IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.
joaquinbejar/IronFix tiene un índice de salud de 60 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (78/100) y la más baja, Community & Adoption (40/100). Se actualizó por última vez hace 1 día. Una sola persona concentra la mayor parte del trabajo reciente.
60
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
60
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
289 seguidores84 repositorios públicosdesde feb 2022Capital Delta
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
deps.dev does not index crates:ironfix-core@0.4.0; advisories assessed against the repository dependency graph instead
No resolved dependencies carried a version and a supported ecosystem
Más detalle
Historial de estrellas y forks 0 ★ / 5 ⇿
0Estrellas
5Forks
2Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 0Parche 2
Cada punto abarca 2 días.
OpenSSF Scorecard 4.4 / 10
4.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-23 16:43 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 3 paquetes directos y 1 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
crates.io
proc-macro2
—
directa
crates.io
quote
—
directa
crates.io
syn
—
directa
crates.io
tracing-subscriber
—
indirecta
Avisos de dependencias sin evaluar
El cotejo de avisos no pudo ejecutarse para este informe: No resolved dependencies carried a version and a supported ecosystem
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 785,
"has_wiki": true,
"homepage": null,
"languages": {
"Rust": 1483165,
"Makefile": 15958,
"Dockerfile": 17123
},
"pushed_at": "2026-07-22T15:00:23Z",
"created_at": "2024-04-28T05:13:34Z",
"owner_type": "User",
"updated_at": "2026-07-22T14:50:38Z",
"description": "IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://t.me/joaquin_bejar",
"name": "Joaquin Bejar Garcia",
"type": "User",
"login": "joaquinbejar",
"company": "Capital Delta",
"location": "London",
"followers": 289,
"avatar_url": "https://avatars.githubusercontent.com/u/99006095?v=4",
"created_at": "2022-02-04T06:46:24Z",
"is_verified": null,
"public_repos": 84,
"account_age_days": 1630
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-22T15:00:32Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-21T11:27:44Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-14T13:59:05Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-12T18:56:19Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-01-27T16:41:29Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-01-27T14:27:20Z"
}
],
"recent_commits": [
{
"oid": "af59accf42b37443007bfa30f3ef1ec22d16cad9",
"body": "…(Closes #51, #52) (#54)\n\n* fix(fast): let the nullable signed codec represent i64::MAX (#51)\n\nThe nullable signed codec biases the non-negative half by one, so Some(i64::MAX)\nbiased to 2^63, which the i64 encoder rejected and the i64 decoder could not\nrepresent: the domain was i64::MIN..=i64::MAX-1\n[…]\nep 7 no longer claims step 5 (HeartBtInt, a body\n field) enforces the standard-header contract, and states the positional 34\n read runs before identity, with the too-low/gap validation at this step.",
"is_bot": false,
"headline": "fix: nullable signed i64::MAX and positional initiator ack MsgSeqNum …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T14:49:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "99cc029684da540ba4cc27a66edc8c24e09b8614",
"body": "* fix(core): bound is_user_defined to the 5000-9999 range (#49)\n\nFieldTag::is_user_defined returned true for any tag >= 5000, so an assigned\nExtension Pack tag (40000+) was misclassified as user-defined. The FIX\nbilateral user-defined range is exactly 5000-9999; tags at or above 10000,\nincluding the\n[…]\nndent of the encoder and\n of the byte-count ceiling.\n- ironfix-fast crate docs no longer claim Some(u64::MAX) is refused; they state\n the nullable unsigned codec covers the full 0..=u64::MAX domain.",
"is_bot": false,
"headline": "fix: three conformance-edge fixes (Closes #48, #49, #50) (#53)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T13:02:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed355a040f4e47cf29da63a659e15dd6d9626e79",
"body": "…rminal (#47)\n\nSquashed for merge: adds Acceptor<A> driving the session acceptor typestate\nover the shared reactor, plus EngineBuilder terminal methods, with the review\nhardening to match the Initiator handshake.",
"is_bot": false,
"headline": "feat(engine): implement the Acceptor and give EngineBuilder a real te…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T10:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9907f904ee330e171f9f9718ee2824b342241f98",
"body": "…Ds (#46)\n\nSquashed for merge: bounds resend recovery, validates SendingTime, places\nCompIDs correctly, and keeps resend state in sync so a partial fill cannot\nsilently stall.",
"is_bot": false,
"headline": "fix(engine): bound resend recovery, validate SendingTime, place CompI…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:33:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5003bcef0b17a03c8076b7cb21bd553f3ca8fefe",
"body": "…#45)\n\nSquashed for merge: corrects the protocol errors across the per-version\nclient/server example pairs so they are usable templates.",
"is_bot": false,
"headline": "fix(examples): make the examples correct templates, not broken ones (…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:08:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7907efec8398e902b6f6223c4a070dc567a05a07",
"body": "…anic (#43)\n\nSquashed for merge: implements the FixMessage/FixField derives and the\nDictionary code generator, with the review hardening (bounded descent,\nidentifier validation, duplicate-key and char/empty-value paths).",
"is_bot": false,
"headline": "fix(derive,codegen): implement the macros instead of expanding to a p…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35de7ee0a23179c38b4d311b5e0ece7884cc448e",
"body": "* fix(fast): correct presence-map semantics per operator\n\nrequires_pmap answered with a single boolean per operator, which cannot be\nright: under FAST 1.1 several operators take a presence-map bit only when the\nfield is optional, so one boolean was always a half-truth. It takes the field's\noptionali\n[…]\nthe zero-suffix rule. The encoded-size\nceiling still bounds a hostile map, which is a separate concern from the\nsuffix. The test that asserted the old exhaustion behaviour now asserts the\nzero-suffix.",
"is_bot": false,
"headline": "fix(fast): correct presence-map semantics per operator (#40)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:55:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31154d695c19ff9693174954fc333702e7bbe747",
"body": "…e (#44)\n\nSquashed for merge: the outbound send path, the Application callback ordering,\nand the hardening from review's second pass.",
"is_bot": false,
"headline": "fix(engine): make the outbound and callback paths do what they promis…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4199e344ce1a26dcbee70e72883763f3632a5dc8",
"body": "…erything (#42)\n\nSquashed for merge: wires MessageStore into the Initiator so an inbound\nResendRequest replays stored application messages (PossDupFlag + OrigSendingTime)\nand gap-fills admin messages and evicted sequence numbers, with the whole-range\ngap fill as the no-store fallback. Includes the sequence-integrity review fixes.",
"is_bot": false,
"headline": "feat(store): replay messages from the store instead of gap-filling ev…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:05:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fc584ea2a4d381a227edf58b2416a07f508a943",
"body": "…it (#41)\n\n* fix(session): validate session configuration instead of panicking on it\n\nSessionConfigBuilder used expect(), so bad input panicked a library -- under\npanic = abort, that takes the caller's process with it -- and otherwise\nvalidated nothing at all. Every knob now has a typed field with a\n[…]\n were configured and validated\nbut never emitted, a silent misconfiguration for a user who set routing IDs. The\nstandard-header builder now stamps them after the sender/target sub-IDs when\nconfigured.",
"is_bot": false,
"headline": "fix(session): validate session configuration instead of panicking on …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:50:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a0f69872ad454074d1dc338e896059b902fc1cd3",
"body": "Merging the stack surfaced three target-level breakages that a library-only\nbuild did not catch:\n\n- The wrong-version Logon-ack test still called Encoder::finish() as if it\n returned a byte slice; it now returns Result<&[u8], EncodeError>, so the\n test matches on it.\n- Both criterion benches preda\n[…]\nhem is the dictionary Validator's job, not the codec's. The\n test now rejects only non-printable/non-ASCII codes and pins the acceptance\n of space and '=' so the decision cannot silently flip again.",
"is_bot": false,
"headline": "fix: repair test and bench targets after the encoder API shift",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:49:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7fb5db966798c88529db633652539fb9ff144686",
"body": "…#39)\n\n* fix(dictionary): make the schema the authority it is supposed to be\n\nThe validator exists to be the authority on message structure, and it was\naccepting messages whose structure did not match the schema. Repeating groups\nwhose count or delimiter disagreed with the definition validated clean\n[…]\ne validator's fractional-second cap rejected legal 12-digit picosecond\nUTCTimestamps that FIX 5.0 SP2 permits -- the dictionary wrongly overruling the\nspec -- so the cap is raised from 9 to 12 digits.",
"is_bot": false,
"headline": "fix(dictionary): make the schema the authority it is supposed to be (…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "afb6297bfaf743efbf9947b0ac0abc040dce969c",
"body": "…X 4.4 (#38)\n\nA FIX DATA field is a counted byte string whose content may legally contain\nSOH and '=', so the decoder frames it by the count its paired LENGTH field\ndeclares. The pair table covered FIX 4.4 only -- 16 pairs -- while the crate\nadvertises 4.0 through 5.0 SP2, so any DATA field introduc\n[…]\nnything an Extension Pack adds after 5.0 SP2. Both are documented rather\nthan left to be discovered.\n\nThe encoder's put_data validates against the same table, so the new pairs work\nin both directions.",
"is_bot": false,
"headline": "fix(tagvalue): frame every spec-defined Length/Data pair, not just FI…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:36:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "234500a544b9ae013223decdb18f66fe8a15b002",
"body": "* fix(session): stop the heartbeat logic from killing live sessions\n\nTwo of these were reproduced against a running session, not inferred.\n\nHeartBtInt = 0 is legal FIX and means do not send heartbeats. It was taken\nliterally as a zero-length interval, so should_send_heartbeat was permanently\ntrue an\n[…]\nis now asserted at construction\n(zero elapsed, unreachable by any realistic stall) and only the 'due' side\nsleeps -- which is robust, since a longer-than-requested sleep still lands past\nthe boundary.",
"is_bot": false,
"headline": "fix(session): stop the heartbeat logic from killing live sessions (#37)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:35:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84895907490b1e9831ba48f692d0d1637754f3cd",
"body": "… accepts (#36)\n\n* fix(tagvalue): make every frame the encoder emits one its own decoder accepts\n\nThe encoder wrote application values raw, so a string containing SOH or '='\ninjected fields into its own message -- the mirror of the decoder-side\ninjection already closed. Illegal bytes are now refused\n[…]\npty value.\n\nA caller-facing rejection (an Err back through Connection::send) would need a\noneshot on the fire-and-forget send channel, which is a Connection API change\nleft for the outbound-path work.",
"is_bot": false,
"headline": "fix(tagvalue): make every frame the encoder emits one its own decoder…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:35:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c2e16444f833312b987f063724066c6ec6488f7",
"body": "…ess (#35)\n\n* ci: make the gates fail when they should, and stand up the bench harness\n\nformat_check ran the mutating format target instead of a check, so it\nrewrote the files and reported success -- the gate could never fail.\n\npublish-all suppressed every error with '|| true', so it reported succes\n[…]\nefore finish(), so it is narrowed to what the bench\nmeasures.\n\nAdds doc/adr/0001 recording the criterion dev-dependency decision -- the repo\nhad no ADR directory and this is the first ADR-worthy call.",
"is_bot": false,
"headline": "ci: make the gates fail when they should, and stand up the bench harn…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:33:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be83d71cb0ae00e2aac6a247846b777f4d8706cb",
"body": "* docs: make the documentation describe the code that exists\n\nThe README's quick start called EngineBuilder::build(), which has never\nexisted, so the first thing a reader tried did not compile. It also advertised\nTLS, a FileStore, broad out-of-the-box version support and a complete facade,\nnone of w\n[…]\num sketch flagged in review is left as is: architecture.md is\nan explicitly-labelled design target whose code is illustrative and mostly does\nnot compile, and that unsafe is already disclaimed inline.",
"is_bot": false,
"headline": "docs: make the documentation describe the code that exists (#33)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:31:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a804306d42a5006a59dc619075b762d71fc1bc3",
"body": "…rsion hoist\n\nThe #28 version hoist made begin_string a method on the shared FixVersion,\nbut #9's BeginString mismatch check indexed it as a struct field. Both were\ntextually clean on merge yet semantically incompatible, breaking the build.\nThe two call sites in the Logon-ack check now invoke the method.",
"is_bot": false,
"headline": "fix(engine): call FixVersion::begin_string() as a method after the ve…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:29:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14ef48f2459e1899d1973feef8bac582863f55d4",
"body": "The map from a configured FIX version to its wire form -- BeginString, and\nApplVerID for the 5.0 family -- existed in two places: ironfix-dictionary's\nschema::Version, and a pub(crate) table added to ironfix-engine when FIXT.1.1\nsupport landed. The duplication was deliberate, because ironfix-engine \n[…]\nversion but no application version for the required DefaultApplVerID -- rather\nthan guessing one onto the wire.\n\nThe crate DAG is unchanged: ironfix-engine still does not depend on\nironfix-dictionary.",
"is_bot": false,
"headline": "refactor(core): give the FIX version mapping a single home (#34)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:26:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62206df6a598cfa4d4bc46ea566394dc0d13dcf2",
"body": "* perf(core): make an unrecognised MsgType allocation-free\n\nMsgType::from_str ended in Custom(other.to_string()), so any tag 35 value the\nenum does not name heap-allocated once per message on the decode success path\n-- the path that is supposed to allocate nothing. A counterparty sending a\nvendor-sp\n[…]\nh are accepted now, while SOH, other control bytes and non-ASCII stay\nrejected. A decoder test that asserted the old '=' rejection is updated to\nassert 35=A=B decodes to Custom(\"A=B\") and round-trips.",
"is_bot": false,
"headline": "perf(core): make an unrecognised MsgType allocation-free (#32)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:25:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "318e3bc33bed6acdce36dbf528fd28ce00b71852",
"body": "…loss (#31)\n\n* fix(core): harden the shared vocabulary against injection and silent loss\n\nCompId checked only length, and the engine writes CompIds unescaped into tags\n49 and 56 on every outbound message -- so a hostile identifier injected header\nfields or corrupted framing. The constructor now reje\n[…]\nates a field and only the\nfirst '=' separates tag from value -- so a valid counterparty identifier\ncontaining '=' was refused. The '=' check is removed; SOH and non-printable\nbytes are still rejected.",
"is_bot": false,
"headline": "fix(core): harden the shared vocabulary against injection and silent …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:24:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2929dae71c2a8ff27737eb079ecc0dac04fa44a8",
"body": "… (#30)\n\n* fix(fast): correct the stop-bit primitives and bound the presence map\n\nThe signed encoder never emitted the sign-carry byte, so every value whose\nmost significant payload byte conflicted with the sign round-tripped to a\ndifferent number: 64 decoded as -64, 127 as -1, i64::MAX as -1, i64::\n[…]\nto what the code guarantees and the resolution is\npointed at the template work in #13. The ceiling's scope is stated too: it\nbounds decode, not from_bits or the builder, whose output encode() refuses.",
"is_bot": false,
"headline": "fix(fast): correct the stop-bit primitives and bound the presence map…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:23:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83613e69fc1087c0cd1d5b06125a6f121a648162",
"body": "* fix(engine): make inbound session handling conform to the FIX spec\n\nEight defects in the Initiator's inbound path, all reachable from a\ncounterparty.\n\nSequenceReset conflated GapFill with Reset. Only Reset mode may ignore\nMsgSeqNum; a GapFill participates in normal sequencing, so a gapped fill now\n[…]\nn consuming an in-sequence fill, on the malformed-flag reason,\nand on the engine declaring but not using a store; the outbound EndSeqNo=0\nsentinel's 4.0/4.1 caveat is documented as a known limitation.",
"is_bot": false,
"headline": "fix(engine): make inbound session handling conform to the FIX spec (#25)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:19:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb1eb9638f002e5735c0c2f7d8de06bc988a496c",
"body": "…ssage recovery (#24)\n\n* chore: bump workspace to 0.4.0\n\nThe P0 audit fixes require breaking public API changes (fallible\nconstructors, new error variants on enums that are not #[non_exhaustive],\ndeprecations). For a 0.x crate the breaking bump is the minor position, and\nsemver.yml runs cargo-semver\n[…]\nnds the buffer's length, not its resident cost, and that\ntokio_util::Framed terminates its stream after any decoder error -- so the\nresync is reachable only by a caller that drives the codec directly.",
"is_bot": false,
"headline": "fix(transport): verify framing, bound buffering and define garbled-me…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T17:50:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e565c29548fded9174d27b65acf8c3ef6c1f52ad",
"body": "…ut (#23)\n\n* chore: bump workspace to 0.4.0\n\nThe P0 audit fixes require breaking public API changes (fallible\nconstructors, new error variants on enums that are not #[non_exhaustive],\ndeprecations). For a 0.x crate the breaking bump is the minor position, and\nsemver.yml runs cargo-semver-checks agai\n[…]\nagainst the FIX 4.4 DATA field set so the two cannot drift.\n\nAlso corrects the checksum comment, which claimed 16.8 MB was reachable for a\nframed message when the transport caps frames far below that.",
"is_bot": false,
"headline": "fix(tagvalue): harden the tag=value decode path against untrusted inp…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T17:49:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1110a14a020b34883df4ca1385a7ed9d0aeaba8b",
"body": "Three sibling unchecked-arithmetic sites were reachable from raw framing\nbytes and panicked under overflow-checks (or wrapped silently in release):\n\n- ironfix-tagvalue/src/decoder.rs: `body_start + body_length` used the\n fully attacker-controlled BodyLength(9). Now `checked_add`, plus a\n declared-\n[…]\nyLength that does not match\nthe actual body. The dictionary validator test fixtures declared a dummy\n`9=100`, so the test helper now computes the real length.\n\nBumps the workspace to 0.3.1.\n\nCloses #4",
"is_bot": false,
"headline": "fix: bound attacker-controlled BodyLength and CheckSum arithmetic (#5)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T11:20:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2099810441f4aef5e83e037ad89cc7b64c9a1f1c",
"body": "tokio 1.52, bytes 1.12, smallvec 1.15, memchr 2.8, rust_decimal 1.42,\nquick-xml 0.41; add futures-util for the engine reactor's Stream/Sink\ncombinators. Adapt the dictionary loader to quick-xml 0.41, which\nreplaces unescape_value with normalized_value(XmlVersion).\n\nMinor (0.x-major) bump: ironfix-engine grows the Initiator public API\nand the workspace dependency floors move.",
"is_bot": false,
"headline": "Update dependencies to latest stable and bump workspace to 0.3.0",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-14T13:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e09dd4128dd97630c24977293c45445f18a445",
"body": "Dial + FixCodec framing + Logon handshake driven through the\nironfix-session typestates, with a background reactor task owning the\nsocket: heartbeats/TestRequests with timeout detection, sequence\nvalidation (ResendRequest on gap, GapFill reply to resends, PossDup\nhandling), Application callback disp\n[…]\nion, per-connection reactors) is not cheap to bolt on here.\n\nFix the fix44_server example to send incrementing MsgSeqNum: a\nsequence-correct initiator rejects its hardcoded 34=1 as too-low.\n\nCloses #3",
"is_bot": false,
"headline": "Add Initiator to ironfix-engine: TCP dial, reactor, session runner",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-14T13:57:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32f5e5cf20ca3a24f456952e67ea7af26bd5b7f4",
"body": "ironfix-dictionary now has a dev-dependency on ironfix-tagvalue, so the\nold order fails to resolve during publish verification.",
"is_bot": false,
"headline": "Publish ironfix-tagvalue before ironfix-dictionary in publish-all",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb0a67630cc12844dcb980286f2d60805640fe6b",
"body": "Minor (0.x-major) bump: ironfix-dictionary adds public fields to the\nexhaustive Dictionary and GroupDef structs, which is a breaking change\nfor downstream struct construction.",
"is_bot": false,
"headline": "Bump crate versions to 0.2.0 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d19c92bd18fff8fa2eb6602ec70cfdcecd6d1dc",
"body": "…idator\n\nVendor the QuickFIX FIX44.xml specification and embed it behind\nDictionary::fix44(), parsed once and cached for the process lifetime.\nAdd Dictionary::from_quickfix_xml() so venue-specific dialects can be\nloaded from QuickFIX-format XML. Add Validator, which checks a decoded\nRawMessage again\n[…]\nonent expansion), enum values, and repeating group\ncount/delimiter consistency. Extend the schema with group component\nreferences and header/trailer groups, which FIX 4.4 requires (NoHops).\n\nCloses #2",
"is_bot": false,
"headline": "Add embedded FIX 4.4 dictionary, QuickFIX XML loader, and message val…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94b8edd7e29133a2b9065d61e66519900653be80",
"body": "Add LogonReceived state with accept_logon/reject_logon/on_timeout\ntransitions plus Disconnected::accept and Connecting::on_logon_received,\nso a FIX acceptor (server) can express its state machine with the\nprovided typestate. Add try_allocate_sender_seq and\ntry_increment_target_seq returning Result<SeqNum, SequenceExhausted> so\nsequence exhaustion is an explicit error instead of silent u64\nwraparound; document the reset semantics. Export Session and the new\ntypes from the crate root.\n\nCloses #1",
"is_bot": false,
"headline": "Add acceptor-side session typestates and checked sequence counters",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ac17a37f7c4efbdfe97a06f428809733d88b66b",
"body": "…e badge",
"is_bot": false,
"headline": "Update badges in README to reflect \"ironfix-core\" and simplify licens…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e13dfdc6e7dee43e42e913c738fd75c3d7fa019",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.6 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84846e04d3c172d16a10cb366ce58f82c99a4aa",
"body": "…ility",
"is_bot": false,
"headline": "Refactor code style and ordering in example files for improved readab…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ae4abe5e8b108949521da83f1b544bc021be33",
"body": "… FAST protocol server and client examples. Bump crate versions to 0.1.5.",
"is_bot": false,
"headline": "Add Dockerfiles for FIX protocol versions (FIX40 to FIX50SP2) and new…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7ef7433512008faa99b3727684fe92448cbb2df",
"body": null,
"is_bot": false,
"headline": "Enhance semver workflow to include checks for all ironfix crates",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:22:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3336fad9dea0eb0636636674809c70ac84e3cd5",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.4 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:18:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4a44a0b645d9803546c31f66db6dfa7399b2123",
"body": "…value\" modules across examples and documentation",
"is_bot": false,
"headline": "Update crate imports to match renamed \"ironfix_core\" and \"ironfix_tag…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:18:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98f3f916442566fb273ca92ef47fd1772cb0eef8",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.3 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:09:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b4329da5480707175bf7acf8216bfda966ce048",
"body": "…ences across the repository.",
"is_bot": false,
"headline": "Rename crate from \"ironfix\" to \"ironfix-example\" and update all refer…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4545dd5573e77d91ead3648bafb3d6836ab58aea",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.2 and allow non_snake_case in `lib.rs`.",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5773698741ada37fa00a14bb0248466c2609c092",
"body": "…y` from the publishing workflow in Makefile",
"is_bot": false,
"headline": "Update crate name to \"IronFix\" in Cargo.toml and remove `--allow-dirt…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:52:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b67041f0a9166940f9b2781be2262c9b4f4570d6",
"body": null,
"is_bot": false,
"headline": "Add version update target to Makefile and bump crate versions to 0.1.1",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd279a97026be4713b5b598803cb42b9bbbd97e2",
"body": null,
"is_bot": false,
"headline": "Remove all example files and shared utilities from the repository",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:33:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6cbfd8d4a973d298e22bfde83207e237f70643",
"body": null,
"is_bot": false,
"headline": "Add dependency versions and enhance publishing workflow in Makefile",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T12:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ed5ddbefadb50db5e2941b9ca6c3b775fd114af",
"body": "…port examples",
"is_bot": false,
"headline": "Add `ironfix-transport` crate with FIX codec implementation and trans…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T12:44:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d37b8cdd3eb396b4c70f6927965b108d505bff5",
"body": null,
"is_bot": false,
"headline": "Add license information to README",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85653b7ab89a234a7d1e169e888534153ae08ea0",
"body": "…ry, etc.)",
"is_bot": false,
"headline": "Add metadata to `Cargo.toml` (authors, description, license, reposito…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:03:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b3d7b09461ea06f5bcc9c593d0858a7772e1812",
"body": null,
"is_bot": false,
"headline": "Add docstring to the `main` function to describe its purpose",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aa71a7e2424d460ac30569cf4235251fec27016",
"body": null,
"is_bot": false,
"headline": "Initialize project with main entry point and README file",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86510c5e35d34e66404193ed66474167779f2ef5",
"body": "…s. Added Makefile, `.gitignore`, `rust-toolchain.toml`, and initial GitHub Actions workflows for build, lint, format check, testing, and coverage. Configured Cargo for Rust 2024 edition. Removed unused files.",
"is_bot": false,
"headline": "Set up project structure with essential configuration and CI workflow…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:01:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "985e3ecd70597ce4623d894e3958fca09e374046",
"body": null,
"is_bot": false,
"headline": "start cargo",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a1c6d44ca920c639e5dd47bbf1d4da752ffd453",
"body": null,
"is_bot": false,
"headline": "first commit",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fca02f48c5308000bcf787dd9711ad68e0e312f",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:13:34Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 52,
"latest_release_at": "2026-07-22T15:00:32Z",
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 3,
"days_since_latest_release": 1,
"mean_days_between_releases": 35.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "ironfix-core",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-core",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 7990,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2016,
"first_published_at": "2026-01-27T12:49:59.345945Z",
"latest_published_at": "2026-07-22T14:53:31.824909Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-fast",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-fast",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 468,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 85,
"first_published_at": "2026-01-27T13:35:18.899369Z",
"latest_published_at": "2026-07-22T14:57:48.056384Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-store",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-store",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 3043,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 472,
"first_published_at": "2026-01-27T12:52:21.138677Z",
"latest_published_at": "2026-07-22T14:55:57.317819Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-derive",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-derive",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 189,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29,
"first_published_at": "2026-01-27T12:50:33.059000Z",
"latest_published_at": "2026-07-22T14:54:06.558111Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-engine",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-engine",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 10,
"total_downloads": 2938,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 457,
"first_published_at": "2026-01-27T13:43:29.796940Z",
"latest_published_at": "2026-07-22T14:59:01.231661Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-codegen",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-codegen",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 10,
"total_downloads": 232,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 46,
"first_published_at": "2026-01-27T13:42:56.288181Z",
"latest_published_at": "2026-07-22T14:58:24.175073Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-example",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-example",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 7,
"total_downloads": 134,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29,
"first_published_at": "2026-01-27T14:15:33.090366Z",
"latest_published_at": "2026-07-22T14:59:38.941209Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-session",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-session",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 3054,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 476,
"first_published_at": "2026-01-27T13:34:06.758915Z",
"latest_published_at": "2026-07-22T14:56:35.026256Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
}
]
},
"popularity": {
"forks": 5,
"stars": 10,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-05-21",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"largest_source_bytes": 160824,
"source_files_sampled": 79,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 4,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "ironfix-dictionary",
"manifest": "ironfix-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "arrayvec",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "num-traits",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "num-derive",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rust_decimal",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "chrono",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "syn",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "quote",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "proc-macro2",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "ironfix-core",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "quick-xml",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-session",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-store",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-transport",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-trait",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-util",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "futures-util",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-dictionary",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-session",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-store",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-transport",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-fast",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-engine",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rust_decimal",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "parking_lot",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-trait",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "parking_lot",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memchr",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "itoa",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-util",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memchr",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "proc-macro2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "quote",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "syn",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "tracing-subscriber",
"direct": false,
"version": null,
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 4,
"direct_count": 3,
"indirect_count": 1
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 24,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 30,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "joaquinbejar",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/99006095?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"code_coverage.yml",
"docker.yml",
"docs.yml",
"examples.yml",
"format_check.yml",
"lint.yml",
"semver.yml",
"tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "af59accf42b37443007bfa30f3ef1ec22d16cad9",
"ran_at": "2026-07-23T16:43:31Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T14:50:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T14:49:21Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/joaquinbejar/IronFix",
"host": "github.com",
"name": "IronFix",
"owner": "joaquinbejar"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 44,
"vitality": 78,
"community": 40,
"governance": 61,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 52,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "52 commits in the last year",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 52
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_latest_release": 1,
"mean_days_between_releases": 35.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~35.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 35.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 1 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 1
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"forks": 5,
"stars": 10,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "10 stars",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 10
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"ironfix-core",
"ironfix-fast",
"ironfix-store",
"ironfix-derive",
"ironfix-engine",
"ironfix-codegen",
"ironfix-example",
"ironfix-session"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 18048,
"monthly_downloads": 3610
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,610 downloads/month across crates",
"points": 47.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3610,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 24,
"open_issues": 0,
"closed_issues": 30,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "24/24 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 24,
"decided": 24
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 289,
"owner_type": "User",
"is_verified": null,
"owner_login": "joaquinbejar",
"public_repos": 84,
"account_age_days": 1630
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "289 followers of joaquinbejar",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 289,
"login": "joaquinbejar"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "84 public repos, account ~4 yr old",
"points": 21.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 84
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"ironfix-core",
"ironfix-fast",
"ironfix-store",
"ironfix-derive",
"ironfix-engine",
"ironfix-codegen",
"ironfix-example",
"ironfix-session"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 1
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 44,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "33 of 55 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 33,
"sampled": 55
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 55",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 55
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 160824,
"source_files_sampled": 79,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/79 source files over 60KB",
"points": 52.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 79,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:ironfix-core@0.4.0; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-23T16:43:46.950788Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/joaquinbejar/IronFix.svg",
"full_name": "joaquinbejar/IronFix",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con joaquinbejar/IronFix. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
