symbolicsoft / hpke-ng

Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 34 paquetes directos y 210 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 243 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 1 tienen avisos conocidos, de los cuales 0 son directas. 1 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido, o fuera de la lista de paquetes informada.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "crypto",
        "cryptography",
        "hpke",
        "rust"
      ],
      "is_fork": false,
      "size_kb": 2177,
      "has_wiki": false,
      "homepage": "https://symbolic.software/blog/2026-05-08-hpke-ng/",
      "languages": {
        "Rust": 282261
      },
      "pushed_at": "2026-07-28T15:00:42Z",
      "created_at": "2026-05-07T21:31:55Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T20:09:37Z",
      "description": "Faster, Smaller, Harder HPKE for Rust",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust"
      ]
    },
    "owner": {
      "blog": "https://symbolic.software",
      "name": "Symbolic Software",
      "type": "Organization",
      "login": "symbolicsoft",
      "company": null,
      "location": "Paris, France",
      "followers": 59,
      "avatar_url": "https://avatars.githubusercontent.com/u/26714438?v=4",
      "created_at": "2017-03-27T12:56:16Z",
      "is_verified": null,
      "public_repos": 16,
      "account_age_days": 3410
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-28T08:09:18Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-06-08T09:24:02Z"
        },
        {
          "tag": "v0.1.0-rc.3",
          "kind": "prerelease",
          "published_at": "2026-05-09T11:43:41Z"
        },
        {
          "tag": "v0.1.0-rc.2",
          "kind": "prerelease",
          "published_at": "2026-05-08T12:36:06Z"
        },
        {
          "tag": "v0.1.0-rc.1",
          "kind": "prerelease",
          "published_at": "2026-05-08T08:12:41Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f3bd71d3a07220d4c3d6d6d11baf5ace3bf9417b",
          "body": null,
          "is_bot": false,
          "headline": "Additional nits on top of #23",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T15:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57f2307eb3b732a127d7a31a14c0d69a4056d62d",
          "body": "deps: migrate AEAD stack to the RustCrypto 0.11 generation",
          "is_bot": false,
          "headline": "Merge pull request #23 from 10d9e/deps/aead-011-migration",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T14:56:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "778849cacd3a1d8c7ecfc574b545e26caf78da33",
          "body": "Minor security hardening: nonce scrub",
          "is_bot": false,
          "headline": "Merge pull request #21 from 10d9e/security/minor-hardening",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T14:44:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cdaf76d84be7105b738086b273fb0aedd994e917",
          "body": "…D implementations\n\nThis commit cleans up the ChaCha20Poly1305 and AES GCM implementations by removing outdated comments regarding nonce-length invariants and the use of `from_slice`. The changes enhance code clarity and maintain consistency with the recent migration to the RustCrypto 0.11 generation.",
          "is_bot": false,
          "headline": "refactor: remove deprecated comments related to nonce handling in AEA…",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-28T14:23:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7a2b2789bc058cff6a7131136b2181f1399a0ab",
          "body": "Move aes-gcm and chacha20poly1305 from 0.10 to 0.11, with the matching\naead 0.6, aes 0.9, ghash 0.6, and polyval 0.7. The rest of the crate\nalready sits on the digest-0.11 / crypto-common-0.2 generation (sha2\n0.11, hkdf 0.13, elliptic-curve 0.14, rand_core 0.10); the 0.10-line\nAEADs were the last ho\n[…]\n including\nRFC 9180 KATs and the hpke-rs differential suite, clippy -D warnings,\nno-std check on thumbv7em-none-eabihf, and a clean cargo audit.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "deps: migrate AEAD stack to the RustCrypto 0.11 generation",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-28T14:08:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15613e77a645611b4435df12b1ca4c4f3cc6b693",
          "body": "…educe computation",
          "is_bot": false,
          "headline": "optimize: cache public key bytes in Diffie-Hellman decapsulation to r…",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-28T13:38:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abfc0b96d3faabfad3ec2ec746dadc3b189a26e9",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove unnecessary error handling in Diffie-Hellman key exchange",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-28T13:36:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d7d6e4895996eaef4763545cd0715a43a856341",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into security/minor-hardening",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-28T13:35:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e54e9e89b09b435d5f86b1051c18085a2f4545f8",
          "body": null,
          "is_bot": false,
          "headline": "docs: remove superflous commenting",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-28T13:22:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93af916335d9a57718248748a4abca654b4aa7d2",
          "body": null,
          "is_bot": false,
          "headline": "v0.2.0",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T08:08:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c36166afe0de27faca8197c0d2da403c6c3361e",
          "body": null,
          "is_bot": false,
          "headline": "CI syntax fix",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T08:04:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed88d8a9c138b13a1ea2c791e01a7bb4782ad153",
          "body": null,
          "is_bot": false,
          "headline": "Additional zeroization/defense-in-depth + CI fixes",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T08:02:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef729e1b3abf40a2a6e4fc183bc1df2d841cb5fb",
          "body": null,
          "is_bot": false,
          "headline": "Fix CI?",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T07:55:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c2b314f98004d64e71f13df5315f01d3daf9e70",
          "body": null,
          "is_bot": false,
          "headline": "Fix CI",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T07:53:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8480a03df07b7466e918e846b92745a89edc6e1d",
          "body": null,
          "is_bot": false,
          "headline": "v0.2.0",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-28T07:41:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "060658d97750a6a237a5e8436aa51fa626f3eab2",
          "body": "docs: document zeroization scope and the HKDF/HMAC state limitation",
          "is_bot": false,
          "headline": "Merge pull request #20 from 10d9e/security/document-zeroization-scope",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-24T13:38:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b6d3376445a99fa4ea7586cae8c7f221605fb15",
          "body": null,
          "is_bot": false,
          "headline": "GitHub CI fix",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-24T13:31:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "056c8d91d05970570d3ed444cb9e93960cb7d20f",
          "body": null,
          "is_bot": false,
          "headline": "cargo fmt",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-24T13:27:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30208e979421d1d3e202a758ba28e123419a1b2f",
          "body": "pq: drop the expanded ML-KEM decapsulation key on manual zeroize()",
          "is_bot": false,
          "headline": "Merge pull request #19 from 10d9e/security/mlkem-zeroize-dk",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-24T13:27:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbbd2af71d6aab089bd09b32c640fb72ccebc40d",
          "body": "Rename test-harness features to hazmat-* to flag secret exposure",
          "is_bot": false,
          "headline": "Merge pull request #17 from 10d9e/security/hazmat-feature-names",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-24T13:27:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9e2b030e1350e04a83e40cabc5b081340898082",
          "body": "Migrate HPKE RNG API to rand_core 0.10",
          "is_bot": false,
          "headline": "Merge pull request #22 from rdragos/chore/rand-0.10",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-07-24T12:48:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7fc1073ab8cf87e53011a415a7f7ce48dafbf13",
          "body": null,
          "is_bot": false,
          "headline": "feat!: migrate RNG API to rand_core 0.10",
          "author_name": "Dragos Rotaru",
          "author_login": "rdragos",
          "committed_at": "2026-07-24T11:14:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2da75290ee875fd1a79818083cac5ecb9d2260e4",
          "body": "… unused serde feature\n\nThree small items from a security review of v0.1.0:\n\n- DHKEM decap/auth_decap now report the RFC 9180 §7.1.4 all-zeros\n  shared-secret rejection as DecapError instead of leaking the\n  encap-side EncapError label through the receiver path. Adds a\n  regression test.\n- Context::\n[…]\nesence invites accidental serialization of\n  key material in a future change. Reintroduce deliberately if wire\n  serialization is ever designed.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Minor security hardening: decap error labeling, nonce scrubbing, drop…",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-04T16:53:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "42b5a53748f14805841ea19555ff981855fa39c7",
          "body": "The README's security posture covered constant-time properties but not\nmemory-hygiene guarantees. Add a Zeroization section stating what the\ncrate scrubs, and disclose the one gap it cannot close: the RustCrypto\nhkdf/hmac crates do not zeroize internal HMAC state on drop, so\nPRK-derived ipad/opad bl\n[…]\nrypto-based HPKE\nimplementations; documented so deployments with a memory-forensics\nthreat model can compensate (no core dumps, encrypted swap).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: document zeroization scope and the HKDF/HMAC state limitation",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-04T16:51:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d84cd383a7dbade8c36612e4f9b1f7ce799c741",
          "body": "XWingPrivateKey stores its cached decapsulation key as Option<dk>\nprecisely so zeroize() can drop it and trigger its zeroize-on-drop.\nThe ML-KEM wrappers did not: zeroize() scrubbed the 64-byte (d, z)\nseed but left the fully expanded decapsulation key functional in\nmemory until drop. A caller who ma\n[…]\ncap() reject a zeroized key\nwith DecapError instead of panicking. Adds regression tests asserting\nzeroize() disables decap on all three PQ KEMs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "pq: drop the expanded ML-KEM decapsulation key on manual zeroize()",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-04T16:50:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ec1c6b26880d1ed837edd1876f1d9f8bf42f5797",
          "body": "The 'differential' and 'kat-internals' Cargo features expose secret\ninternals as public API: Context::key(), Context::exporter_secret(),\nContext::nonce(), and deterministic ephemeral-key injection via\nencap_with_ikm. Because Cargo unifies features across a build graph,\nany crate in a downstream depe\n[…]\nal / hazmat-kat-internals so a\nproduction build enabling them is visible at a glance, and document\nthe feature-unification hazard in Cargo.toml.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Rename test-harness features to hazmat-* to flag secret exposure",
          "author_name": "lodge",
          "author_login": "10d9e",
          "committed_at": "2026-07-04T16:47:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3a28f34aa59f450b14455a953ff1a3ad6af3344",
          "body": null,
          "is_bot": false,
          "headline": "v0.1.0",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-08T09:23:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68e9e783943d94b9c33ecae7f5005c4f90dfca9b",
          "body": "Distinguish wrong-length IKM from rejection-sampling exhaustion in ML-KEM derive_key_pair",
          "is_bot": false,
          "headline": "Merge pull request #15 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-08T09:12:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83809429448be784f433c3b9e311613ebbba88c9",
          "body": null,
          "is_bot": false,
          "headline": "fix(error): correct InvalidKeyMaterial display message",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-08T09:10:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1daf17c85d29a35956775aae88c5e08a7fa93dab",
          "body": null,
          "is_bot": false,
          "headline": "error: add InvalidKeyMaterial variant (IKM len violations)",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-08T08:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b732714b8c0b30b078671450e1dbe9e40e26dad1",
          "body": "Lock compile-fail type-system invariants for mode tags and sealed supertrait",
          "is_bot": false,
          "headline": "Merge pull request #14 from danieldia-dev/mode-type-tag-tests",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-08T08:18:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd747f6fcca2d1475cf3a873c2a5f932deb1625c",
          "body": null,
          "is_bot": false,
          "headline": "docs(testing): update README",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-07T06:21:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac6a0e66658a20f09f29461f755656629e5b0dea",
          "body": "sealed::Sealed is pub(crate), so any attempt to implement it on an external type must fail with E0603 (private module).",
          "is_bot": false,
          "headline": "test: verify external crates cannot implement the sealed supertrait",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-07T06:21:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b5e7a349dabb2fe4024d481d6e375d8ab4af65a",
          "body": "AuthModeTag implements PskFreeMode, not PskMode, so it must be rejected by key_schedule_psk at compile time.",
          "is_bot": false,
          "headline": "test: verify key_schedule_psk rejects AuthModeTag",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-07T05:57:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5800baa8a68e546c4363289fbdd11176a752c274",
          "body": "BaseModeTag implements PskFreeMode, not PskMode, so passing it to key_schedule_psk must fail to compile.",
          "is_bot": false,
          "headline": "test: verify key_schedule_psk rejects BaseModeTag",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-07T05:52:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c868a5232f88357eeb6bda33c8db505378c2d162",
          "body": "AuthPskModeTag implements PskMode but not PskFreeMode, so it must be rejected by key_schedule_psk_free at compile time.",
          "is_bot": false,
          "headline": "test: verify key_schedule_psk_free rejects AuthPskModeTag",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-07T05:50:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "665ee70899bccc09c4f3f8fde980efab250abb26",
          "body": "PskModeTag implements PskMode, not PskFreeMode, so passing it to key_schedule_psk_free must be a compile error.",
          "is_bot": false,
          "headline": "test: verify key_schedule_psk_free rejects PskModeTag",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-07T05:46:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e68023ac2ace3a2d0ca147fc73f6d9301968b413",
          "body": "Lift mode bytes into the type system and stack-allocate the base nonce",
          "is_bot": false,
          "headline": "Merge pull request #13 from danieldia-dev/perf/stack-allocate-base-nonce",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-06T10:56:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4017740d66e871279ecdc124bca28673d2e057e2",
          "body": "…_nonce\n\nAddress review feedback: use MAX_NONCE_LEN throughout context.rs for consistency, and wrap base_nonce in Zeroizing at the key_schedule level so the heap allocation is scrubbed after being copied into the context.",
          "is_bot": false,
          "headline": "fix(context): replace bare 12 literals w/ MAX_NONCE_LEN, zeroize base…",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-06T10:16:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9366379939468da60dfcf5ceaf48c576bd39e49",
          "body": "Update fuzz/fuzz_targets/key_schedule.rs to dispatch through the new typed key_schedule_psk_free/key_schedule_psk API, and fix two clippy warnings in doc comments.",
          "is_bot": false,
          "headline": "fix: update key_schedule fuzz target and fix clippy doc warnings",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-06T10:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28297e3c8b9e09730147a93b004b2ed1b7b85c85",
          "body": "Replace raw u8 mode byte call sites in differential.rs and kat.rs with the typed __test_only API. In run_kat_common, dispatch on the runtime mode, calling key_schedule_psk_free with BaseModeTag or AuthModeTag and key_schedule_psk with PskModeTag or AuthPskModeTag per arm. Update diff_base_sealing and diff_psk_sealing macros likewise.",
          "is_bot": false,
          "headline": "test: update kat.rs and differential.rs to use typed mode tag API",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-06T10:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c070f3bbe0edd296e927ccab7c10bcf6e8c1abbe",
          "body": "Introduce HpkeMode, PskFreeMode, and PskMode sealed marker traits with BaseModeTag, AuthModeTag, PskModeTag, and AuthPskModeTag as concrete implementors. Replace the raw u8 mode parameter in key_schedule_psk_free and key_schedule_psk with M: PskFreeMode and M: PskMode respectively, deriving the mode\n[…]\n-free path or vice versa is now a compile error. Update all call sites in setup_sender/receiver_* to pass the appropriate mode tag. Expose both typed functions through __test_only under kat-internals.",
          "is_bot": false,
          "headline": "security: replace u8 mode param with sealed PskFreeMode/PskMode type tag",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-06T10:07:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a02da49cb9d72a961a48754ae01fe4c04140d1d3",
          "body": null,
          "is_bot": false,
          "headline": "key_schedule(lib): split into psk_free and psk fast paths",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-06T10:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8eaa7a243f48377dedc819ec835ba18a57af5f0",
          "body": null,
          "is_bot": false,
          "headline": "perf: stack-allocate base_nonce",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-06-06T10:06:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b79ffcded1744559b52d4b323ce25c6b9cc40b88",
          "body": null,
          "is_bot": false,
          "headline": "Fix clippy",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-06T09:43:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09749802ca184b896441ba042de0abfc5c2c9d18",
          "body": null,
          "is_bot": false,
          "headline": "Minor naming discipline improvement",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-06T09:33:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "730c2c8455a20d305ad5ab6726ebe911d8f5498f",
          "body": null,
          "is_bot": false,
          "headline": "Add fuzzing to GitHub CI",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-03T11:11:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "810ee680bee37f51570f936ac702d833a0c75f42",
          "body": null,
          "is_bot": false,
          "headline": "Improve README.md readability",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T13:50:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61ff1b481fa525f04bf7754434ee20b92bcb741c",
          "body": null,
          "is_bot": false,
          "headline": "Make API more misuse-resistant",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T11:41:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deebc4f281990b2288885954faec28926e11215e",
          "body": null,
          "is_bot": false,
          "headline": "GitHub CI: update Rust toolchain so compile_fail is consistent",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T10:06:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47a496554e48a1970d91071297bf66bab804ae7f",
          "body": null,
          "is_bot": false,
          "headline": "Enhanced zeroization discipline",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T10:04:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56bac77b3c17097049d517c90fa6fdb6f821755e",
          "body": "I think the wording was changed in Rust 1.96?",
          "is_bot": false,
          "headline": "Update compile_fail test artifacts",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T10:03:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afda951c92edfb5092281f79c97c18b0b3d4b8aa",
          "body": null,
          "is_bot": false,
          "headline": "Update all benchmarks",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T09:24:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9cf1eed7a353c4fdddd9607fb1aac3b153a90ee",
          "body": "Expand standalone bench suite to mirror comparative.rs and add rust-hpke memory footprint to README",
          "is_bot": false,
          "headline": "Merge pull request #10 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-06-01T08:48:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a19c4a634e08efe6d507eb5143e956fc216f6a9f",
          "body": null,
          "is_bot": false,
          "headline": "bench: expand standalone suite to mirror comparative.rs hpke-ng coverage",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-31T14:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f928f3f26f786d07f5797742659bd7738b34f8c",
          "body": null,
          "is_bot": false,
          "headline": "docs(README): update Performance section",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-30T08:27:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a03e7ff60dbd10a0cbdadd6136ee8da61f44dea",
          "body": "Add rust-hpke to X25519 + ChaCha20-Poly1305 export benchmark",
          "is_bot": false,
          "headline": "Merge pull request #9 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-29T17:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a4d9cc9701aeb222d8ed467198cd8578c66b250",
          "body": "The omission comment was inadventently ambiguous: rust-hpke's export() takes a caller-supplied &mut [u8] with no heap allocation, while hpke-ng and hpke-rs both return a Vec. A pre-allocated [u8; 256] stack buffer is sliced per length inside b.iter() to keep rust-hpke's timed path allocation-free.",
          "is_bot": false,
          "headline": "fix(benches): add rust-hpke to export group",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-29T15:46:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "079266bdb19a186f3f339c7a6819bf3b623d4baf",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md with Daniel's new benchmarks",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-29T15:24:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "779cbd709dfc177d44f4a907e270df0fcb326b65",
          "body": "Add rust-hpke X-Wing benchmarks (via v0.14.0-pre.2) and update README coverage",
          "is_bot": false,
          "headline": "Merge pull request #8 from danieldia-dev/xwing",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-29T14:37:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af8940be4d0bdc9f31e4389d5ea1beaa656f456d",
          "body": "Fixes rand_core SemVer mismatch by introducing RhChaCha20Rng reference wrapper, delegating trait methods, and migrating rust-hpke bench calls to use _with_rng variants.",
          "is_bot": false,
          "headline": "chore(benches): bridge rand_core version mismatch for rust-hpke",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-29T11:31:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "180134adb13997195701e5a852bf70a8cc8005b1",
          "body": null,
          "is_bot": false,
          "headline": "fix(bench): rename hpke_14 alias back to hpke",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-29T09:04:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e35308c8d1a95150c5a30e82ed250e4a02c0f68c",
          "body": null,
          "is_bot": false,
          "headline": "docs: update README for X-Wing coverage; drop redundant getrandom flag",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-28T13:35:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2b01704590ae080ecaf1cb611f018d22fa64b51",
          "body": "Bump rust-hpke dependency from hpke v0.13 to v0.14.0-pre.2 (git pin, rev 5c682cf2). The v0.14 API removes the explicit RNG argument from gen_keypair() and setup_sender(); update all call sites. Add rust-hpke to all previously-omitted X-Wing groups (kem/xwing and xwing_chacha20). All three libraries implement draft-connolly-cfrg-xwing-kem-06 via the same x-wing crate (timing is directly comparable).",
          "is_bot": false,
          "headline": "bench: add rust-hpke X-Wing benchmarks via hpke_14 (v0.14-pre)",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-28T10:51:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3276812a0068b290da71a876c52166dcb06df8c",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-27T14:14:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "708f9214ef1482373d93c1e526f51f62f04e2f03",
          "body": "Expand comparative benchmarks to three-way hpke-ng vs hpke-rs vs rust-hpke suite",
          "is_bot": false,
          "headline": "Merge pull request #7 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-27T13:02:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79c1eddbb435ddf3c5262b3a2cef8cbda196f3a7",
          "body": "Replace const SEED with static SEED, fix imports, fix PskBundle struct literal, add rust-hpke to x25519_chacha20/setup_sender_psk, add detailed omission comments to all rust-hpke-absent groups, fix export exclusion comment, and fix doc header.",
          "is_bot": false,
          "headline": "bench: apply review feedback and fix SEED type errors",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-27T12:40:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4756d092617a11090124f5d33f1ceccd8a260ac5",
          "body": null,
          "is_bot": false,
          "headline": "docs: add CONTRIBUTORS.md",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-27T08:37:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b61d3e1126c8db1b8a730c6176bc8b6006be62e3",
          "body": null,
          "is_bot": false,
          "headline": "Add Authors",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-27T07:54:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "513c83ee316e58c813efb347b911b1c06083a373",
          "body": "Use a seeded ChaCha20Rng per benchmark function instead of constructing OsRng on every iteration. Fix context_open comments that wrongly claimed the receiver context is rebuilt each iteration. Minor comment wording tweaks.",
          "is_bot": false,
          "headline": "bench: replace OsRng with ChaCha20Rng, fix stale context_open comments",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-27T07:29:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3d04d40d1c1d34981485a7da8677a6d5086d8b0",
          "body": "Expand tests and module docs to detail coverage and Criterion settings. Increase the hpke-rs PRNG seed buffer to 64 MiB to prevent InsufficientRandomness panics, and hoist all seed() calls out of the timed b.iter() closures to ensure accurate performance measurements.",
          "is_bot": false,
          "headline": "bench: expand coverage, optimize PRNG seeding, and fix compilation",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-27T07:28:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ae5a92ef14a77ccff044329acbafb416d796184",
          "body": null,
          "is_bot": false,
          "headline": "bench(comparative): add rust-hpke as third comparison target",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-24T11:35:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab2ca11a315378b2dd51982b9d5e58b0b5847d86",
          "body": null,
          "is_bot": false,
          "headline": "Update dependencies",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-24T11:09:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3456706c6c99f84310486d2a14a72a3d71645615",
          "body": "Expand test coverage: compile-fail invariants and nonce derivation correctness",
          "is_bot": false,
          "headline": "Merge pull request #6 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-24T10:59:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "001a9a6a968529d9cc7fca6517a2717f4f4c43df",
          "body": null,
          "is_bot": false,
          "headline": "fix(README): address feedback on compile-fail test documentation",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-24T10:58:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0069f466af603d5c88d688f8edf37d2d80107c37",
          "body": null,
          "is_bot": false,
          "headline": "fix: address review feedback on compile-fail tests and nonce derivation",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-24T10:32:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84f9f7c09d7c6269e76becffd27126f5ba6b664a",
          "body": null,
          "is_bot": false,
          "headline": "docs(README): document compile-fail & nonce derivation tests",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-22T18:02:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20d1b975c4b45af23b758cf1e271df9dab0dabc7",
          "body": null,
          "is_bot": false,
          "headline": "fix(context): add underscore separators to hex literal to satisfy clippy",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-22T15:00:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ec2bc538a0fe551bcc8dd68d868c89f0bb4c50e",
          "body": null,
          "is_bot": false,
          "headline": "test(context): verify nonce derivation XORs seq. number into base nonce",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-22T14:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a3a2a9153d23161c10267fc51f8403aa71543af",
          "body": "Lock in three type-system invariants: Context is not Clone, ExportOnly cannot be used with seal_base, and PQ KEMs cannot be used with seal_auth.",
          "is_bot": false,
          "headline": "test: add trybuild compile-fail tests",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-22T13:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5bd7b1c5c01604728aab1cc527688a8cc3dc6dc",
          "body": "Expand test coverage for auth KEM paths and context sequence number boundaries",
          "is_bot": false,
          "headline": "Merge pull request #4 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-18T09:29:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "342c97d0d6b500178f6cccc37524f7a8d229c674",
          "body": null,
          "is_bot": false,
          "headline": "tests: add auth encap/decap unit test and seal boundary test",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-18T08:59:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd67a2e061e0337473c86d8d0270b1046cc105a8",
          "body": null,
          "is_bot": false,
          "headline": "test(kem): verify extract_and_expand_pieces matches concat equivalent",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-17T15:16:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70eb86c449f620d1b4086a3d2a4f0daa781635e0",
          "body": null,
          "is_bot": false,
          "headline": "refactor(kem): inline hot path functions and rename sk_s_authed",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-17T14:28:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3c3c952f4937b465e9a767c360c93c21943b850",
          "body": null,
          "is_bot": false,
          "headline": "fix(context): strengthen open_rejects_at_message_limit assertion",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-17T14:06:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35a7e1c58a6cd784f86e9ee684191c776bb83d9c",
          "body": "Refactor authenticated DHKEM paths to eliminate intermediate heap allocation",
          "is_bot": false,
          "headline": "Merge pull request #3 from danieldia-dev/main",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-15T10:40:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f738ec55ee621bd86550c817c4c8a7e06e73bfc5",
          "body": null,
          "is_bot": false,
          "headline": "fix(bench): remove redundant AuthKem import",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-15T10:28:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f2240ce7a7ed486622f6d28ca3b6534bc155e9b",
          "body": null,
          "is_bot": false,
          "headline": "refactor(dh.rs): apply extract_and_expand_pieces to all auth paths",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-15T09:21:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4bff452b990000e3d083d78f04aba7c2e790a50",
          "body": null,
          "is_bot": false,
          "headline": "bench: add auth_encap and auth_decap benchmarks for x25519",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-15T09:18:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a90c5afb9fe7312380c4db14111773a47274386a",
          "body": null,
          "is_bot": false,
          "headline": "refactor(dh.rs): eliminate heap allocation in auth encap/decap paths",
          "author_name": "Daniel Dia",
          "author_login": "danieldia-dev",
          "committed_at": "2026-05-15T09:05:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58293305dd8be408dc96eecca8e7d4a80bb3018c",
          "body": null,
          "is_bot": false,
          "headline": "Fix clippy",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-09T11:48:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cacf124bba14a06b8b09abaa3db9b384487ba1a",
          "body": null,
          "is_bot": false,
          "headline": "v0.1.0-rc.3",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-09T11:43:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "344f32a402a901a753cf8deaba364b1fc5d6c3f0",
          "body": null,
          "is_bot": false,
          "headline": "v0.1.0-rc.3",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-09T11:42:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bf9e4bc70ba95a36f71f7c7f3aeaa48b2263b72",
          "body": null,
          "is_bot": false,
          "headline": "Benchmarks: ML-KEM & X-Wing against hpke-rs",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-08T14:00:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c203121332fa999648856f61689b5d8a7410904",
          "body": null,
          "is_bot": false,
          "headline": "README.md: don't use old blog post title",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-08T12:58:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9dda0880dc2b1bb7ddf127e9b61fa4ce008c7ac",
          "body": null,
          "is_bot": false,
          "headline": "v0.1.0-rc.2",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-08T12:35:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7c4adea4808d632642d5849ac6beb1df8431997",
          "body": null,
          "is_bot": false,
          "headline": "Add SECURITY.md",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-08T08:54:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9d1d4bf286d51a69a216c5bd1c3af1eaec76496",
          "body": null,
          "is_bot": false,
          "headline": "Link to announcement post",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-08T08:09:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16fedff1b39f4ec292c6103ee536068f7fab9dbb",
          "body": null,
          "is_bot": false,
          "headline": "Prepare for rc release",
          "author_name": "Nadim Kobeissi",
          "author_login": "nadimkobeissi",
          "committed_at": "2026-05-08T07:47:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 5,
      "commits_last_year": 99,
      "latest_release_at": "2026-07-28T08:09:18Z",
      "latest_release_tag": "v0.2.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 20.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "hpke-ng",
          "exists": true,
          "license": "Apache-2.0 OR MIT",
          "keywords": [
            "crypto",
            "encryption",
            "hpke",
            "rfc9180",
            "cryptography",
            "no-std"
          ],
          "ecosystem": "crates",
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/hpke-ng",
          "is_deprecated": false,
          "latest_version": "0.2.0",
          "repository_url": "https://github.com/symbolicsoft/hpke-ng",
          "versions_count": 5,
          "total_downloads": 22631,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 7544,
          "first_published_at": "2026-05-08T08:10:37.523555Z",
          "latest_published_at": "2026-07-28T08:09:47.076567Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 5,
      "stars": 28,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-05-10",
            "count": 1
          },
          {
            "date": "2026-05-22",
            "count": 2
          },
          {
            "date": "2026-07-04",
            "count": 1
          },
          {
            "date": "2026-07-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 5,
        "total_forks": 5
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "fuzz/Cargo.toml"
      ],
      "largest_source_bytes": 61963,
      "source_files_sampled": 35,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml",
        "fuzz/Cargo.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "proc-macro-error2",
            "direct": false,
            "version": "2.0.1",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2026-0173"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 51
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 243,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 1,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "zeroize",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.9"
        },
        {
          "name": "subtle",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.6"
        },
        {
          "name": "rand_core",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.10"
        },
        {
          "name": "hkdf",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13"
        },
        {
          "name": "sha2",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.11"
        },
        {
          "name": "shake",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "aead",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6"
        },
        {
          "name": "aes-gcm",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.11"
        },
        {
          "name": "chacha20poly1305",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.11"
        },
        {
          "name": "aes",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9"
        },
        {
          "name": "ghash",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6"
        },
        {
          "name": "polyval",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.7"
        },
        {
          "name": "poly1305",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9"
        },
        {
          "name": "x25519-dalek",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "3"
        },
        {
          "name": "ed448-goldilocks",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14.0-pre.12"
        },
        {
          "name": "p256",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "p384",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "p521",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "k256",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "ml-kem",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.2"
        },
        {
          "name": "x-wing",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "aead",
            "direct": true,
            "version": "0.5.2",
            "ecosystem": "crates"
          },
          {
            "name": "aead",
            "direct": true,
            "version": "0.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "aes",
            "direct": true,
            "version": "0.8.4",
            "ecosystem": "crates"
          },
          {
            "name": "aes",
            "direct": true,
            "version": "0.9.2",
            "ecosystem": "crates"
          },
          {
            "name": "aes-gcm",
            "direct": true,
            "version": "0.10.3",
            "ecosystem": "crates"
          },
          {
            "name": "aes-gcm",
            "direct": true,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "chacha20poly1305",
            "direct": true,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "chacha20poly1305",
            "direct": true,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "ed448-goldilocks",
            "direct": true,
            "version": "0.14.0-pre.15",
            "ecosystem": "crates"
          },
          {
            "name": "ghash",
            "direct": true,
            "version": "0.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "ghash",
            "direct": true,
            "version": "0.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "hkdf",
            "direct": true,
            "version": "0.12.4",
            "ecosystem": "crates"
          },
          {
            "name": "hkdf",
            "direct": true,
            "version": "0.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "k256",
            "direct": true,
            "version": "0.13.4",
            "ecosystem": "crates"
          },
          {
            "name": "k256",
            "direct": true,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "ml-kem",
            "direct": true,
            "version": "0.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "p256",
            "direct": true,
            "version": "0.13.2",
            "ecosystem": "crates"
          },
          {
            "name": "p256",
            "direct": true,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "p384",
            "direct": true,
            "version": "0.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "p384",
            "direct": true,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "p521",
            "direct": true,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "poly1305",
            "direct": true,
            "version": "0.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "poly1305",
            "direct": true,
            "version": "0.9.1",
            "ecosystem": "crates"
          },
          {
            "name": "polyval",
            "direct": true,
            "version": "0.6.2",
            "ecosystem": "crates"
          },
          {
            "name": "polyval",
            "direct": true,
            "version": "0.7.3",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": true,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": true,
            "version": "0.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "sha2",
            "direct": true,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "shake",
            "direct": true,
            "version": "0.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "subtle",
            "direct": true,
            "version": "2.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "x-wing",
            "direct": true,
            "version": "0.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "x25519-dalek",
            "direct": true,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "x25519-dalek",
            "direct": true,
            "version": "3.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "zeroize",
            "direct": true,
            "version": "1.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "aho-corasick",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "alloca",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "anes",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "crates"
          },
          {
            "name": "anstyle",
            "direct": false,
            "version": "1.0.14",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "base16ct",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "base16ct",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "bindgen",
            "direct": false,
            "version": "0.72.1",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "block-buffer",
            "direct": false,
            "version": "0.10.4",
            "ecosystem": "crates"
          },
          {
            "name": "block-buffer",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "bumpalo",
            "direct": false,
            "version": "3.20.3",
            "ecosystem": "crates"
          },
          {
            "name": "cast",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "cexpr",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "chacha20",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "chacha20",
            "direct": false,
            "version": "0.9.1",
            "ecosystem": "crates"
          },
          {
            "name": "ciborium",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "ciborium-io",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "ciborium-ll",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "cipher",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "cipher",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "crates"
          },
          {
            "name": "clang-sys",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "crates"
          },
          {
            "name": "clap",
            "direct": false,
            "version": "4.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "clap_builder",
            "direct": false,
            "version": "4.6.2",
            "ecosystem": "crates"
          },
          {
            "name": "clap_lex",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "cmov",
            "direct": false,
            "version": "0.5.4",
            "ecosystem": "crates"
          },
          {
            "name": "const-oid",
            "direct": false,
            "version": "0.10.2",
            "ecosystem": "crates"
          },
          {
            "name": "const-oid",
            "direct": false,
            "version": "0.9.6",
            "ecosystem": "crates"
          },
          {
            "name": "core-models",
            "direct": false,
            "version": "0.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "cpubits",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "cpufeatures",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "cpufeatures",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "crabgrind",
            "direct": false,
            "version": "0.2.6",
            "ecosystem": "crates"
          },
          {
            "name": "criterion",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "criterion-plot",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "crossbeam-deque",
            "direct": false,
            "version": "0.8.7",
            "ecosystem": "crates"
          },
          {
            "name": "crossbeam-epoch",
            "direct": false,
            "version": "0.9.20",
            "ecosystem": "crates"
          },
          {
            "name": "crossbeam-utils",
            "direct": false,
            "version": "0.8.22",
            "ecosystem": "crates"
          },
          {
            "name": "crunchy",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-bigint",
            "direct": false,
            "version": "0.5.5",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-bigint",
            "direct": false,
            "version": "0.7.5",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-common",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-common",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "ctr",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "ctr",
            "direct": false,
            "version": "0.9.2",
            "ecosystem": "crates"
          },
          {
            "name": "ctutils",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "curve25519-dalek",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "curve25519-dalek",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "curve25519-dalek-derive",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "der",
            "direct": false,
            "version": "0.7.10",
            "ecosystem": "crates"
          },
          {
            "name": "der",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "crates"
          },
          {
            "name": "digest",
            "direct": false,
            "version": "0.10.7",
            "ecosystem": "crates"
          },
          {
            "name": "digest",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          },
          {
            "name": "dissimilar",
            "direct": false,
            "version": "1.0.11",
            "ecosystem": "crates"
          },
          {
            "name": "either",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "crates"
          },
          {
            "name": "elliptic-curve",
            "direct": false,
            "version": "0.13.8",
            "ecosystem": "crates"
          },
          {
            "name": "elliptic-curve",
            "direct": false,
            "version": "0.14.1",
            "ecosystem": "crates"
          },
          {
            "name": "equivalent",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "ff",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "ff",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "fiat-crypto",
            "direct": false,
            "version": "0.2.9",
            "ecosystem": "crates"
          },
          {
            "name": "fiat-crypto",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "futures-core",
            "direct": false,
            "version": "0.3.33",
            "ecosystem": "crates"
          },
          {
            "name": "futures-task",
            "direct": false,
            "version": "0.3.33",
            "ecosystem": "crates"
          },
          {
            "name": "futures-util",
            "direct": false,
            "version": "0.3.33",
            "ecosystem": "crates"
          },
          {
            "name": "generic-array",
            "direct": false,
            "version": "0.14.7",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "crates"
          },
          {
            "name": "group",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "group",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "half",
            "direct": false,
            "version": "2.7.1",
            "ecosystem": "crates"
          },
          {
            "name": "hash2curve",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": false,
            "version": "0.17.1",
            "ecosystem": "crates"
          },
          {
            "name": "hax-lib",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "hax-lib-macros",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "hax-lib-macros-types",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "hex",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "hmac",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "hmac",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "hpke",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "hpke-rs",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "hpke-rs-crypto",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "hpke-rs-libcrux",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "hpke-rs-rust-crypto",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "hybrid-array",
            "direct": false,
            "version": "0.4.13",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "2.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "inout",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "inout",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "itertools",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "itoa",
            "direct": false,
            "version": "1.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "js-sys",
            "direct": false,
            "version": "0.3.103",
            "ecosystem": "crates"
          },
          {
            "name": "keccak",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "kem",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.189",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-aead",
            "direct": false,
            "version": "0.0.9",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-aes",
            "direct": false,
            "version": "0.0.9",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-chacha20poly1305",
            "direct": false,
            "version": "0.0.9",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-curve25519",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-ecdh",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-hacl-rs",
            "direct": false,
            "version": "0.0.5",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-hkdf",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-hmac",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-intrinsics",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-kem",
            "direct": false,
            "version": "0.0.9",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-macros",
            "direct": false,
            "version": "0.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-ml-kem",
            "direct": false,
            "version": "0.0.10",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-p256",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-platform",
            "direct": false,
            "version": "0.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-poly1305",
            "direct": false,
            "version": "0.0.6",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-secrets",
            "direct": false,
            "version": "0.0.6",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-sha2",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-sha3",
            "direct": false,
            "version": "0.0.10",
            "ecosystem": "crates"
          },
          {
            "name": "libcrux-traits",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "libfuzzer-sys",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "libloading",
            "direct": false,
            "version": "0.8.9",
            "ecosystem": "crates"
          },
          {
            "name": "log",
            "direct": false,
            "version": "0.4.33",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.8.3",
            "ecosystem": "crates"
          },
          {
            "name": "minimal-lexical",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "module-lattice",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "crates"
          },
          {
            "name": "nom",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "num-bigint",
            "direct": false,
            "version": "0.4.8",
            "ecosystem": "crates"
          },
          {
            "name": "num-integer",
            "direct": false,
            "version": "0.1.46",
            "ecosystem": "crates"
          },
          {
            "name": "num-traits",
            "direct": false,
            "version": "0.2.19",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.4",
            "ecosystem": "crates"
          },
          {
            "name": "oorandom",
            "direct": false,
            "version": "11.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "opaque-debug",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "page_size",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "pastey",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-lite",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "pkcs8",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "pkg-config",
            "direct": false,
            "version": "0.3.33",
            "ecosystem": "crates"
          },
          {
            "name": "plotters",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "plotters-backend",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "plotters-svg",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "ppv-lite86",
            "direct": false,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "prettyplease",
            "direct": false,
            "version": "0.2.37",
            "ecosystem": "crates"
          },
          {
            "name": "primefield",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "primeorder",
            "direct": false,
            "version": "0.13.6",
            "ecosystem": "crates"
          },
          {
            "name": "primeorder",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro-error-attr2",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro-error2",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.107",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.47",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": false,
            "version": "0.10.2",
            "ecosystem": "crates"
          },
          {
            "name": "rand_chacha",
            "direct": false,
            "version": "0.10.0",
            "ecosystem": "crates"
          },
          {
            "name": "rayon",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "crates"
          },
          {
            "name": "rayon-core",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "1.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "regex-automata",
            "direct": false,
            "version": "0.4.16",
            "ecosystem": "crates"
          },
          {
            "name": "regex-syntax",
            "direct": false,
            "version": "0.8.11",
            "ecosystem": "crates"
          },
          {
            "name": "rustc-hash",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "rustc_version",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "rustversion",
            "direct": false,
            "version": "1.0.23",
            "ecosystem": "crates"
          },
          {
            "name": "same-file",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "crates"
          },
          {
            "name": "sec1",
            "direct": false,
            "version": "0.7.3",
            "ecosystem": "crates"
          },
          {
            "name": "sec1",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "crates"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "1.0.28",
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": false,
            "version": "1.0.229",
            "ecosystem": "crates"
          },
          {
            "name": "serde_core",
            "direct": false,
            "version": "1.0.229",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive",
            "direct": false,
            "version": "1.0.229",
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": false,
            "version": "1.0.151",
            "ecosystem": "crates"
          },
          {
            "name": "serde_spanned",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "sha3",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "sha3",
            "direct": false,
            "version": "0.12.0",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "slab",
            "direct": false,
            "version": "0.4.12",
            "ecosystem": "crates"
          },
          {
            "name": "spki",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "sponge-cursor",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.119",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "target-triple",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "termcolor",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "tinytemplate",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "tls_codec",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "tls_codec_derive",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml",
            "direct": false,
            "version": "1.1.3+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_datetime",
            "direct": false,
            "version": "1.1.1+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_parser",
            "direct": false,
            "version": "1.1.3+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_writer",
            "direct": false,
            "version": "1.1.2+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "trybuild",
            "direct": false,
            "version": "1.0.118",
            "ecosystem": "crates"
          },
          {
            "name": "turboshake",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "crates"
          },
          {
            "name": "typenum",
            "direct": false,
            "version": "1.20.1",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.24",
            "ecosystem": "crates"
          },
          {
            "name": "universal-hash",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "universal-hash",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "1.24.0",
            "ecosystem": "crates"
          },
          {
            "name": "version_check",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "walkdir",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen",
            "direct": false,
            "version": "0.2.126",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro",
            "direct": false,
            "version": "0.2.126",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro-support",
            "direct": false,
            "version": "0.2.126",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-shared",
            "direct": false,
            "version": "0.2.126",
            "ecosystem": "crates"
          },
          {
            "name": "web-sys",
            "direct": false,
            "version": "0.3.103",
            "ecosystem": "crates"
          },
          {
            "name": "winapi",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "crates"
          },
          {
            "name": "winapi-i686-pc-windows-gnu",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "winapi-util",
            "direct": false,
            "version": "0.1.11",
            "ecosystem": "crates"
          },
          {
            "name": "winapi-x86_64-pc-windows-gnu",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-link",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.61.2",
            "ecosystem": "crates"
          },
          {
            "name": "winnow",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "wnaf",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.55",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.55",
            "ecosystem": "crates"
          },
          {
            "name": "zeroize_derive",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "zmij",
            "direct": false,
            "version": "1.0.23",
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 244,
        "direct_count": 34,
        "indirect_count": 210
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 16,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 1,
        "closed_unmerged_prs": 5
      },
      "bus_factor": 2,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "nadimkobeissi",
          "commits": 48,
          "avatar_url": "https://avatars.githubusercontent.com/u/9953?v=4"
        },
        {
          "type": "User",
          "login": "danieldia-dev",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/80521722?v=4"
        },
        {
          "type": "User",
          "login": "10d9e",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/1556714?v=4"
        },
        {
          "type": "User",
          "login": "rdragos",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/708809?v=4"
        }
      ],
      "contributors_sampled": 4,
      "top_contributor_share": 0.485
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 7,
            "reason": "5 out of 7 merged PRs checked by a CI test -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 4,
            "reason": "Found 7/17 approved changesets -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f3bd71d3a07220d4c3d6d6d11baf5ace3bf9417b",
        "ran_at": "2026-07-29T05:59:57Z",
        "aggregate_score": 4.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T15:05:40Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-28T14:56:45Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/symbolicsoft/hpke-ng",
    "host": "github.com",
    "name": "hpke-ng",
    "owner": "symbolicsoft"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 64 is calibrated to 73 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 64,
            "calibrated": 73,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 73,
      "inputs": {
        "security": 58,
        "vitality": 75,
        "community": 45,
        "governance": 72,
        "calibration": "2026-08-02",
        "engineering": 63,
        "ai_readiness": 61,
        "weighted_overall_raw": 64
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 99,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "99 commits in the last year",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 99
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 5,
              "latest_release_tag": "v0.2.0",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 20.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "5 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~20.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 20.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 45,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "forks": 5,
              "stars": 28,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "28 stars",
                "points": 23.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "5 forks",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "good",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "packages": [
                "hpke-ng"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 22631,
              "monthly_downloads": 7544
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "7,544 downloads/month across crates",
                "points": 51.7,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 7544,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 72,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 4,
              "top_contributor_share": 0.485
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 48% of commits",
                "points": 11.6,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 48
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "4 contributors",
                "points": 5.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 81,
            "inputs": {
              "merged_prs": 16,
              "open_issues": 0,
              "closed_issues": 1,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 5,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 42,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "16/21 decided PRs merged",
                "points": 22.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 16,
                      "decided": 21
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 7/17 approved changesets -- score normalized to 4",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "followers": 59,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "symbolicsoft",
              "public_repos": 16,
              "account_age_days": 3410
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "59 followers of symbolicsoft",
                "points": 12.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 59,
                      "login": "symbolicsoft"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "16 public repos, account ~9 yr old",
                "points": 21,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 16
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 9
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "hpke-ng"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "5 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 63,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "5 out of 7 merged PRs checked by a CI test -- score normalized to 7",
                "points": 14,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "crypto",
                "cryptography",
                "hpke",
                "rust"
              ],
              "has_wiki": false,
              "homepage": "https://symbolic.software/blog/2026-05-08-hpke-ng/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://symbolic.software/blog/2026-05-08-hpke-ng/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "4 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 58,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "weak",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "5 out of 7 merged PRs checked by a CI test -- score normalized to 7",
                "points": 1.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 7/17 approved changesets -- score normalized to 4",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 243 resolved dependencies against OSV; 1 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 243
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 1
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 243,
              "unassessed_packages": 1,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 243,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.667,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "66 of 99 human commits state their intent (structured subject or explanatory body)",
                "points": 35.6,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 66,
                      "sampled": 99
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.051,
              "toolchain_manifests": [
                "Cargo.toml",
                "fuzz/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, fuzz/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, fuzz/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "5 of the last 99 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 5,
                      "sampled": 99
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 61963,
              "source_files_sampled": 35,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/35 source files over 60KB",
                "points": 53.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 35,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library"
      ],
      "labels": [
        "library"
      ],
      "scores": {
        "library": 6
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:crates",
          "weight": 6
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index crates:hpke-ng@0.2.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-29T06:00:10.494732Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/symbolicsoft/hpke-ng.svg",
  "full_name": "symbolicsoft/hpke-ng",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}