Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.26.0 · Metriken 1.13.0 · 2026-07-22 04:33 UTC
zyra / gobac
BACnet protocol implementation in Golang
zyra/gobac erreicht einen Gesundheitsindex von 57 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Engineering Quality (80/100) ab, am schwächsten bei Community & Adoption (24/100). Zuletzt vor 3 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
57
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
57
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Zyra MediaOrganisation
3 Follower20 öffentliche Reposseit Feb. 2016
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht |
|---|---|---|---|---|---|
| Go | github.com/zyra/gobac/v2 | v2.2.0 | - | 4 | vor 3 Tagen |
| Go | github.com/zyra/gobac | v1.5.9 | - | 20 | vor 1957 Tagen |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
69
Entwicklungsaktivität
64Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 3 Tagen |
| 0.7/36 | Commit-Rhythmus — 1/52 Wochen mit Commits |
| 17.4/18 | Commit-Volumen — 86 Commits im letzten Jahr |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Verwendete Eingangsdaten
| commits_last_year | 86 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 1 |
Release-Disziplin
76Gut
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 12 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 3 Tagen |
| 12.6/27 | Release-Rhythmus — ein Release etwa alle 273,4 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Verwendete Eingangsdaten
| releases_count | 12 |
| latest_release_tag | v2.2.0 |
| releases_from_tags | nein |
| days_since_latest_release | 3 |
| mean_days_between_releases | 273,4 |
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
24
Popularität & Verbreitung
1Kritisch
Wie die Bewertung erfolgt
| 0/60 | Stars — 1 Stars |
| 0/25 | Forks — 0 Forks |
| 0/15 | Watcher — 2 Watcher |
Verwendete Eingangsdaten
| forks | 0 |
| stars | 1 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
Community-Gesundheit
50Mittel
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (MIT) |
| 0/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
61
Maintainer-Resilienz (Bus-Faktor)
20Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 0/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits |
| 1.4/13.5 | Breite der Beitragenden — 1 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Reaktionsfähigkeit bei Issues & PRs
85Exzellent
Wie die Bewertung erfolgt
| 46.8/46.8 | Issue-Lösungsquote — 100 % der Issues geschlossen |
| 38.2/38.3 | PR-Annahme — 9/9 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 9 |
| open_issues | 0 |
| closed_issues | 1 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 0 |
Eigentümerschaft & Trägerschaft
56Mittel
Wie die Bewertung erfolgt
| 30/30 | Organisatorische Trägerschaft — im Besitz einer Organisation |
| 0/20 | Verifizierte Domain |
| 4.3/25 | Reichweite des Inhabers — 3 Follower von zyra |
| 21.6/25 | Kontohistorie — 20 öffentliche Repos, Kontoalter ca. 10 Jahre |
Verwendete Eingangsdaten
| followers | 3 |
| owner_type | Organization |
| is_verified | — |
| owner_login | zyra |
| public_repos | 20 |
| account_age_days | 3.809 |
Paketpflege
100Exzellent
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 2 Paket(e) auf go |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 3 Tagen |
| 20/20 | Versionshistorie — 20 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | github.com/zyra/gobac/v2, github.com/zyra/gobac |
| ecosystems | go |
| any_deprecated | nein |
| min_days_since_publish | 3 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
80
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 3 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — .flake8 |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | ja |
| has_precommit_config | nein |
Dokumentation
75Gut
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 0/15 | Dokumentations-/Homepage-Site |
| 10/10 | Repository-Beschreibung |
| 0/10 | Topics |
| 10/10 | Wiki |
Verwendete Eingangsdaten
| topics | — |
| has_wiki | ja |
| homepage | — |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
40
Sicherheitslage
40Gefährdet
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 0/7.5 | Vulnerabilities — 26 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
56
AI-Agentenkontext & Leitlinien
29Kritisch
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 28.8/40 | Lesbare Commit-Historie — 54 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,54 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Wie die Bewertung erfolgt
| 12.6/18 | Bootstrap mit einem Befehl — go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod (Toolchain-Konvention, kein Task-Runner) |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — .flake8 |
| 11/11 | Statische Typprüfung — Go (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — Dockerfile, lockfile |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100 |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | go.sum |
| has_dockerfile | ja |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod, vendor/gopkg.in/yaml.v2/go.mod |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
100Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Go (statisch typisiert) |
| 55/55 | Handhabbare Dateigrößen — 0/170 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Go |
| largest_source_bytes | 43.938 |
| source_files_sampled | 170 |
| oversized_source_files | 0 |
Maschinenlesbare AI-Schnittstellen
40Gefährdet
Wie die Bewertung erfolgt
| 0/40 | API-Schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP-Server |
| 40/40 | Lauffähige Beispiele — examples |
Verwendete Eingangsdaten
| example_dirs | examples |
| has_mcp_signal | nein |
| api_schema_files | — |
Eckdaten
1GitHub-Sterne
1Mitwirkende
86Commits, letzte 12 Monate
3Tage seit letztem Push
12Releases
1Bus-Faktor
0offene Issues
GoPaket-Ökosysteme
Warnungen zur Datenerhebung
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
OpenSSF Scorecard 4.0 / 10
4.0Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/7 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| k. A. | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 0 | Vulnerabilities | 26 existing vulnerabilities detected |
Direkte Abhängigkeiten 6
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Go | github.com/stretchr/testify | v1.4.0 | go.mod |
| Go | github.com/urfave/cli | v1.21.0 | go.mod |
| Go | golang.org/x/sys | v0.0.0-20190405154228-4b34438f7a67 | go.mod |
| Go | gopkg.in/yaml.v2 | v2.2.2 | go.mod |
| Go | fyne.io/fyne/v2 | v2.8.0 | gui/go.mod |
| Go | github.com/zyra/gobac/v2 | v2.0.0 | gui/go.mod |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1808,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 880290,
"Dockerfile": 135
},
"pushed_at": "2026-07-18T21:27:05Z",
"created_at": "2019-07-29T07:34:01Z",
"owner_type": "Organization",
"updated_at": "2026-07-18T21:27:09Z",
"description": "BACnet protocol implementation in Golang",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://zyramedia.com",
"name": "Zyra Media",
"type": "Organization",
"login": "zyra",
"company": null,
"location": "Toronto, ON",
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/17262907?v=4",
"created_at": "2016-02-16T02:01:09Z",
"is_verified": null,
"public_repos": 20,
"account_age_days": 3809
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-07-18T21:14:47Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-07-18T13:31:00Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-07-17T23:15:41Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-07-16T03:14:38Z"
},
{
"tag": "v1.5.9",
"kind": "patch",
"published_at": "2021-03-13T06:11:58Z"
},
{
"tag": "v1.5.8",
"kind": "patch",
"published_at": "2020-12-08T08:01:10Z"
},
{
"tag": "v1.5.7",
"kind": "patch",
"published_at": "2020-03-10T15:21:48Z"
},
{
"tag": "v1.5.6",
"kind": "patch",
"published_at": "2019-10-23T14:54:13Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2019-10-23T14:51:34Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2019-10-23T14:47:47Z"
},
{
"tag": "1.1",
"kind": "other",
"published_at": "2019-08-26T08:10:09Z"
},
{
"tag": "1.0",
"kind": "other",
"published_at": "2019-08-18T22:30:20Z"
}
],
"recent_commits": [
{
"oid": "60082a53f852711389dc53c94011bfe23d3d4cda",
"body": "Write Windows-native toolchain path for the arm64 GUI leg",
"is_bot": false,
"headline": "Merge pull request #10 from zyra/fix-win-arm64-path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:27:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d666b08f8853fe7be14e363221a733d3dfc9ef",
"body": null,
"is_bot": false,
"headline": "Write Windows-native toolchain path for the arm64 GUI leg",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811944cd2f5566055f000de159ef46fbbe561103",
"body": "Rework GUI for first-run usability",
"is_bot": false,
"headline": "Merge pull request #9 from zyra/gui-ux",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:13:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0cdebbcf39650ae3f33751f775b3a9f1066930",
"body": "Replace raw \"sweep failed:\", \"open failed:\", \"save failed:\", and\n\"simulation start failed:\" status text with plain sentences that\nstill include the underlying error as a short reason.",
"is_bot": false,
"headline": "Use plain-language wording for scan/open/save/simulation errors",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e1d569ae08df3f02ad563b168a3eb5ff84f21c9",
"body": "Automatic picked the alphabetically first non-loopback interface, so\na docker/bridge/veth interface could beat the real LAN NIC. Mark\ncandidates matching common virtual-interface prefixes and rank them\nafter physical ones in both the sorted list and Automatic's pick,\nwithout hiding them from the dropdown.",
"is_bot": false,
"headline": "Rank physical NICs ahead of virtual interfaces in Automatic",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22f582c8caa15af081513f8832d6a891f29740d8",
"body": "The nav List's item template was an empty-string label, so Fyne's\ncached per-row min size collapsed the whole rail to near zero width\nand long labels like \"Network Explorer\" rendered as \"Net\". Seed the\ntemplate with the widest actual nav label instead, and strengthen the\nrendered-launch test to assert the nav rail and each rendered nav\nlabel are at least as wide as their own MinSize.",
"is_bot": false,
"headline": "Fix nav rail clipping labels at natural width",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d762faf1af0673bc305ce1047a1b834e5114dc4",
"body": "Settings' Network dropdown gains \"All networks\" ahead of the\nexisting Automatic entry, persisting a \"*\" sentinel that\nStartFromSettings maps to the bacnet library's new wildcard listen.\nAutomatic keeps the \"(recommended)\" wording since its directed\nbroadcast is more reliable on multi-homed hosts than All networks'\nlimited broadcast.",
"is_bot": false,
"headline": "Add an All networks option to the Settings network picker",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61feeaec17e8ace4db5ecddc9b11afaa84491114",
"body": "getNetworkSet(\"\") now returns the wildcard source (0.0.0.0) paired\nwith the limited broadcast address (255.255.255.255) instead of\nfailing, so a Server can bind and send on every network the OS\nroutes to rather than one named interface. Named interfaces are\nunaffected.",
"is_bot": false,
"headline": "Library: support wildcard listen for all-networks binding",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:17:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "283b39534b9f8492d96014e714482961412e8f59",
"body": "Home greets first-run users with two big actions (Simulate a network,\nDiscover my network) plus a Settings shortcut instead of a blank pane.\nNav trims to Home / Network Explorer / Simulator; Object Browser is now\na drill-down of Network Explorer with a Back-to-results button rather\nthan its own top-level row. Discovery gets plain-language copy (Scan\nnetwork, an empty-state placeholder) and a launch failure now reports\n\"Not connected yet\" instead of a raw error.",
"is_bot": false,
"headline": "Add welcoming Home view and rework navigation to plain language",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:05:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faa47364cf04e89ac0d5a8a3eae7c10e862a27b6",
"body": "Mounts the editor view into a real window/canvas and asserts the\nstrip actually occupies rendered space and paints content once a\nsimulation starts, catching the exact clipped/zero-size failure mode\nthat v.root.Refresh() in onRun/onStop guards against.",
"is_bot": false,
"headline": "Add rendered regression test for running-devices strip visibility",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T16:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f802050631f7afe48dbaa66de3685d07244b6b69",
"body": "Adds Run/Stop controls and a running-devices strip to the scenario\neditor, migrating the runner lifecycle from the deleted Quickstart view.\nRun validates the document, serializes it via the editor's own\nscenariodoc.Document, and starts it through simrun; a scenario simrun\ncan't run gets plain-langua\n[…]\nted\"/\"Network\" text.\n\nboot.go wires the shared DeviceStore into the Simulator view and a\nPortHint callback so a running simulation's status includes a tip when\nthe current session port won't reach it.",
"is_bot": false,
"headline": "Consolidate Simulator Editor and Quickstart into one Simulator view",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T16:28:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2254edd4a45a4975952097d2e44f36bc0b5afa9a",
"body": "Settings now offers \"Automatic (recommended)\" plus each usable network\ninterface by human-friendly label instead of a raw text field, backed\nby a new netpick package. Bootstrap resolves Automatic to the best\nreal interface at start time, and Settings now restarts the live\nsession on save instead of requiring a relaunch, reporting plain\nconnected/failed status either way.",
"is_bot": false,
"headline": "Replace free-text network interface with a picked dropdown",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T15:58:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f40599dd7b440b7c90e9ba8ee70fc9a1095fb15",
"body": "AppShell embedded *fyne.Container directly, which only satisfies\nfyne.CanvasObject by method promotion; the driver's render-tree walk\nonly recognizes a concrete *fyne.Container or a fyne.Widget, so\nwindow.SetContent(shell) painted nothing. Make AppShell a real widget\n(widget.BaseWidget + CreateRende\n[…]\noot.Compose, the single\ncomposition root shared by main() and the new rendered regression\ntests, which capture the composed window's canvas and assert on\npainted pixels rather than the container tree.",
"is_bot": false,
"headline": "Fix blank AppShell rendering and add a composition root",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T15:40:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16d3c6a1743fa6c9a4857517e1f57b270b97683d",
"body": "Fix windows-arm64 GUI release builds",
"is_bot": false,
"headline": "Merge pull request #8 from zyra/release-arm64-fix",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:53:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "671833c4d5f0c638abf1f9a8c5d868c48b784c6d",
"body": "Install a pinned llvm-mingw aarch64 toolchain on the windows-11-arm\ngui-release leg so CGO doesn't fall back to the runner's x86 gcc,\nwhich can't assemble arm64 code. Also add a workflow_dispatch trigger\nthat re-runs only gui-validate/gui-release against an existing tag,\nso a failed GUI leg can be retried without cutting a new release.",
"is_bot": false,
"headline": "Fix windows-arm64 GUI release builds",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:49:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db51ce5dedec7782188c38401fe1d9a6d17efa36",
"body": "Fix GUI CI on Linux and macOS",
"is_bot": false,
"headline": "Merge pull request #7 from zyra/ci-fixes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62b26b5e8ad9d53b7b4e16f51d44546ec17b9330",
"body": "Two latent failures surfaced once the Windows leg ran to completion\n(it was previously cancelled early by fail-fast whenever macOS\nfailed):\n\n- TestSaveToUnwritableDirectoryFails assumed 0o555 on a directory\n blocks file creation; on Windows Unix permission bits don't, so\n skip it there like the ex\n[…]\n\n process-global text shaper - exactly the DATA RACE CI reported.\n Raise these waits to a generous 30s (a passing wait still returns\n immediately) in browser, discovery, quickstart and shell tests.",
"is_bot": false,
"headline": "Fix Windows-only GUI test failures",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:50:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ad812e28df9efdbdaa128f072a96b33c105f198",
"body": "CI confirmed the actual darwin failure once startup errors started\nsurfacing: \"listen udp4 127.255.255.255:PORT: bind: can't assign\nrequested address\". Unlike Linux, BSD-family kernels (including\ndarwin, which server_generic.go also serves) refuse to bind a UDP\nsocket directly to a directed-broadcas\n[…]\nputed broadcastAddr.\n\nAlso set fail-fast: false on gui-validate.yml's OS matrix so a\nfailure on one leg doesn't cancel the other two before they finish,\nwhich was hiding their actual pass/fail status.",
"is_bot": false,
"headline": "Bind the generic listen path's broadcast socket to the wildcard address",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:31:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1da428137f90353207ebce52d7ca9e9840b63e75",
"body": "bacnet.Server.Listen closes its Start() channel even when\nListenContext failed to bind (it calls markStarted() on the error\npath too), so Live.Start treated that close as unconditional success.\nA failed listener then surfaced later and confusingly, as \"server is\nnot listening\" from the first Send ca\n[…]\nnto the buffered Errors()\nchannel, so once Start() fires, a startup failure is guaranteed to\nalready be queued there. awaitStart checks for it non-blockingly and\nwraps it into the error Start returns.",
"is_bot": false,
"headline": "Surface bacnet listener startup errors from session.Live.Start",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8441c5e89f858d2755042bfcd4fa43752ce9c7b0",
"body": "ListenContext on this platform set binds two UDP sockets sharing one\nport: a unicast socket on the interface's address and a broadcast\nsocket on its directed-broadcast address (e.g. 127.0.0.1:p and\n127.255.255.255:p for loopback). SO_REUSEADDR alone covers this on\nLinux/FreeBSD, but they never reach\n[…]\nL.\n\nsetReusePort is split into its own file per GOOS subset because\nunix.SO_REUSEPORT isn't defined for solaris in the vendored\ngolang.org/x/sys/unix, which is otherwise part of this file's build\ntag.",
"is_bot": false,
"headline": "Set SO_REUSEPORT on the darwin/BSD generic listen path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e6e70db299d300e981254d09c9a2ab894a078bd",
"body": "go-gl/glfw v3.4 (pulled in by Fyne 2.8) needs wayland-client-core.h\nand xkbcommon headers to compile on Linux, so every Linux leg that\nbuilds the gui module now installs libwayland-dev and\nlibxkbcommon-dev alongside the existing GL/X11 dependencies.",
"is_bot": false,
"headline": "Install Wayland headers for Fyne builds on Linux CI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f2d949cf2607a900dfd1529f4490b525e32ab2",
"body": "Build and publish binaries for all desktop targets",
"is_bot": false,
"headline": "Merge pull request #6 from zyra/release-automation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530459d5280e9d60cb8780091396a4ea6dd805a5",
"body": "The upload step ran under PowerShell on the Windows runners, where the\nbash-only script fails; force bash for every run step in the job. The\nWindows images also expose python but not python3, so resolve whichever\nis on PATH for the zip and checksum steps. Bundle README.md alongside\nLICENSE to match the CLI packages, and document the augment-after-\npublish ordering of GUI asset uploads.",
"is_bot": false,
"headline": "Fix Windows legs of the GUI release job",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe9fbc0d6a1b30d6dfcdf58489bd6eac2c3ab8b1",
"body": "Add windows/arm64 to the CLI cross-compile matrix and a new gui-release\nmatrix job that builds gobac-gui natively on all six OS/arch runners\n(Fyne requires CGO, so it can't cross-compile from ubuntu). Each GUI\nleg uploads its own asset and checksum file to the release created by\nthe existing release job, gated by a fast Linux-only gui-validate job.",
"is_bot": false,
"headline": "Build and publish binaries for all desktop targets",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:04:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53dd7a7fa6f5850b1d0cf56584bd1876a7885397",
"body": "Add cross-platform GUI operator workstation",
"is_bot": false,
"headline": "Merge pull request #5 from zyra/gui-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a846d19c26884fdd0085e5bcb68f0ae161857ef",
"body": "Wire persisted interface/port settings into session.Start on launch\nand session.Stop on window close, instead of leaving Discovery,\nBrowser, and Quickstart hitting an unstarted session. The\nsettings-to-config mapping and start/stop wiring now live in a small\ntestable session.Starter seam with unit t\n[…]\nsettings\ndialog, and widen the GUI CI path filters to cover the parent library\npackages the module depends on via its replace directive, plus add a\nreachability probe to the macOS loopback alias step.",
"is_bot": false,
"headline": "Start and stop the BACnet session on launch/close",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:47:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "44db28e843760ba1f0796c1f4a65c50f69e156f1",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into gui-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8204e41a66001641f64a38dadf096f7942c24224",
"body": "Add Wave 1 client services and simulator realism",
"is_bot": false,
"headline": "Merge pull request #4 from zyra/lib-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:33:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f15397827c0ffb4c83f5b3b74c01f87793d86826",
"body": "Request.UnmarshalBinary and SubscribeCov.MarshalBinary returned their\nscratch buffer to the pool before resetting it. Go defers run LIFO,\nso the buffer went back into the pool while another goroutine could\nalready be writing to it, and the original goroutine's Reset() raced\nwith that write.\n\nReset now happens inside the same deferred closure as Put, so the\nbuffer is always cleared before it becomes visible to another Get().\n\nTest: go test -race -mod=vendor -count=20 ./bacnet",
"is_bot": false,
"headline": "Fix defer ordering race on pooled buffers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1697777cf7587e543dda461edb1377624a6ac19f",
"body": "Request.UnmarshalBinary and SubscribeCov.MarshalBinary returned their\nscratch buffer to the pool before resetting it. Go defers run LIFO,\nso the buffer went back into the pool while another goroutine could\nalready be writing to it, and the original goroutine's Reset() raced\nwith that write.\n\nReset now happens inside the same deferred closure as Put, so the\nbuffer is always cleared before it becomes visible to another Get().\n\nTest: go test -race -mod=vendor -count=20 ./bacnet",
"is_bot": false,
"headline": "Fix defer ordering race on pooled buffers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:15:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e28b8f63391fe0714067b29a0e808a5a3f988585",
"body": null,
"is_bot": false,
"headline": "Synchronize quickstart stop state with UI thread",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:06:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "256db6c38688dbfb1fb7d12971e4c22419bb14b9",
"body": null,
"is_bot": false,
"headline": "Synchronize quickstart runner state with UI thread on start",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bc155f7e597269880bc8b473c5a8c807ec18ffd",
"body": "internal/simrun runs a scenario's devices as loopback UDP BACnet/IP\nresponders, one goroutine each, and reports the OS-assigned port each\none actually bound. The Quickstart view decodes a bundled three-device\ndemo scenario, starts it, injects its devices into the shared device\nstore (Source \"local-s\n[…]\n the port it is itself\nconfigured with, so reading a quickstart device requires a session\nbound to that same port, and a same-port 127.0.0.1 device would\ncollide with the client's own loopback socket.",
"is_bot": false,
"headline": "Add in-process simulator quickstart",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:55:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80800d11eebf92ce7b7b10a9a00fe8de9bd5754c",
"body": null,
"is_bot": false,
"headline": "Repaint field hints when switching device or object selection",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:34:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a24f314de840385630c4f9d480dd22f84b6d8e4",
"body": "Full forms editor over scenariodoc.Document: open/save/save-as, a\nnetwork form, master-detail device and object editing (typed value\neditors per object type), and per-field validation feedback fed by\nscenariodoc.FieldErrors plus Document.Validate() gating the Save\nbutton. Mount it as the Simulator Editor nav entry.",
"is_bot": false,
"headline": "Add scenario editor UI with live validation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:32:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "effeb9574438d02fecf77ef0052ff196261aaca8",
"body": null,
"is_bot": false,
"headline": "Add scenario document layer with YAML/JSON round-trip guard",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0398bc3e5da0b1f69effc19ea24ff3fbae19e514",
"body": null,
"is_bot": false,
"headline": "Strengthen write-dialog test's device IP assertion",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:00:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad09627b2235d9c95cc841e65687082249f63f47",
"body": "Object tree from Object_List plus a property panel loaded via\nReadMultiple (one ReadSpec per property until RPM lands), with a\nwrite dialog for Present_Value. Extends the session facade to unwrap\nObjectId and BitString values and to wrap CharacterString writes, so\nthe browser never needs to import library wire types directly.",
"is_bot": false,
"headline": "Add RPM-based object browser with L1/L2 fallbacks",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a3496a211227924656de8ca94fdfcc7e4c3757",
"body": "Wire the Discovery nav entry to a real view: sweep/clear toolbar with\na duration selector, a device table bound to the DeviceStore, and row\nselection ready for the object browser to hook into. Sweeps run on a\ngoroutine and merge into the store as I-Ams arrive; the store listener\ndrives the table and\n[…]\nt label back on the Fyne thread.\n\nGive AppShell an exported SetView so the app entrypoint can swap the\nplaceholder Discovery label for the real view without changing the\nshell's constructor signature.",
"is_bot": false,
"headline": "Add discovery view with live sweep table",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:44:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2821aa91530ac47d8aae124540d1b16b007edcd1",
"body": "The client stack always sends to the port it listens on, so every\ndiscovered device is reachable at the session's own configured port.\nThread that port through DeviceSummary so callers can render a full\naddress without guessing it.",
"is_bot": false,
"headline": "Carry the listen port on discovered device summaries",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "344e3ed5a407cfd94ba825721ceffd4f919e5102",
"body": null,
"is_bot": false,
"headline": "Fix store package doc comment section reference",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:27:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb396d5bc020ca23265d51ed2ace5f63b2270f0f",
"body": null,
"is_bot": false,
"headline": "Add observable device/object store",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4be47a26fd086b1c85c44cc1a938101f52e34ffa",
"body": null,
"is_bot": false,
"headline": "Provision Windows loopback alias for GUI simulator tests in CI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71a948f0320b8574fd077be90c8464703e3e1139",
"body": null,
"is_bot": false,
"headline": "Un-skip session round-trip tests now that the library race is fixed",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b048f088d8d1d9ed324d4800342c736049efeae1",
"body": "Server.handle() re-read req.InvokeID() to release the invoke ID\nafter handing req to a client goroutine via deliverConfirmedHandler.\nThe client goroutine can concurrently Release() the request back to\nits sync.Pool, racing the reset against that read. Hoist the invoke\nID into a local before delivery\n[…]\nship\nhas transferred.\n\nAdds a regression test that drives the real dispatch path with a\nconsumer goroutine releasing the delivered request immediately,\nreproducing the race under -race before the fix.",
"is_bot": false,
"headline": "Fix data race on req after confirmed-handler delivery",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:11:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f898cd6d1ba36e7fe4079f6d0488849343a6323d",
"body": "Server.handle() re-read req.InvokeID() to release the invoke ID\nafter handing req to a client goroutine via deliverConfirmedHandler.\nThe client goroutine can concurrently Release() the request back to\nits sync.Pool, racing the reset against that read. Hoist the invoke\nID into a local before delivery\n[…]\nship\nhas transferred.\n\nAdds a regression test that drives the real dispatch path with a\nconsumer goroutine releasing the delivered request immediately,\nreproducing the race under -race before the fix.",
"is_bot": false,
"headline": "Fix data race on req after confirmed-handler delivery",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:08:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6b396000b1d51ef75f9dae0a02a51c3a0a478d75",
"body": "…fault",
"is_bot": false,
"headline": "Add simulator object realism: status, event state, OOS, relinquish de…",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:55:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c996af66eaaa7815c4674d891aba3d98d6b4ab8d",
"body": "Extend SubscribeCOV marshal/unmarshal with IssueConfirmed and\nLifetime/HasLifetime fields, add CovOptions and\nServer.SubscribeCovWithOptions so callers can request unconfirmed\nnotifications and an explicit or indefinite lifetime, and route\nunconfirmed COV notifications to the same per-device/process\nhandler confirmed notifications use so CovNotifier delivers both.\nExisting SubscribeCov/SubscribeCovWithProcessID keep emitting\nidentical bytes.",
"is_bot": false,
"headline": "Add unconfirmed and lifetime options to client SubscribeCOV",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0d3fd45dbdebb3003413b193e450e0f1b4e05b4",
"body": "Client can broadcast TimeSynchronization (choice 6) and\nUTCTimeSynchronization (choice 9) as fire-and-forget unconfirmed\nrequests. Simulator decodes both and records the synced date/time onto\nthe device's Local_Date and Local_Time properties, which stay unknown\nuntil the first sync.",
"is_bot": false,
"headline": "Add TimeSynchronization and UTCTimeSynchronization support",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73b00d593cc19b5c51cd11fcf45d8ebb8483ef3f",
"body": "TestStartStopLifecycle and startLiveAgainst hardcoded Config{Interface:\n\"lo\"}, which only exists on Linux (macOS uses \"lo0\", Windows something\nelse entirely) and made the non-skipped lifecycle test fail on the\nmacOS/Windows CI legs. Resolve the loopback interface by scanning\nnet.Interfaces() for a l\n[…]\nitigation,\nnot a resolution: the -race quarantine and the simulator's 127.0.0.2\nbind (forced by the library's shared-port addressing model, deviating\nfrom plan §6.7) still need a plan-owner amendment.",
"is_bot": false,
"headline": "Resolve loopback interface name per-OS in session tests",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:19:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "921d1ec1495b3a144934cca920f39faef82dfbc5",
"body": null,
"is_bot": false,
"headline": "Answer Who-Has broadcasts in the simulator",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:13:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef92eae6b96f84c7b682984bea70f21cd23b2e17",
"body": null,
"is_bot": false,
"headline": "Add client Who-Has/I-Have codec and broadcast",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:13:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce39fe355bb892b8241a211544727e20a5a51133",
"body": "Alias 127.0.0.2 on lo0 in the macOS CI leg so the simulator harness\ncan bind its distinct loopback address (macOS assigns only 127.0.0.1\nto lo0 by default).\n\nSkip the four round-trip session tests under -race: they reliably hit\na genuine data race inside bacnet/server.go (ReleaseInvokeID reads\nreq.I\n[…]\nbrary bug outside gui/'s scope, not something introduced here, and\nstill blocks the -race CI gate until it's fixed on the library side.\nNon-race runs still exercise the exact-value assertions in full.",
"is_bot": false,
"headline": "Fix macOS loopback binding and quarantine known library race",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:08:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6ac9d907ed14da138f897ff8c45afdb5f58d22be",
"body": null,
"is_bot": false,
"headline": "Add simulator WritePropertyMultiple handler with atomic writes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:58:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1b707a3621d90574a69a50df17b7b2ac55ebbb2",
"body": null,
"is_bot": false,
"headline": "Add WritePropertyMultiple client codec and error decoding",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e49a74c8a9a8b3dc7b923cc21cb2b24c02c670c5",
"body": "Introduce internal/session with a Session interface and Live\nimplementation that starts/stops the bacnet.Server listener, discovers\ndevices via Who-Is, and reads/writes object properties. Instance\nnumbers above 65535 are rejected with a pending-L2 error and\nReadMultiple falls back to sequential Read\n[…]\nvice scenario in-process and serves it\nover loopback UDP to exercise reads, a write-then-read-back round\ntrip, a write-access-denied error, the instance guard, and the\nstart/stop lifecycle end to end.",
"is_bot": false,
"headline": "Add session layer wrapping the BACnet client SDK",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:55:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbe4708290b85a204ff7780583c5aefbe3189a25",
"body": "Add ReadObjectProperty, WriteObjectProperty, and SubscribeCovObject\nthat accept a types.ObjectId with the complete 0..4194303 instance\nrange, delegating to the existing implementations. The CLI's\nreadprop/writeprop commands now parse and validate the full range\nand use the new methods.",
"is_bot": false,
"headline": "Expose full 22-bit object instances in client API and CLI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687a8cce82ca58503521411d80b8cbf949f30884",
"body": "Adds the nested github.com/zyra/gobac/gui module (Fyne v2.8, replace\ndirective to the repo root), a runnable app shell with left navigation,\nswitching content stack, and status bar, plus a settings dialog for\ninterface/port persisted via app preferences. Adds the 3-OS gui-validate\nCI workflow.",
"is_bot": false,
"headline": "Scaffold gui module with app shell and settings dialog",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ae2b3744ff4f6fb69812687fc2b41be8b7d805",
"body": null,
"is_bot": false,
"headline": "Add client ReadPropertyMultiple",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "399ce016015c55e9278981bc320abc4acc05c52c",
"body": null,
"is_bot": false,
"headline": "Merge pull request #3 from zyra/pr2-review-fixes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T14:08:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd53b12be7f6fc6f1027c17c18e0c2f0cf86ae42",
"body": "Introduce three package-level seams (whoIsRequest in whois.go;\nobjectProperties and deviceObjects in scan.go) following the existing\nreadPropertyRequest/writePropertyRequest pattern, with zero behavior\nchange. Add five tests covering: 22-bit DeviceInstance sort/ordering\n(guards the 16->22-bit PR #2 fix), the no-devices-found error path,\nduration forwarding from the CLI context, whois-error propagation\nthrough Scan, and end-to-end object/property collection with JSON\noutput assertions.",
"is_bot": false,
"headline": "Add test coverage for whois.go and scan.go via seams",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:24:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36b5136b3a5c3cecd41070e2e885091a064890cb",
"body": "Locks in handleWhoIs range filtering (out-of-range, exact boundary,\nabove-range, and unlimited Who-Is) and the modelError error-class/code\nmapping (unknown object/property, non-array property, invalid array\nindex via Priority_Array, and value-out-of-range on WriteProperty)\nagainst real encoded wire payloads, plus a direct unit test for the\ndefault and two previously-unasserted modelError branches.",
"is_bot": false,
"headline": "Add assertion tests for Who-Is filtering and modelError mapping",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1527f9fbd877ee60f26ae1319f40e31fc533b0c0",
"body": "Locks in Property.Read array-index guards (non-array rejection, out-of-range\nindex, BacnetArrayAll escape hatch), Network.AddDevice guards (nil device,\nout-of-range id, duplicate id), applyScenarioDefaults defaulting (version,\nnetwork mode auto-selection, port inheritance, vendor/model/protocol\nrevision), objectTypeNumber normalization/rejection, and\nnormalizePresentValue's numeric-analog validation end-to-end through\nDecodeScenario.",
"is_bot": false,
"headline": "Add assertion tests for simulator model and scenario error branches",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:11:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59181ace80e47d87dd936797bbeb18adc0c03555",
"body": "…hesis\n\nProperty.PriorityArray() was dead code. Wire it into Device.ReadProperty:\nwhen a commandable object's Present_Value is read and identifier 87 isn't\nin the Properties map, synthesize a transient 16-slot array Property from\nthe live per-priority slots (unset slots as NULL) and reuse Property.R\n[…]\nndable objects so it isn't invisible to ReadPropertyMultiple.\n\nNo stored Property for 87 is kept (would go stale after writes) and\nRelinquish_Default (104) is intentionally not exposed - out of scope.",
"is_bot": false,
"headline": "Expose Priority_Array (87) for commandable objects via read-time synt…",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:05:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f30b3105121db1ad0460ec27eef55ce639701a79",
"body": "Errors from conn.ReadFromUDP() other than timeouts previously killed the\nreceive goroutine permanently, leaving the server looking healthy while no\nlonger receiving datagrams. Treat non-timeout errors as transient by\ndefault (report and continue); only exit on shutdown/cancellation or a\n\"use of clos\n[…]\nmpare against).\n\nNarrows receive()'s conn parameter to a new udpReader interface (just\nReadFromUDP) so the error-handling paths can be exercised with a scripted\nreader in tests, without a real socket.",
"is_bot": false,
"headline": "Survive transient UDP read errors in receive()",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:57:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6eff307c24d1fc133239753844d48e9606bf5be8",
"body": "server_generic.go (the darwin/windows path for the legacy bacnet.Server\nAPI) created its two sockets with plain net.ListenUDP, so broadcast\nWho-Is/I-Am sends failed there unlike the linux/freebsd path\n(server_posix.go) and the transport package's udp_unix.go/udp_windows.go,\nboth of which set SO_BROA\n[…]\n ListenContext now calls listenBroadcastUDP for both\nthe broadcast and unicast sockets. Add server_generic_listen_unix_test.go\nverifying SO_BROADCAST reads back set, compiled by darwin/windows go vet.",
"is_bot": false,
"headline": "Set SO_REUSEADDR/SO_BROADCAST on generic bacnet.Server listen path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:51:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c2489c718bcb99130ef30c190b5ce2a369e0716",
"body": "The seed scenario field was parsed but never read anywhere, and the\nsimulator has no randomness (no math/rand import in any non-vendor\nfile). Its presence in the shipped example misleadingly implied\nseedable behavior. Remove the field, the example line, and the test\nfixture line, and lock the removal in with a strict-decoding\nregression test asserting that a scenario with a seed field is\nrejected as an unknown field.",
"is_bot": false,
"headline": "Remove dead Scenario.Seed field",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f2654c53f067f23d25a97c1d407941dc6d938df",
"body": "TestDecodeScenarioRejectsOverflowingPresentValue used tab characters\nto indent three fixture lines, which YAML rejects as a syntax error\nbefore DecodeScenario ever reaches the intended uint32-overflow\nvalidation. Replace the tabs with spaces so the fixture parses, and\npin the error message assertion to the \"exceeds the unsigned 32-bit\nrange\" substring so a regression to invalid YAML (or any unrelated\nerror) fails the test instead of passing for the wrong reason.",
"is_bot": false,
"headline": "Fix tab-indented YAML fixture in overflow test",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb3bb3ec915905b246e4e0b4c371a9658a65d081",
"body": "The test job's Test step invoked go test without -race, so the CI\nnever actually exercised the race detector despite the job claiming\nto. CGO defaults to 1 on ubuntu-latest with no override, so -race\nworks out of the box. cross-build job is untouched (CGO_ENABLED: 0,\nbuild-only, no tests).",
"is_bot": false,
"headline": "ci: run tests with -race in validate workflow",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47f694badff1fad21b4e00e8ff22ba519ebd7d8",
"body": null,
"is_bot": false,
"headline": "Update GitHub Actions runtimes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T03:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f79f9b71339bdb00edf1c72b044cc98f8a05ff96",
"body": null,
"is_bot": false,
"headline": "Prepare v2 release automation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T03:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cba5aebe4dcfc145d89ed44203a48139a374985d",
"body": null,
"is_bot": false,
"headline": "Add MIT License to the project",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T02:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "138e59390359c90aeac313307be1edc17d5db324",
"body": "Refresh BACnet SDK and add simulator",
"is_bot": false,
"headline": "Merge pull request #2 from zyra/refresh",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T02:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1620ab22e0bea7ece122ff7ce86d2f929efdb4e9",
"body": null,
"is_bot": false,
"headline": "Tighten protocol and simulator validation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5dad056bdc69e1ee6178f26e510aaa2ceff7da1",
"body": null,
"is_bot": false,
"headline": "Accept optional COV subscription fields",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a030cac27d16163ce0cb815838f5cceb381c1ea",
"body": null,
"is_bot": false,
"headline": "Support zero COV process identifiers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43bfd49985e43740024aa18d9740d6e737d8ef0",
"body": null,
"is_bot": false,
"headline": "Tighten simulator edge cases",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cac58f5e9b2d1afa40f8a2d55a6494876eb9a7c8",
"body": null,
"is_bot": false,
"headline": "Reject trailing scenario data",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b8b4e2f6cdcc27b66fafdac4078d3a0e58d07a",
"body": null,
"is_bot": false,
"headline": "Preserve COV API compatibility",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "882d29aa6e677b1e821358c588871e1e3e199c73",
"body": null,
"is_bot": false,
"headline": "Reset pooled device state",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:33:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b50782be42e49fbdd997e5760a903bc7400774f5",
"body": null,
"is_bot": false,
"headline": "Add BACnet network simulator",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cde9562fdadb26ed68df7ebf59b277ecb3f7892",
"body": null,
"is_bot": false,
"headline": "Support simulator UDP broadcasts",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8743a64efc5c35f172392b8cb53df818e523d119",
"body": null,
"is_bot": false,
"headline": "Add BACnet responder transport",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:22:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "577283c5dd33d8f902cabc9835cc794323659402",
"body": null,
"is_bot": false,
"headline": "Stabilize BACnet protocol lifecycle",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:22:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c4525235230b1299920224621917e87c78ea6bc",
"body": null,
"is_bot": false,
"headline": "Harden BACnet wire codecs",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:04:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3859a8b5a2e61bb3a4f2120843f5b7fe320ea2c4",
"body": null,
"is_bot": false,
"headline": "Restore project validation baseline",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be4803a55cec577f8517192ce5043f23cdab53f6",
"body": null,
"is_bot": false,
"headline": "update bacnet",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2021-03-13T02:56:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c14babdc034143fab54d53398a51621ad58f990",
"body": null,
"is_bot": false,
"headline": "export internal functions",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-12-08T07:59:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75e6428cd09c2ae377c63e31986fb760b472bfc9",
"body": null,
"is_bot": false,
"headline": "chore: build for mips archs",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-03-10T15:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b2bffc88273664df0050e85e16ba6e621c36ce",
"body": null,
"is_bot": false,
"headline": "update dependencies",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-01-16T18:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "576d0d0b28097e4396579248cf9288e6ce367db2",
"body": null,
"is_bot": false,
"headline": "await build steps",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fea87fef4f781b975ee917c5696e02a0e4f2542",
"body": null,
"is_bot": false,
"headline": "output binaries to shared volume",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f486c1f51d5c3ebdf2958da466da82aab04b085b",
"body": null,
"is_bot": false,
"headline": "update secret name",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd1b3f135b3f61f12af8212e7af5c6bf8b02171e",
"body": null,
"is_bot": false,
"headline": "gh release",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce63dd9f3f19cc27cb922461b9dbc5274537086d",
"body": null,
"is_bot": false,
"headline": "fix mount paths",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:41:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f13f3f06894762518532853ff40275770c8376b",
"body": null,
"is_bot": false,
"headline": "add missing images",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:40:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abd1ce61a48e225d0da802b39f15b4af5f13f865",
"body": null,
"is_bot": false,
"headline": "build in docker and release to GH",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:39:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e10f12c5e9167212e712a64b1f3ae448354a29",
"body": null,
"is_bot": false,
"headline": "delete Jenkinsfile",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dbcaae2f89424bcbf5126038491b5fcbea0bce0",
"body": null,
"is_bot": false,
"headline": "test config",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:13:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e08d483f855f867c6b62ce416476c65430957a4",
"body": null,
"is_bot": false,
"headline": "depend on other pipelines",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:11:31Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 86,
"latest_release_at": "2026-07-18T21:14:47Z",
"latest_release_tag": "v2.2.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 1,
"days_since_latest_release": 3,
"mean_days_between_releases": 273.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/zyra/gobac/v2",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/zyra/gobac/v2",
"is_deprecated": false,
"latest_version": "v2.2.0",
"repository_url": "https://github.com/zyra/gobac",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T21:13:05Z",
"latest_version_yanked": null,
"days_since_latest_publish": 3
},
{
"name": "github.com/zyra/gobac",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/zyra/gobac",
"is_deprecated": false,
"latest_version": "v1.5.9",
"repository_url": "https://github.com/zyra/gobac",
"versions_count": 20,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2021-03-13T02:56:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1957
}
]
},
"popularity": {
"forks": 0,
"stars": 1,
"watchers": 2,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2019-10-09",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_stars": 1
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"gui/go.mod",
"vendor/github.com/urfave/cli/go.mod",
"vendor/gopkg.in/yaml.v2/go.mod"
],
"largest_source_bytes": 43938,
"source_files_sampled": 170,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"gui/go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/urfave/cli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20190405154228-4b34438f7a67"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.2"
},
{
"name": "fyne.io/fyne/v2",
"manifest": "gui/go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.0"
},
{
"name": "github.com/zyra/gobac/v2",
"manifest": "gui/go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 9,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ihadeed",
"commits": 184,
"avatar_url": "https://avatars.githubusercontent.com/u/13794420?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"gui-validate.yml",
"release.yml",
"validate.yml"
],
"has_docs_dir": true,
"linter_configs": [
".flake8"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/7 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "60082a53f852711389dc53c94011bfe23d3d4cda",
"ran_at": "2026-07-22T04:33:18Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T21:35:51Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-18T21:27:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/zyra/gobac",
"host": "github.com",
"name": "gobac",
"owner": "zyra"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 40,
"vitality": 69,
"community": 24,
"governance": 61,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 86,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "86 commits in the last year",
"points": 17.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 86
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v2.2.0",
"releases_from_tags": false,
"days_since_latest_release": 3,
"mean_days_between_releases": 273.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~273.4 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 273.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 3,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 3 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 3
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 1,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 9,
"open_issues": 0,
"closed_issues": 1,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "9/9 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 9,
"decided": 9
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"followers": 3,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "zyra",
"public_repos": 20,
"account_age_days": 3809
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of zyra",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "zyra"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "20 public repos, account ~10 yr old",
"points": 21.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 20
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/zyra/gobac/v2",
"github.com/zyra/gobac"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 3
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 3 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 3
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "20 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 20
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".flake8",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.54,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod",
"gui/go.mod",
"vendor/github.com/urfave/cli/go.mod",
"vendor/gopkg.in/yaml.v2/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".flake8",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 43938,
"source_files_sampled": 170,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/170 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 170,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T04:33:33.735936Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/z/zyra/gobac.svg",
"full_name": "zyra/gobac",
"license_state": "standard",
"license_spdx": "MIT"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.26.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.