the final\naccumulation step always reads a stripe backwards from\nthe end, so if we just accumulated a block and then\nneed to finalize, it reads in the last stripe of bytes\nagain.\n\nfixes #14",
          "is_bot": false,
          "headline": "fix incorrect Hasher output",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-09-18T14:58:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "669a5fc93c85358bc694db28b3f981fb2e670f10",
          "body": null,
          "is_bot": false,
          "headline": "Lower for bench",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "def0ac37cc4eeca312d0fe084f7fd0330239d5d0",
          "body": null,
          "is_bot": false,
          "headline": "Disable in sum.",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e07b41833e0815d6af9f0645db324eeec69012b8",
          "body": null,
          "is_bot": false,
          "headline": "Tidy",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01a91e30d2977f4163c1be1f1eea0586830a62ee",
          "body": null,
          "is_bot": false,
          "headline": "Switch over at 8K",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5159a18def62c9076da7d48eb8c31973e1a972a2",
          "body": null,
          "is_bot": false,
          "headline": "Disable avo generation.",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d6d3ec9e41e086a1740e32d5edef8015902af03",
          "body": null,
          "is_bot": false,
          "headline": "Test more extensively. Load acc and prime earlier.",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "873a68a6348e9ce03ed8ebe376b82968bcc43ed0",
          "body": null,
          "is_bot": false,
          "headline": "Test bigger sizes for avx512",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d23613748e57b15df5391332bfb5492a6c2ecc89",
          "body": null,
          "is_bot": false,
          "headline": "Use correct key offsets for final part and unroll.",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eee8582c2debd90d7ca7c790afda4ea06a6e6f51",
          "body": null,
          "is_bot": false,
          "headline": "Update benches",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7729416bcdaa9bab1793f26c6b35347932f1c575",
          "body": null,
          "is_bot": false,
          "headline": "Add avx512",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-16T14:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15f67708de02ef41cc25e03200a710e42df3e146",
          "body": "This worked because of alignment. Instead use explicit uint64s.",
          "is_bot": false,
          "headline": "Use correct sized constant",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-09-09T16:25:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1e814efae8b2845fac4fdca2545343b8eee9dae",
          "body": null,
          "is_bot": false,
          "headline": "Update Makefile",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-08-30T15:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4412dc64532f8d18f07c98a7482eee62497ca5b",
          "body": "* Add missing `VZEROUPPER`.\n* Prefetch on large blocks.\n* Use \"unrolled\" accumulate.\n* Splat prime value.\n* Test larger data sizes.",
          "is_bot": false,
          "headline": "Improve avx2 hash speed",
          "author_name": "Klaus Post",
          "author_login": "klauspost",
          "committed_at": "2021-08-30T15:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97ecdea48bc95ef530e22931e47fb0b319baff59",
          "body": null,
          "is_bot": false,
          "headline": "add VZEROUPPER after avx2 routines",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-08-30T14:42:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b74a5ff8050b3f33891a4088713f0df33850ed6e",
          "body": null,
          "is_bot": false,
          "headline": "whoops, forgot to rename these functions",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-08-25T19:45:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84986888ae1428c0ca31973320729b4eb22a1d20",
          "body": "This change adds a Hasher type that implements hash.Hash. It\nhas to keep a trailing stripe because the finalization step\nends up reading up to a stripe from the end of the buffer after\na full block has been consumed.\n\nIn order to implement it, a new accumBlock function was introduced\nthat does the f\n[…]\nade doing\nthat. It also helps reduce some duplication by making the cpu\nfeature flags constants on unsupported architectures so that\nthe compiler can just dead-code eliminate some branches.\n\nFixes #7.",
          "is_bot": false,
          "headline": "add Hasher for hash.Hash and clean up",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-08-25T19:10:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "83b8bd2fd42cef830953b379194167e6cf5c8e98",
          "body": null,
          "is_bot": false,
          "headline": "bugfix hashLarge128 returning type is invalid on arm",
          "author_name": "kpango",
          "author_login": "kpango",
          "committed_at": "2021-08-24T12:31:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40186c28ae7ab381b0f691dafe00217a9c4469dd",
          "body": null,
          "is_bot": false,
          "headline": "bump avo and stop using BP",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-06-22T16:15:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa77918a91d2ff5488d411fac0e0a8f817838da7",
          "body": "if your code broke because of this change, i would first like\nto apologize. let me try to explain why i decided to do this\neven though it would be breaking.\n\nfirst, it's a v0 library. this is just a necessary condition\nthough not sufficient. if it were v1, i would have to do\nsomething else. second, \n[…]\nd if i could ship this change with a gofix to do that, i would.\nanyway, sorry again. i hope you agree that it was worth it. all\napproximately 5 of you at the time of this commit according to\ndeps.dev.",
          "is_bot": false,
          "headline": "return struct for hash128",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-06-07T21:47:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f2044e294495f360a11cf14c895ae7b0434507d",
          "body": null,
          "is_bot": false,
          "headline": "fix build on 386",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-01-12T23:13:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "080c33317758e0ec9c45fc8ec7f9b2cbe2ebec25",
          "body": null,
          "is_bot": false,
          "headline": "go mod tidy + improve benchmark optimization robustness",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2021-01-11T19:25:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eea700f168ab5209862f9e1d8b2289094aab35d7",
          "body": null,
          "is_bot": false,
          "headline": "oops fix build",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-12-22T03:54:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10f92285dc712730cbb205537721cd7af4c86130",
          "body": null,
          "is_bot": false,
          "headline": "add Hash128 and HashString128",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-12-22T03:53:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf3d1f174e93f7fad0ddd6c4e1f71a5ed98eae0f",
          "body": null,
          "is_bot": false,
          "headline": "perf improvments for small strings",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-08-04T21:20:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6690994e5930cc078adbc4d501f809e544f685a3",
          "body": null,
          "is_bot": false,
          "headline": "fix poor module dependency",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-08-04T16:06:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53cd649b33f7dc7103a8124a2660faa8292c1f8b",
          "body": null,
          "is_bot": false,
          "headline": "update readme",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-07-28T03:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4d80574a8617d452a98e74d80dbe41dc043b0f5",
          "body": null,
          "is_bot": false,
          "headline": "get vectorized versions working",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-07-28T03:04:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d0960d7df24eafef7b29d7ff5eaaf2371516581",
          "body": null,
          "is_bot": false,
          "headline": "resolve lint issues",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-07-28T02:19:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a5e52988e33d28ae1c8e7b6835fb5527b1cc4ce",
          "body": null,
          "is_bot": false,
          "headline": "get scalar version working",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-07-28T02:09:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cb7e48ed9d675c4380b3b9343645044dc893d05",
          "body": null,
          "is_bot": false,
          "headline": "update compat to v0.8.0",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2020-07-28T00:21:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65f423c10688c362d2a2ce6987b665c72ee7bddd",
          "body": null,
          "is_bot": false,
          "headline": "add stability caveat",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-12-27T22:02:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b56a7dc3d80c3466239c8dae00de383d4ffadf9a",
          "body": null,
          "is_bot": false,
          "headline": "checkptr: fix unaligned reads and pointers past end",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-10-21T17:41:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83a7230063d07d7701e2bfd14523b85c46255caf",
          "body": "xxh3: fix non-amd64 build",
          "is_bot": false,
          "headline": "Merge pull request #2 from mdlayher/mdl-otherarch",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-09-23T15:35:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d4834599e09bdcbd597c56e47f76393c7d1f30f",
          "body": "Signed-off-by: Matt Layher <mdlayher@gmail.com>",
          "is_bot": false,
          "headline": "xxh3: fix non-amd64 build",
          "author_name": "Matt Layher",
          "author_login": "mdlayher",
          "committed_at": "2019-09-20T18:53:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e75bc3ac09dcfac540f620ce3183e2728e9fc01",
          "body": null,
          "is_bot": false,
          "headline": "rename _avo to avo to avoid some module issues",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-08-29T03:20:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cef1e81095a7caea78038d9b18686a80ea40c138",
          "body": null,
          "is_bot": false,
          "headline": "move compare into internal",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-08-29T02:36:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2364e7dd6a0d0438df5a84073e694cd5450c09e9",
          "body": null,
          "is_bot": false,
          "headline": "move avo tooling into its own module",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-08-29T02:34:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "518846a5db2fc1a16eca3746c93b052729979dae",
          "body": null,
          "is_bot": false,
          "headline": "updates",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-08-17T21:30:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "016cf9b7a3dd091bc9b0505f5accf17d073f9e69",
          "body": null,
          "is_bot": false,
          "headline": "reorder some branches",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-07-23T17:11:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3a4ded7d14f96371ccbf6b59cdd172a0ff92202",
          "body": null,
          "is_bot": false,
          "headline": "less long lines and more constants",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-07-06T06:12:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f368a5b1d0bde124dfe767d06e09ccbf418868d",
          "body": null,
          "is_bot": false,
          "headline": "also check HashString",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-07-06T05:58:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27eba1deae7fadb3e99a6bfb6a2fca8332eea8fb",
          "body": null,
          "is_bot": false,
          "headline": "cleanups",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-07-06T05:44:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96e11339343b008cd3c447100d1f43df6da5c413",
          "body": null,
          "is_bot": false,
          "headline": "oops, left in some comments",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-07-06T04:03:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb699a89937bcbf414085ef57f41d469676717b6",
          "body": null,
          "is_bot": false,
          "headline": "update to latest xxh3 upstream",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-07-06T04:02:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "148601fe83bd4806fadf0a885552702ac05533ee",
          "body": null,
          "is_bot": false,
          "headline": "simplify table more",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-04-02T18:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "658b0066ca861853f2d9305fa8909a57baf9cad0",
          "body": null,
          "is_bot": false,
          "headline": "refactor and update readme",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-04-02T18:05:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a50d83555831d879dc856dac547f4aa20e28a4f",
          "body": null,
          "is_bot": false,
          "headline": "some cleanups",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-04-01T17:21:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bb78cf13073ae2000bbe4cc77c9c7409c9ed053",
          "body": null,
          "is_bot": false,
          "headline": "update to newer algo",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-30T16:06:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48c472f3f4d13859ea6c06561250cac80566c2e7",
          "body": null,
          "is_bot": false,
          "headline": "add basic avx2 support",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-19T03:05:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c65bcf4ed7ac8f1ba1eac0cdbcc128a9a02bd99c",
          "body": null,
          "is_bot": false,
          "headline": "fix formatting of table",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-18T01:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "342e62e5a0f535ea982389518be3015c1679504e",
          "body": null,
          "is_bot": false,
          "headline": "mid stack inlining and reduce benchmark set. 20% better for <= 16 bytes!",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-18T01:12:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "874651d0d6526151fb5b1a41f8f2b3641bead524",
          "body": null,
          "is_bot": false,
          "headline": "golint",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-17T23:29:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01ed208985eacd3f366223f67506c6be2d0eb35f",
          "body": null,
          "is_bot": false,
          "headline": "whoopsie used wrong repo for badges",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-17T23:27:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b82cf043904d5d984819e873d2b04f5b277b7a2",
          "body": null,
          "is_bot": false,
          "headline": "initial commit",
          "author_name": "Jeff Wendling",
          "author_login": "zeebo",
          "committed_at": "2019-03-17T23:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 15,
      "commits_last_year": 4,
      "latest_release_at": "2026-01-23T19:18:08Z",
      "latest_release_tag": "v1.1.0",
      "releases_from_tags": true,
      "days_since_last_push": 7,
      "active_weeks_last_year": 2,
      "days_since_latest_release": 188,
      "mean_days_between_releases": 187.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/zeebo/xxh3",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/zeebo/xxh3",
          "is_deprecated": false,
          "latest_version": "v1.1.0",
          "repository_url": "https://github.com/zeebo/xxh3",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-01-23T19:18:08Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 188
        }
      ]
    },
    "popularity": {
      "forks": 33,
      "stars": 572,
      "watchers": 14,
      "fork_history": {
        "days": [
          {
            "date": "2019-03-18",
            "count": 1
          },
          {
            "date": "2019-09-20",
            "count": 1
          },
          {
            "date": "2020-07-19",
            "count": 1
          },
          {
            "date": "2020-08-21",
            "count": 1
          },
          {
            "date": "2021-01-10",
            "count": 1
          },
          {
            "date": "2021-01-26",
            "count": 1
          },
          {
            "date": "2021-06-30",
            "count": 1
          },
          {
            "date": "2021-07-30",
            "count": 1
          },
          {
            "date": "2021-08-18",
            "count": 1
          },
          {
            "date": "2021-09-08",
            "count": 1
          },
          {
            "date": "2021-09-09",
            "count": 1
          },
          {
            "date": "2021-10-18",
            "count": 1
          },
          {
            "date": "2021-11-13",
            "count": 1
          },
          {
            "date": "2022-03-15",
            "count": 1
          },
          {
            "date": "2022-09-11",
            "count": 1
          },
          {
            "date": "2023-08-20",
            "count": 1
          },
          {
            "date": "2023-08-23",
            "count": 1
          },
          {
            "date": "2023-09-18",
            "count": 1
          },
          {
            "date": "2024-01-14",
            "count": 1
          },
          {
            "date": "2024-12-03",
            "count": 1
          },
          {
            "date": "2025-02-18",
            "count": 1
          },
          {
            "date": "2025-03-09",
            "count": 1
          },
          {
            "date": "2025-04-23",
            "count": 1
          },
          {
            "date": "2025-05-16",
            "count": 1
          },
          {
            "date": "2025-05-18",
            "count": 1
          },
          {
            "date": "2025-05-30",
            "count": 1
          },
          {
            "date": "2025-09-09",
            "count": 1
          },
          {
            "date": "2025-10-04",
            "count": 1
          },
          {
            "date": "2025-11-01",
            "count": 1
          },
          {
            "date": "2025-11-06",
            "count": 1
          },
          {
            "date": "2025-12-06",
            "count": 1
          },
          {
            "date": "2026-06-01",
            "count": 1
          },
          {
            "date": "2026-07-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 33,
        "total_forks": 33
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "avo/go.mod",
        "go.mod",
        "internal/compare/go.mod"
      ],
      "largest_source_bytes": 517841,
      "source_files_sampled": 25,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "avo/go.mod",
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.0.0-20211030160813-b3129d9d1021",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-p782-xgp4-8hr8",
              "GO-2022-0493",
              "GO-2026-5024"
            ],
            "fixed_version": "1.18.2",
            "advisory_count": 3,
            "oldest_advisory_days": 1497
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "0.30.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 69
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1,
          "moderate": 1
        },
        "advisory_count": 4,
        "affected_count": 2,
        "assessed_count": 11,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/mmcloughlin/avo",
          "manifest": "avo/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "github.com/klauspost/cpuid/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.2.10"
        },
        {
          "name": "github.com/zeebo/assert",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": true,
            "version": "2.2.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mmcloughlin/avo",
            "direct": true,
            "version": "0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mmcloughlin/avo",
            "direct": true,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zeebo/assert",
            "direct": true,
            "version": "1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zeebo/xxh3",
            "direct": false,
            "version": "0.0.0-20190706061215-e3a4ded7d14f",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.4.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "0.30.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.0.0-20211030160813-b3129d9d1021",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.1.7",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20200804184101-5ec99f83aff1",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 11,
        "direct_count": 4,
        "indirect_count": 7
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 16,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 8,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "zeebo",
          "commits": 44,
          "avatar_url": "https://avatars.githubusercontent.com/u/96925?v=4"
        },
        {
          "type": "User",
          "login": "klauspost",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/5663952?v=4"
        },
        {
          "type": "User",
          "login": "mmcloughlin",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/7133685?v=4"
        },
        {
          "type": "User",
          "login": "mdlayher",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1926905?v=4"
        },
        {
          "type": "User",
          "login": "elliotwutingfeng",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/30223404?v=4"
        },
        {
          "type": "User",
          "login": "kpango",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/9798091?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.571
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 2,
            "reason": "3 out of 12 merged PRs checked by a CI test -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 7,
            "reason": "Found 12/17 approved changesets -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 1,
            "reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "c88f7bdcf992747bcde31a76de5e94cad79426c3",
        "ran_at": "2026-07-30T22:54:16Z",
        "aggregate_score": 5.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T22:43:02Z",
      "oldest_open_prs": [
        {
          "number": 26,
          "created_at": "2025-11-06T15:34:48Z",
          "last_comment_at": "2026-05-14T13:54:47Z",
          "last_comment_author": "heitorPB"
        },
        {
          "number": 28,
          "created_at": "2026-06-01T13:31:21Z",
          "last_comment_at": "2026-07-07T12:08:59Z",
          "last_comment_author": "klauspost"
        }
      ],
      "last_merged_pr_at": "2026-07-23T22:41:38Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/zeebo/xxh3",
    "host": "github.com",
    "name": "xxh3",
    "owner": "zeebo"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 56,
      "inputs": {
        "security": 61,
        "vitality": 47,
        "community": 57,
        "governance": 69,
        "engineering": 47
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 47,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "at_risk",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "commits_last_year": 4,
              "human_commit_share": 1,
              "days_since_last_push": 7,
              "active_weeks_last_year": 2
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "2/52 weeks with commits",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "4 commits in the last year",
                "points": 6.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "moderate",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "releases_count": 15,
              "latest_release_tag": "v1.1.0",
              "releases_from_tags": true,
              "days_since_latest_release": 188,
              "mean_days_between_releases": 187.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "15 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 188 days ago",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 188
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~187.9 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 187.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 7,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 7 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 57,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "forks": 33,
              "stars": 572,
              "watchers": 14,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "572 stars",
                "points": 44.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 572
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "33 forks",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 33
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "14 watchers",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-2-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-2-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 69,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.571
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 57% of commits",
                "points": 9.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 57
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "merged_prs": 16,
              "open_issues": 0,
              "closed_issues": 8,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "16/19 decided PRs merged",
                "points": 32.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 16,
                      "decided": 19
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 12/17 approved changesets -- score normalized to 7",
                "points": 10.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "followers": 356,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "zeebo",
              "public_repos": 105,
              "account_age_days": 6250
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "356 followers of zeebo",
                "points": 18.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 356,
                      "login": "zeebo"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "105 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 105
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 91,
            "inputs": {
              "packages": [
                "github.com/zeebo/xxh3"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 188
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 188 days ago",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 188
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 47,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 12 merged PRs checked by a CI test -- score normalized to 2",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 61,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 51,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 12 merged PRs checked by a CI test -- score normalized to 2",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 12/17 approved changesets -- score normalized to 7",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 11 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 11
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 4,
              "affected_packages": 2,
              "assessed_packages": 11,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1, unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 11,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 10
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 55,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 12,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.234,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "18 of 77 human commits state their intent (structured subject or explanatory body)",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 18,
                      "sampled": 77
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "avo/go.mod",
                "go.mod",
                "internal/compare/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 77",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 77
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 517841,
              "source_files_sampled": 25,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/25 source files over 60KB",
                "points": 52.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 25,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T22:54:31.143753Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/z/zeebo/xxh3.svg",
  "full_name": "zeebo/xxh3",
  "license_state": "standard",
  "license_spdx": "BSD-2-Clause"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenGo.