Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-23 01:09 UTC
justinlindh / bramble-go
Go SDK for the Bramble LoRa mesh: transports, RPC client, and event streaming for driving Bramble nodes
justinlindh/bramble-go tiene un índice de salud de 57 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Engineering Quality (86/100) y la más baja, Community & Adoption (27/100). Se actualizó por última vez hace 3 días. Una sola persona concentra la mayor parte del trabajo reciente.
57
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
57
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Justin LindhCuenta personal
11 seguidores16 repositorios públicosdesde may 2011
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Go | github.com/justinlindh/bramble-go | v0.12.2 | - | 22 | hace 4 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
71
Actividad de desarrollo
62Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 3 días |
| 7.6/36 | Cadencia de commits — 11/52 semanas con commits |
| 18/18 | Volumen de commits — 138 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Datos de entrada utilizados
| commits_last_year | 138 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 11 |
Disciplina de publicación
84Bueno
Cómo se puntúa
| 27/27 | Publica versiones — 1 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 4 días |
| 12.6/27 | Cadencia de publicación — cadencia desconocida (una sola versión) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 1 |
| latest_release_tag | v0.12.2 |
| releases_from_tags | no |
| days_since_latest_release | 4 |
| mean_days_between_releases | — |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
27
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
57Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 6.3/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | sí |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
53
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 38.2/38.3 | Aceptación de PR — 2/2 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 2 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Propiedad y custodia
48En riesgo
Cómo se puntúa
| 10/30 | Respaldo de la propiedad — cuenta personal (usuario) |
| 0/20 | Dominio verificado — no aplicable a cuentas de usuario |
| 7.8/25 | Alcance del propietario — 11 seguidores de justinlindh |
| 21/25 | Trayectoria — 16 repos públicos, cuenta de ~15 años |
Datos de entrada utilizados
| followers | 11 |
| owner_type | User |
| is_verified | — |
| owner_login | justinlindh |
| public_repos | 16 |
| account_age_days | 5541 |
Excluidos de la puntuación (sin datos o no aplicable): Dominio verificado. Los pesos restantes se han renormalizado.
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en go |
| 35/35 | Recencia de publicación — última publicación hace 4 días |
| 20/20 | Historial de versiones — 22 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | github.com/justinlindh/bramble-go |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 4 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
86
Prácticas de ingeniería
84Bueno
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 6 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 16/16 | Configuración de linter — .golangci.yml |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | sí |
| has_precommit_config | no |
Documentación
90Excelente
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 15/15 | Sitio de documentación / página del proyecto — https://bramblemesh.org |
| 10/10 | Descripción del repositorio |
| 10/10 | Topics — 4 topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | golang, lora, mesh-network, sdk |
| has_wiki | no |
| homepage | https://bramblemesh.org |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
39
Postura de seguridad
39En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — sin datos |
| 2.5/2.5 | CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3,9 |
Excluidos de la puntuación (sin datos o no aplicable): branch_protection, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
60
Contexto y guía para agentes
40En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 95 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,95 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 12.6/18 | Arranque con un solo comando — go.mod (convención del toolchain, sin ejecutor de tareas) |
| 22/22 | Pruebas automatizadas |
| 11/11 | Configuración de lint / formato — .golangci.yml |
| 11/11 | Verificación estática de tipos — Go (tipado estático) |
| 10/10 | Entorno reproducible — lockfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | sí |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Go (tipado estático) |
| 55/55 | Tamaños de archivo manejables — 0/31 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Go |
| largest_source_bytes | 35.765 |
| source_files_sampled | 31 |
| oversized_source_files | 0 |
Interfaces legibles por máquina
40En riesgo
Cómo se puntúa
| 0/40 | Esquema de API (OpenAPI/GraphQL/proto) |
| 0/20 | Servidor MCP |
| 40/40 | Ejemplos ejecutables — examples |
Datos de entrada utilizados
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Datos clave
0estrellas de GitHub
1contribuidores
138commits en los últimos 12 meses
3días desde el último push
1versiones publicadas
1factor bus
0issues abiertas
Goecosistemas de paquetes
Advertencias de recopilación de datos
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 3.9 / 10
3.9agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/d | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 3
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/coder/websocket | v1.8.14 | go.mod |
| Go | go.bug.st/serial | v1.6.4 | go.mod |
| Go | tinygo.org/x/bluetooth | v0.14.0 | go.mod |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"golang",
"lora",
"mesh-network",
"sdk"
],
"is_fork": false,
"size_kb": 368,
"has_wiki": false,
"homepage": "https://bramblemesh.org",
"languages": {
"Go": 203687,
"Shell": 2748,
"JavaScript": 9437
},
"pushed_at": "2026-07-19T07:06:57Z",
"created_at": "2026-07-08T10:27:28Z",
"owner_type": "User",
"updated_at": "2026-07-19T07:07:02Z",
"description": "Go SDK for the Bramble LoRa mesh: transports, RPC client, and event streaming for driving Bramble nodes",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Justin Lindh",
"type": "User",
"login": "justinlindh",
"company": null,
"location": "Henderson, NV",
"followers": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/802578?v=4",
"created_at": "2011-05-21T20:00:27Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 5541
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2026-07-18T06:02:20Z"
}
],
"recent_commits": [
{
"oid": "e6b2f00c12ee90a4ebd4102c5d13176cc3c42e19",
"body": "* ci(ci): enforce PR template section headers on pull requests\n\nAdd a required PR Template workflow that reads the level-2 section\nheaders from .github/PULL_REQUEST_TEMPLATE.md and verifies each one\nappears verbatim, with its formatting, in the pull request body. It\nruns on opened, edited, reopened,\n[…]\nLs, and trailers\nthat routinely exceed that, so drop the gate, matching the bramble repo\nwhich already disables both rules.\n\n---------\n\nCo-authored-by: digits-bot <digits-bot@users.noreply.github.com>",
"is_bot": false,
"headline": "ci(ci): enforce PR template section headers on pull requests (#2)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-19T07:06:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7aa8a6919de46de0167890172eb273dd82576c0d",
"body": "…tover (#1)\n\n* ci: port claude reviews, PR template, squash-aware release, runner cutover\n\nBring bramble-go in line with the mechanisms built on the main bramble\nrepo:\n\n- Add .github/workflows/claude.yml for @claude PR reviews, with a single\n --allowedTools flag (repeated flags replace each other) \n[…]\n(ci): pass allowed tools to the PR reviewer in one flag\n\nRepeated --allowedTools flags replace each other instead of accumulating,\nso only the last rule survived. Same defect and fix as the main repo.",
"is_bot": false,
"headline": "ci: port claude reviews, PR template, squash-aware release, runner cu…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-18T06:01:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0c3dbd7e5839abc31468fd5d4d4de3b2ae1205e",
"body": "…coords)",
"is_bot": false,
"headline": "chore(go-public): restore + harden internal-refs gate (device addrs, …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-18T01:04:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68711933ea5813fcf32758fd51254f95f473515f",
"body": null,
"is_bot": false,
"headline": "chore(go-public): restore internal-refs gate after history rewrite",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-17T21:18:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eae017694cf9c0429dc70a57634028da0a9404f9",
"body": "…gate strict\n\nclient_test.go WiFi/OTA mock IPs 192.168.1.x -> 192.0.2.x (RFC5737 doc\nrange); assertions updated to match. The gate now fails on any private\n192.168.x except the ESP32 SoftAP 192.168.4.x, scans markdown too, and\ndrops the stale .gitea exclusion (which is clean).",
"is_bot": false,
"headline": "chore(go-public): genericize test IPs to RFC5737, make internal-refs …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-17T09:49:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a608ea850b582ae0ed4daf1ed9e7827a33d5031",
"body": "Rename the Go module path from github.com/justinlindh/bramble-go to\ngithub.com/justinlindh/bramble-go across go.mod, all imports, README, and\ndocs. Scrub internal-infrastructure references for the public mirror.\n\nPort the .gitea workflows to .github/workflows on GitHub-hosted\nubuntu-latest runners (go quality, commitlint, semantic-release via the\nGitHub plugin) and add a check-no-internal-refs gate script plus workflow.\nThe .gitea workflows stay in place as a frozen mirror-side config.",
"is_bot": false,
"headline": "chore: rename module to github.com/justinlindh/bramble-go and port CI",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-17T09:30:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b99528f7f79223eb03bb2a06a209431487624b74",
"body": "Add Broadcast bool and Channel int to Message so callers can classify DM vs broadcast vs channel on the live onMessage path, which carries these fields but no \"to\". Additive and non-breaking.",
"is_bot": false,
"headline": "feat(types): expose broadcast and channel routing on Message (#35)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-10T08:07:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2af474aa116d6a706f60a4a4b0259f5d2f86f6d1",
"body": "…o + parity KAT' (#34) from feat/trust-anchor-client into main",
"is_bot": false,
"headline": "Merge pull request 'feat(anchor): trust-anchor client methods + crypt…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-06T21:59:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15737104c8207748292a217e96941a7111345a65",
"body": "…ity KAT\n\nAdds the operator-side trust-anchor surface the webapp already has:\n- Client.SetAnchor / AnchorStatus / SetEndorsement RPC wrappers, plus\n ed25519_pub on IdentityResponse and the AnchorStatusResponse type.\n- anchor.go: Ed25519 anchor keygen, the 58-byte 'bramble-endorse-v1'\n endorsement \n[…]\nhared\n fixed vector reproduces the firmware's and webapp's exact 64-byte\n signature and anchor pubkey, so a cert this SDK signs is byte-accepted by\n the device (verified end-to-end on a Heltec V4).",
"is_bot": false,
"headline": "feat(anchor): trust-anchor client methods, crypto, and cross-impl par…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-06T21:58:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10a37047056d73c27f1bec4aa767ea67b8ee226b",
"body": "…es, GPS casing, transporttest, coder/websocket)' (#33) from feat/api-polish into main",
"is_bot": false,
"headline": "Merge pull request 'feat(api): pre-1.0 API surface polish (Get prefix…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-13T00:32:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "163e914d1a5a1018019642eef49b0ec2ade47581",
"body": "…ttest, coder/websocket)\n\nBreaking changes, intentionally landed before any public release:\n\n- Drop Get prefixes on all client query methods: WifiStatus, Battery,\n GPSPosition, BeaconPolicy, AudioStatus, StorageInfo, Diagnostics,\n AuthToken, TrafficDebug, TrafficEvents (and the matching\n TrafficD\n[…]\n directive from the 1.26.1 patch pin to a 1.25.0 floor.\n- Update README, docs/API.md, and examples to the new surface; add the\n missing OnPeerLocation/OnIdentityChange rows to the callback reference.",
"is_bot": false,
"headline": "feat(api): pre-1.0 surface polish (Get prefixes, GPS casing, transpor…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T23:54:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "199545b12c954e6bab80f2ecaad0e02382b573d2",
"body": "…from chore/repo-hygiene into main",
"is_bot": false,
"headline": "Merge pull request 'chore: repo hygiene pass (workstream 0.4)' (#32) …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:58:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3c73ca3d46e90752702d859b133a15e6ba2ccc8",
"body": "SDKVersion still said 0.5.0 while release tags reached v0.9.0. Release\nnotes are generated by semantic-release on the Gitea releases page, and\nthe in-repo changelog had drifted (entries for v0.6.0 through v0.9.0 sat\nunder 'Unreleased'); the README now points at Gitea releases instead.",
"is_bot": false,
"headline": "chore(release): bump SDKVersion to 0.9.0 and drop stale CHANGELOG.md",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "945b8ca899fd5800833b5e1747cd3a903408b59d",
"body": null,
"is_bot": false,
"headline": "chore: ignore stray bramble binary at repo root",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba02449348fbe1d88c0c276183772db8820f59d6",
"body": "- install golangci-lint from the v2 module path with a cached version\n marker so the runner replaces the stale v1.64.8 binary\n- add a 'go mod tidy -diff' step to the vet job\n- update the README lint contract from v1.64.8 to v2.11.4",
"is_bot": false,
"headline": "ci: pin golangci-lint v2.11.4 and check go.mod tidiness",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68128b111866541531b3db7fd51dfafd263fc5f5",
"body": "- .golangci.yml: v2 schema, 'standard' default linter set (previous four\n linters plus errcheck)\n- explicitly discard deferred Close errors in tests and examples (errcheck)\n- drop redundant embedded-field selector and use a tagged switch in\n transport/ble.go (staticcheck QF1008/QF1003)\n- gofmt types.go",
"is_bot": false,
"headline": "chore(lint): migrate golangci-lint config to v2 schema and fix findings",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f4cf1fe2278168bc04f042639bf8b8d22f32fa9",
"body": "The Send signature gained a context parameter in 0c57012 but this\ncallsite was missed, so 'go test ./transport' failed to compile on main.",
"is_bot": false,
"headline": "fix(test): pass context to BLE Send in reconnecting test",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcd83c687767f278a3aa2e172fa79c0923ae010b",
"body": "…IdentityChange notifications' (#31) from task/c45-add-sdk-handlers-for-onpeerlocation-and-oniden-cb0d086e into main",
"is_bot": false,
"headline": "Merge pull request 'feat(sdk): add handlers for onPeerLocation and on…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-26T02:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31bfba58a31c4bf8adf46ac255e10af26b15103c",
"body": "…ications\n\n- Add PeerLocationEvent and IdentityChangeEvent types to types.go\n- Add onPeerLocationFn and onIdentityChangeFn callback fields to Client\n- Handle bramble.onPeerLocation (null params) and bramble.onIdentityChange\n in notifyLoop\n- Add OnPeerLocation and OnIdentityChange methods for callba\n[…]\nnctional option wiring\n\nFirmware sends onPeerLocation with null params on every received peer\nlocation update; onIdentityChange carries new_address+reason on address\ncollision re-keying. Resolves C45.",
"is_bot": false,
"headline": "feat(sdk): add handlers for onPeerLocation and onIdentityChange notif…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-25T18:05:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3c95fffc017e03597446c9f8bcbdc2bc6998f67",
"body": "…opulate changelog (audit D27, D30)' (#30) from docs/audit-d27-api-reference into main",
"is_bot": false,
"headline": "Merge pull request 'docs: add 15 missing public methods to API.md + p…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-24T17:53:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fc44b646edcbec3a3764d2a3e15650968073ba7",
"body": "…D30)",
"is_bot": false,
"headline": "docs: populate [Unreleased] changelog with March 2026 entries (audit …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-24T17:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b793928d7ebcd4062ae3a04fdbbef1fa7655d97",
"body": null,
"is_bot": false,
"headline": "docs: add 15 missing public methods to API.md (audit D27)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-24T17:50:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee95e5b8982375084796fa64d19209b0af501dd",
"body": "…' (#29) from task/c43-add-getauthtoken-to-ble-transport-for-symmetry-f477ec20 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/29",
"is_bot": false,
"headline": "Merge pull request 'fix(transport): add GetAuthToken to BLE transport…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T20:01:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f7518de458b0d3ea9f556f92b2803518ea3bff4",
"body": "…nd fixtures' (#28) from task/c38-fix-location-tier-mismatch-between-cli-docs-an-bff62abc into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/28",
"is_bot": false,
"headline": "Merge pull request 'fix(location): align SDK location tier examples a…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:47:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f27a8cdf6e291906a4cbf693ef15fab6ff291b91",
"body": "…hooks' (#27) from task/c40-add-ondisconnect-onreconnect-hooks-to-ble-tran-54135d8f into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/27",
"is_bot": false,
"headline": "Merge pull request 'fix(transport): add BLE OnDisconnect/OnReconnect …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:47:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0f1fa8b83d3a1a24d5d6eac18fc9052dde677fd",
"body": null,
"is_bot": false,
"headline": "fix(transport): add BLE GetAuthToken for transport symmetry",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6b233b56b36e0810504d8d69965bf8bc0f0c9e4",
"body": null,
"is_bot": false,
"headline": "fix(location): align sdk location tier examples and fixtures",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:46:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa6bbc6d9e4f123bfc6fcf8a940a3f652d01699f",
"body": "… (#26) from task/c42-fix-websocket-send-to-respect-caller-context-i-840915f8 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/26",
"is_bot": false,
"headline": "Merge pull request 'fix(transport): propagate caller context in Send'…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69131c7ce1e7352534ecafe29ae1a4f5dd07f395",
"body": "…ct coverage (T29)' (#24) from test/ble-auth-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/24",
"is_bot": false,
"headline": "Merge pull request 'test(transport): add BLE auth handshake and Conne…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:45:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "211d343101b21f0b7bbc9b36926980e45997034a",
"body": "… for godoc' (#25) from task/c41-fix-broadcast-deprecation-comment-to-godoc-for-70779ecf into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/25",
"is_bot": false,
"headline": "Merge pull request 'fix(client): format Broadcast deprecation comment…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:45:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72d9bfaee2f73b30456b6631f6d71a1f8477081e",
"body": null,
"is_bot": false,
"headline": "fix(transport): add BLE disconnect and reconnect hooks",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c570126fdb68662ed79bd267b91daa21448aa66",
"body": null,
"is_bot": false,
"headline": "fix(transport): propagate caller context through Send",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "894a9a4a703f93fd750f112dba364381dc04941d",
"body": null,
"is_bot": false,
"headline": "fix(client): format Broadcast deprecation as godoc",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:41:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "608e858b99f350f20ea4de65c6b9aa8ae8babc27",
"body": "Add five new tests to improve coverage of authenticate() (from 0%)\nand Connect() beyond the already-connected guard:\n\n- TestBLEAuthenticate_NoToken: authenticate() exits immediately with no\n auth token configured (covers the early-return path)\n- TestBLEAuthenticate_SendFails: authenticate() wraps E\n[…]\nh)\n\nThe remaining authenticate() paths (Receive timeout, validateAuthResponse)\nand Connect() scan/GATT paths require real BLE hardware or a production-code\nabstraction hook and are not exercised here.",
"is_bot": false,
"headline": "test(transport): add BLE auth handshake and Connect coverage (T29)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-19T21:31:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb96e9890e35e9b37f6625927d2b4d7075392005",
"body": "…23) from fix/audit-c31-c34-c37 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/23",
"is_bot": false,
"headline": "Merge pull request 'fix(sdk): address audit findings C31-C34, C37' (#…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-19T18:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07c377373b23d93e0c4e0a35e0a11dc756cd0b85",
"body": "C31: SetNodeName godoc now says max 32 chars (matching firmware)\nC32: LocationEvent.Tier changed from int to LocationTier (string type)\n with constants and UnmarshalJSON handling both int and string\n wire formats (firmware notification sends int, RPCs send string)\nC33: ProbeComplete expanded\n[…]\nKhz/FreqMhz fields\n retained as deprecated with fallback in SetRadio()\nC37: GpsPosition.Timestamp documented as Unix seconds (not ms) to clarify\n the naming inconsistency with other _ms fields",
"is_bot": false,
"headline": "fix(sdk): address audit findings C31-C34, C37",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-19T18:09:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a38def1f6502f051d6fdd9cacec7027e92a743e7",
"body": "… in DeliveryEvents' (#16) from fix/delivery-events-param-case into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/16",
"is_bot": false,
"headline": "Merge pull request 'fix(client): use snake_case since_event_seq param…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8537d3a6e5a953092690ab5db5f9d8a28ce4dd98",
"body": "… with payload context' (#17) from fix/notify-decode-logging into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/17",
"is_bot": false,
"headline": "Merge pull request 'fix(notify): log JSON decode errors in notifyLoop…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ce84a5b9fa8c5b6818ac00609abc34c8f0ccfa9",
"body": "… *int (C25)' (#18) from fix/sendresult-channel-pointer into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/18",
"is_bot": false,
"headline": "Merge pull request 'fix(types): change SendResult.Channel from int to…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eef2f5debf4abca3b1e85324afe0df96fc14ddc",
"body": "…orted across all transports' (#20) from fix/transport-token-encapsulation into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/20",
"is_bot": false,
"headline": "Merge pull request 'refactor(transport): make auth token fields unexp…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df771f9e9ef39baf80b34914896b31cb31c1be35",
"body": null,
"is_bot": false,
"headline": "ci(commitlint): pin to 19.6.0 to avoid tinyexec ESM breakage (#22)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:07:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edd64997dc7a54a9e0c48972ccae1497888bff6f",
"body": "…nsports\n\nWebSocket.AuthToken and Serial.AuthToken were exported (public) fields\nwhile BLE kept its token unexported via BLEConfig.AuthConfig.\n\nThis change:\n- Renames Serial.AuthToken → authToken (unexported)\n- Renames WebSocket.AuthToken → authToken (unexported)\n- Adds GetAuthToken() accessor metho\n[…]\ne private field names\n\nAll three transports now use consistent unexported encapsulation\nfor auth token storage. Access is via SetAuthToken/GetAuthToken\nmethods or the WithAuthToken constructor option.",
"is_bot": false,
"headline": "refactor(transport): make auth token fields unexported across all tra…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0b6effe100ce1bc633343e6b858735f58fd8089d",
"body": "- Add notifyDecode() helper that logs a structured slog.Warn on\n unmarshal failure, including up to 512 bytes of the raw payload\n- Add OnDecodeError() callback so callers can observe decode failures\n without affecting the connection\n- Replace silent if json.Unmarshal(...) == nil patterns throughou\n[…]\nfires, contains method/error/payload, and connection stays\n alive for subsequent valid notifications\n- Add TestClient_OnDecodeError_PayloadTruncated: verifies payload\n snippet is capped at 512 bytes",
"is_bot": false,
"headline": "fix(notify): log JSON decode errors in notifyLoop with payload context",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "957ba8ee8b7dc94c58b0d90c1bf8a9384027c00d",
"body": "Zero value int was ambiguous: callers could not distinguish 'no\nchannel info returned by firmware' (should be nil) from 'channel\nindex 0' (a valid channel). Using *int resolves this:\n- nil → channel field absent in firmware response\n- *int == 0 → firmware explicitly returned channel 0\n- *int == N →\n[…]\nresence should use:\n if res.Channel != nil { ch := *res.Channel }\n\nThis is a BREAKING change (bumps to next minor). Existing callers\nthat compare .Channel == 0 must be updated to check for nil first.",
"is_bot": false,
"headline": "fix(types): change SendResult.Channel from int to *int",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34de8aa265215f70bfcb5cedb68e8845b955a4e6",
"body": "Change sinceEventSeq to since_event_seq to match the snake_case\nconvention used by all other SDK methods. Firmware accepts both\nbut consistency requires snake_case.\n\nFirmware RPC handler (rpc_methods.c:221-222) already supports\nboth keys; this change aligns the SDK with the documented convention.",
"is_bot": false,
"headline": "fix(client): use snake_case since_event_seq param in DeliveryEvents",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "015f3abcf483b7d08ae19c2e95f55d25336cfd4c",
"body": null,
"is_bot": false,
"headline": "ci(commitlint): fix stale cache causing tinyexec module-not-found (#21)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "095da2f0d4e1fe82f67f3ae78bc7aafb4a67ba73",
"body": "…onal Option pattern (C23)' (#19) from fix/ble-options-pattern into main",
"is_bot": false,
"headline": "Merge pull request 'feat(transport): refactor NewBLE to accept functi…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T17:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "772abe89423d0021afb0b892cd7411f1062d8d96",
"body": "Refactors NewBLE(BLEConfig) to NewBLE(deviceName string, opts ...Option)\nto match the variadic functional pattern used by NewSerial and NewWebSocket.\n\n- Added applyBLE(*BLE) to the Option interface and option struct\n- WithAuthToken now applies to BLE transport (was silently ignored before)\n- Added W\n[…]\newBLE_DefaultScanTimeout, TestBLENewBLE_MultipleOptions\n\nFixes audit finding C23 (HIGH): BLE transport did not accept Options pattern,\ncausing WithAuthToken() to silently not apply to BLE connections.",
"is_bot": false,
"headline": "feat(transport): refactor NewBLE to accept functional Option pattern",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T17:51:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "588762e5f9185228ea408e897a5b5a5a18f0ffc9",
"body": "…DME' (#15) from fix/doc-audit-d14-d19 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/15",
"is_bot": false,
"headline": "Merge pull request 'docs: fix SetNodeName max chars, add examples REA…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-10T17:34:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78a666126d4cc3fda8683afe59db16be82693b36",
"body": "Audit findings D14, D19:\n- API.md: SetNodeName documented as max 8 chars but firmware\n defines BRAMBLE_NODE_NAME_MAX=32\n- examples/: add README with directory index and usage instructions",
"is_bot": false,
"headline": "docs: fix SetNodeName max chars (8→32), add examples README",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-10T17:19:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "669f6cc6cdd4e9ff949c52f3e716864ccd72677d",
"body": "…ransports' (#14) from feature/transport-auth-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/14",
"is_bot": false,
"headline": "Merge pull request 'test(transport): add auth token coverage across t…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-09T17:14:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20d45a8842313c8beeff3cad3c0b6ac085a246b9",
"body": null,
"is_bot": false,
"headline": "test(transport): cover auth token setters across transports",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-09T17:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7eb275022a697c9f98a267e36b7245bef413a8e",
"body": "…(#13) from ci/add-dispatch-trigger into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/13",
"is_bot": false,
"headline": "Merge pull request 'ci: add workflow_dispatch trigger to go-quality' …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-08T00:05:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ad38fe08339dbce5b7f0177ef204ac148514a5e",
"body": null,
"is_bot": false,
"headline": "ci: replace setup-go with direct toolcache usage, download fallback",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-08T00:04:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d57d2800e1168bcbeb1ab01dbcd864a57f3078c",
"body": null,
"is_bot": false,
"headline": "ci: fix toolcache permissions for setup-go on self-hosted runners",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-08T00:01:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c62cfb26660cdd1fc5ae4c677d5f544b9bd215a",
"body": null,
"is_bot": false,
"headline": "ci: retrigger after runner image update",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:56:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b92bbe6c7931711e8ce80fd283338004cc17452c",
"body": null,
"is_bot": false,
"headline": "ci: add workflow_dispatch trigger to go-quality",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec9bdb09a67a3c050001f2e436f15dfb61fea1dc",
"body": "…d/go-1.26.1 into main",
"is_bot": false,
"headline": "Merge pull request 'build: bump Go minimum to 1.26.1' (#12) from buil…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d16063c20493deecc27c62fd0af8300753b73c24",
"body": "Fixes GO-2026-4599, GO-2026-4600, GO-2026-4601, GO-2026-4602\n(crypto/x509 and os/net/url stdlib vulnerabilities).",
"is_bot": false,
"headline": "build: bump Go minimum to 1.26.1",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:17:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c0b96d18bc5a5e1c27fd08b9de8304018379f34",
"body": null,
"is_bot": false,
"headline": "feat(client): add GetAuthToken() for serial pairing (#11)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T21:40:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d62de8ccd3da5fb88da1a7d3a76d18c25058d7b",
"body": null,
"is_bot": false,
"headline": "transport: add SetAuthToken to Transport interface (#10)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T20:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec3f2c653e39f9cfe6f50216467daaacc105f359",
"body": null,
"is_bot": false,
"headline": "Add Go SDK wrappers for missing firmware RPC methods (#9)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T20:01:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e27650f8b16e8979bd957f24353c9b683ff7f5b",
"body": null,
"is_bot": false,
"headline": "Fix IsCompatible semver comparison for protocol versions (#6)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T19:57:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2a8f90416c16d9d50375bdc07f6145aa5fbe1c4",
"body": null,
"is_bot": false,
"headline": "feat(client): expose full setLocationContact fields (#8)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T19:57:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cbced984eac95f3f0dd0659338f296ddaf8056e",
"body": "…imestamp overflow (#7)",
"is_bot": false,
"headline": "fix(types): remove unused LocationContact and prevent LocationEvent t…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T19:57:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1296798d8aaae685580be478a42d79d156bcfeb",
"body": "…cket + serial' (#5) from feature/ws-serial-auth-token into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/5",
"is_bot": false,
"headline": "Merge pull request 'feat(transport): add shared auth option for webso…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T22:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6a4b0702cd80337a4969032bcffa05b9eca4321",
"body": null,
"is_bot": false,
"headline": "feat(transport): share auth option across serial and websocket",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T21:10:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97e696c098d85e859b7ad3181788aa49437329d5",
"body": "…date channel-critical broadcast' (#4) from feature/serial-and-broadcast-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/4",
"is_bot": false,
"headline": "Merge pull request 'test: increase serial transport coverage and vali…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T20:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2bab878fc69ebc509e286bf3b8b3f6b7ae0bf44",
"body": "…adcast",
"is_bot": false,
"headline": "test: raise serial transport coverage and assert critical channel bro…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T20:53:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7842e7619cdac8b7e85267f320ab3b9f12c6257",
"body": "Addresses audit findings from 2026-03-06 Test Coverage Round 3:\n- Serial transport: Connect, sendAuth, readAuthResponse, reader, WithAuthToken\n all brought from 0% to 59-100% coverage\n- BroadcastOnChannelCritical: 0% to 100% coverage\n- Transport package overall: 55.7% to 66.8%",
"is_bot": false,
"headline": "test: add serial transport and BroadcastOnChannelCritical coverage",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T20:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bde80292d6c08a76e270e1ad6b0f27a4bfcf88ed",
"body": "…m docs/fix-stale-api-doc-comments into main",
"is_bot": false,
"headline": "Merge pull request 'docs: fix 5 stale comment/API doc items' (#3) fro…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T09:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da8dbe9093033789b62796a60d7f3ba35ce8bf7d",
"body": null,
"is_bot": false,
"headline": "docs: fix stale BLE/API comments and type snippets",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T08:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "095647ff3f61a7276e7427a3e623c15848e82ac2",
"body": "Firmware already returns status (none/sent/delivered/failed) in\nbramble.getMessages — the SDK just wasn't capturing it.",
"is_bot": false,
"headline": "types: add Status field to Message struct",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T08:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef693efbd0cb89e5240c29f22ed23bd10896e107",
"body": "…ure/go-quality-ci into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/2",
"is_bot": false,
"headline": "Merge pull request 'ci: add go quality required gates' (#2) from feat…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a9ed13cc4dad0b1dc7488587868416c98b9d33e",
"body": "This reverts commit d46c02f430eb80de0b8184344368436c2102e089.",
"is_bot": false,
"headline": "Revert \"test(ci): inject intentional ineffassign lint failure\"",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:32:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d46c02f430eb80de0b8184344368436c2102e089",
"body": null,
"is_bot": false,
"headline": "test(ci): inject intentional ineffassign lint failure",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:31:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbd9bbd677a9069124c5dd0616655210a4091c87",
"body": null,
"is_bot": false,
"headline": "ci(go): run golangci-lint via runner-built binary",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "168a21ee213f633dd06410f85274e54f9294d720",
"body": null,
"is_bot": false,
"headline": "ci(go): install golangci-lint via goinstall for Go 1.25 compatibility",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:19:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0df44f7c59f8cd5625d30a9e0865ebd67ebf0a6e",
"body": null,
"is_bot": false,
"headline": "ci(go): bump golangci-lint to v1.64.8 for Go 1.25 compatibility",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:13:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "562da4f2d30ab90cafdf5e8bcd21e9e09acb795b",
"body": null,
"is_bot": false,
"headline": "ci: stop forcing missing commitlint config file",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:02:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "478f6f8fbea30d45e930dcb94c22a47cdf377f5c",
"body": null,
"is_bot": false,
"headline": "ci: use runner-local caches and fix commitlint resolution",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce6f731e66119ff4eadc242daf6ccc8ecdcca482",
"body": null,
"is_bot": false,
"headline": "ci: build golangci-lint with runner go toolchain",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:56:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c93a9bb16fd8ec2923fa558db1ca2a6f3c327bc2",
"body": null,
"is_bot": false,
"headline": "ci: add deterministic workflow caches for go and node tools",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:48:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb684b84420afe89ecf8fac1c83b25ae59f4386a",
"body": null,
"is_bot": false,
"headline": "fix: resolve go-quality lint findings for CI gate",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:42:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd5bc625fce6f3f533f7d992e001998c9551f0b7",
"body": null,
"is_bot": false,
"headline": "ci: add required go quality workflow gates",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:40:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74c76ac305e8161d7b1328f1a6f7c891e5c30b29",
"body": null,
"is_bot": false,
"headline": "ci: define local go quality command contract",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e38c193ff5b9f420d92bc0175c565c4de2ebb164",
"body": "… fix/ci-runner-recovery into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/1",
"is_bot": false,
"headline": "Merge pull request 'ci: validate runner recovery workflows' (#1) from…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:32:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e45b4f26551fdbd2aea7ec074e835fa677483e4a",
"body": null,
"is_bot": false,
"headline": "ci: make release workflow routable and fail-fast",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:28:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be7f849abcf6a1db4fb3b599398d34c92648b3c7",
"body": null,
"is_bot": false,
"headline": "ci: fix commitlint runner and deterministic event handling",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:27:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a9e486dabd3ff30a54e1923f821ee81c102a0a4",
"body": null,
"is_bot": false,
"headline": "fix(protocol): retry RPC sends during websocket reconnect",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T07:02:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4549b6cd1fd6258e5491b2b6851314e7af62eff",
"body": null,
"is_bot": false,
"headline": "docs(api): include GetDiagnostics in query methods",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T06:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97a0dc79265b76c6faaef9693dc84a29becb1f5d",
"body": null,
"is_bot": false,
"headline": "Merge auth-token-support: transport auth token support",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-03T00:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83c3b38bed74ebc5085ab07009f212ca1f10f34e",
"body": null,
"is_bot": false,
"headline": "feat(transport): add auth token support to all transports",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T18:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dda3046b3b6475984899314a62d123923d6dcab",
"body": null,
"is_bot": false,
"headline": "Merge readme-rework: streamlined README with API docs split",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T10:07:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97740d1d660bb5576156516a6016b8257c563484",
"body": null,
"is_bot": false,
"headline": "docs(readme): streamline README and move full API reference",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T09:51:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f6d8d68138647b919938b517495cd4923c0d497",
"body": "…lic release",
"is_bot": false,
"headline": "docs(readme): replace internal URLs with YOUR-ORG placeholder for pub…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T06:50:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d5dcb756644ef227a70ad856871573a5f0f8633",
"body": null,
"is_bot": false,
"headline": "docs(readme): remove internal note and fix license section",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T06:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a9eff6e0ea163eb5d3cd42a037026cddf016d24",
"body": null,
"is_bot": false,
"headline": "chore: clean up repo for public release",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T06:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6b565b5de1dcb31322c6b76742c9ed87b86121",
"body": null,
"is_bot": false,
"headline": "feat(sdk): align with bramble.getDiagnostics RPC and bump SDK minor",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-01T23:37:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42e42c3e84191323fa960b61cc34ecb5ceaf446f",
"body": null,
"is_bot": false,
"headline": "docs(readme): document missing client APIs and callbacks",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-01T20:34:17Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 138,
"latest_release_at": "2026-07-18T06:02:20Z",
"latest_release_tag": "v0.12.2",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 11,
"days_since_latest_release": 4,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/justinlindh/bramble-go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/justinlindh/bramble-go",
"is_deprecated": false,
"latest_version": "v0.12.2",
"repository_url": "https://github.com/justinlindh/bramble-go",
"versions_count": 22,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T06:01:15Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 35765,
"source_files_sampled": 31,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/coder/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.14"
},
{
"name": "go.bug.st/serial",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.4"
},
{
"name": "tinygo.org/x/bluetooth",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 2,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "justinlindh",
"commits": 138,
"avatar_url": "https://avatars.githubusercontent.com/u/802578?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"claude.yml",
"commitlint.yml",
"go-quality.yml",
"internal-refs.yml",
"pr-template.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e6b2f00c12ee90a4ebd4102c5d13176cc3c42e19",
"ran_at": "2026-07-23T01:09:28Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T07:08:34Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T07:06:58Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/justinlindh/bramble-go",
"host": "github.com",
"name": "bramble-go",
"owner": "justinlindh"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 39,
"vitality": 71,
"community": 27,
"governance": 53,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 71,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 138,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "138 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 138
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 84,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.12.2",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 27,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 2,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "2/2 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 2,
"decided": 2
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"followers": 11,
"owner_type": "User",
"is_verified": null,
"owner_login": "justinlindh",
"public_repos": 16,
"account_age_days": 5541
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "11 followers of justinlindh",
"points": 7.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 11,
"login": "justinlindh"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~15 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/justinlindh/bramble-go"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "22 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 22
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"golang",
"lora",
"mesh-network",
"sdk"
],
"has_wiki": false,
"homepage": "https://bramblemesh.org",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://bramblemesh.org",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 39,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 60,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.95,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "95 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 95,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 35765,
"source_files_sampled": 31,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/31 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 31,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T01:09:34.271302Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/justinlindh/bramble-go.svg",
"full_name": "justinlindh/bramble-go",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.