Embedded Go SQLite that runs in RAM — 3× faster writes, 2× faster reads. Snapshot + WAL durability, Raft replication, and a PostgreSQL wire-protocol server, all in one library.
GoLicencia propia★ 3 estrellas⑂ 0 forksdesde abr 2026Ver en GitHub ↗
voicetel/memdb tiene un índice de salud de 56 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (75/100) y la más baja, Community & Adoption (23/100). Se actualizó por última vez hace 1 día. Una sola persona concentra la mayor parte del trabajo reciente.
56
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
56
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
0/25
Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
1
affected_packages
1
assessed_packages
16
unassessed_packages
0
affected_by_severity
unknown 1
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos, Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejaron 16 dependencias resueltas con OSV. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
OpenSSF Scorecard 5.1 / 10
5.1agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-22 02:46 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 6 paquetes directos y 10 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
Go
github.com/hashicorp/go-hclog
v1.6.3
directa
Go
github.com/hashicorp/raft
v1.7.3
directa
Go
github.com/klauspost/compress
v1.19.0
directa
Go
github.com/lib/pq
v1.12.3
directa
Go
github.com/mattn/go-sqlite3
v1.14.48
directa
Go
github.com/peterh/liner
v1.2.2
directa
Go
github.com/armon/go-metrics
v0.4.1
indirecta
Go
github.com/fatih/color
v1.13.0
indirecta
Go
github.com/hashicorp/go-immutable-radix
v1.0.0
indirecta
Go
github.com/hashicorp/go-metrics
v0.5.4
indirecta
Go
github.com/hashicorp/go-msgpack/v2
v2.1.2
indirecta
Go
github.com/hashicorp/golang-lru
v0.5.0
indirecta
Go
github.com/mattn/go-colorable
v0.1.12
indirecta
Go
github.com/mattn/go-isatty
v0.0.20
indirecta
Go
github.com/mattn/go-runewidth
v0.0.3
indirecta
Go
golang.org/x/sys
v0.19.0
indirecta
Avisos de dependencias 1
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 16 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 1 tienen avisos conocidos, de los cuales 0 son directas.
Paquete
Versión
Relación
Gravedad
Avisos
Corregido en
golang.org/x/sys
v0.19.0
indirecta
desconocida
1
0.44.0
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1104,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 948398,
"Makefile": 34361
},
"pushed_at": "2026-07-20T11:10:13Z",
"created_at": "2026-04-23T19:57:12Z",
"owner_type": "User",
"updated_at": "2026-07-17T14:24:52Z",
"description": "Embedded Go SQLite that runs in RAM — 3× faster writes, 2× faster reads. Snapshot + WAL durability, Raft replication, and a PostgreSQL wire-protocol server, all in one library.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "voicetel.com",
"name": "VoiceTel Communications",
"type": "User",
"login": "voicetel",
"company": "VoiceTel Communications",
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/8617362?v=4",
"created_at": "2014-09-01T16:31:45Z",
"is_verified": null,
"public_repos": 42,
"account_age_days": 4341
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-07-17T14:42:43Z"
},
{
"tag": "v1.9.3",
"kind": "patch",
"published_at": "2026-06-24T20:26:21Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2026-05-21T00:56:46Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-05-07T15:38:57Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-05-07T15:38:41Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-04-26T22:49:10Z"
},
{
"tag": "v1.7.4",
"kind": "patch",
"published_at": "2026-04-26T21:24:43Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-26T16:08:44Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-04-26T13:38:18Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-04-25T19:43:59Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-25T18:15:49Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-04-23T21:26:08Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-04-23T20:24:31Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-23T20:24:09Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-04-23T20:23:54Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-23T20:23:12Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-23T20:22:47Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-04-23T20:22:14Z"
}
],
"recent_commits": [
{
"oid": "073ef17387d089296e13ef17fa82b6ded3fdf9a1",
"body": "- README Config reference: document OnExecResult (and OnExec's 0-count\n limitation); the block still showed the legacy hook only.\n- README architecture diagram: OnExecResult/ExecResult flow, per-replica\n stmt cache, ForwardResponse.RowsAffected.\n- README WAL numbers: 298k -> ~364k writes/s, ~164k \n[…]\ns (v1.10.0 capture).\n- BENCHMARKS: add missing v1.9.3 note; fix v1.9.2's now-wrong claim that\n the headline tables reflect v1.9.1.\n- Project notes: mattn pin text said v1.14.42; go.mod pins v1.14.47.",
"is_bot": false,
"headline": "docs: refresh stale entries missed in the v1.10.0 pass",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-07-17T14:21:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0458ffd4c7e6c189b7e4a0624a76d42b4e5de1d",
"body": "… replica statement cache\n\nRaft-mode rows-affected (unblocks count-gating pg-wire clients, e.g.\nOpenSIPS msilo):\n- Config.OnExecResult: replication hook returning the committed\n statement's rows-affected count; legacy OnExec unchanged, setting both\n is a config error. Exec's sql.Result now reports\n[…]\nn, with the pprof round history and the six measured-but-not-\naddressable hot paths (SQLite cgo floor, WAL fsync, large-DB refresh\ncopy, wire syscall floor, raft consensus overhead, saturation churn).",
"is_bot": false,
"headline": "feat: v1.10.0 — real rows-affected in Raft mode, pg-wire bytea fixes,…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-07-17T14:21:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b19dde2870b2249eceb4e4ef4ea52948c847c95",
"body": "…(#6)\n\nBumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.6 to 1.19.0.\n- [Release notes](https://github.com/klauspost/compress/releases)\n- [Commits](https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0)\n\n---\nupdated-dependencies:\n- dependency-name: gith\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T21:25:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8b288244c37ee0b04f62e5bc7ca9641f21c1a28e",
"body": "…(#7)\n\nBumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.47 to 1.14.48.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.47...v1.14.48)\n\n---\nupdated-dependencies:\n- dependency-name: github.c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T21:25:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e85d8f068b295377e95b3d532390ef94f003b067",
"body": "registerDriver published the generated driver name into the shared\nregisteredDrivers map via LoadOrStore BEFORE calling sql.Register. A\nconcurrent caller could Load that name on the fast path and hand it to\nsql.Open before registration completed, hitting database/sql's\n`sql: unknown driver \"sqlite3_\n[…]\novided. The\nlock-free fast-path Load is unchanged.\n\nTestRegisterDriverConcurrentOpen reproduces the failure (it hits the\nexact \"unknown driver\" error against the pre-fix code) and passes with\nthe fix.",
"is_bot": false,
"headline": "fix(driver): register sqlite driver before publishing its name (race)",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-06-24T20:18:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "52d18a76e197a18019a72d17e68cfb66ff45726e",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:31:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd2454f28b698c819ebd810e38b80668cb93075d",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.45 to 1.14.47.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.45...v1.14.47)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.47\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/mattn/go-sqlite3 from 1.14.45 to 1.14.47",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c6e516bc77822d01503d27bf160c3b40ffd7f64",
"body": "Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.5 to 1.18.6.\n- [Release notes](https://github.com/klauspost/compress/releases)\n- [Commits](https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/klauspost/compress\n dependency-version: 1.18.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T15:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fca99a0b1c6e9fe51ddb2272b649b54836ad6bc6",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.42 to 1.14.45.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.42...v1.14.45)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.45\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.45",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T15:18:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "456c7fe65852e5b9e546696bf9468e6c7e70e65b",
"body": "Bumps [github.com/hashicorp/go-hclog](https://github.com/hashicorp/go-hclog) from 1.6.2 to 1.6.3.\n- [Release notes](https://github.com/hashicorp/go-hclog/releases)\n- [Commits](https://github.com/hashicorp/go-hclog/compare/v1.6.2...v1.6.3)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/hashicorp/go-hclog\n dependency-version: 1.6.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/hashicorp/go-hclog from 1.6.2 to 1.6.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T15:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "453e08dd2dd4955c1907a908ebb3976c6269b63c",
"body": "Lets us re-run the analysis manually after env-level changes\n(e.g. toggling Default Setup) without making a no-op commit.",
"is_bot": false,
"headline": "ci: add workflow_dispatch trigger to CodeQL workflow",
"author_name": "Michael Mavroudis",
"author_login": "mavroudis",
"committed_at": "2026-06-12T11:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff46fdee4b0575c7b7aa6a8a992c4e72dbb54af8",
"body": "…ECURITY.md)\n\nFirst-pass GitHub Advanced Security wiring; brings this library repo\nonto the same shape used across the voicetel/* fleet:\n\n- .github/dependabot.yml — weekly gomod + github-actions sweeps\n- .github/workflows/codeql.yml — weekly + push/PR scan, go pack,\n autobuild with go-version-file=\n[…]\n.9.x (current v1.9.2 release), reporting URL, and\n scope notes covering the snapshot file model, the PostgreSQL\n wire-protocol server's unauth default, and the Raft mutual-TLS\n rotation expectation",
"is_bot": false,
"headline": "security: add GHAS baseline (Dependabot + CodeQL + dep-submission + S…",
"author_name": "Michael Mavroudis",
"author_login": "mavroudis",
"committed_at": "2026-06-12T10:56:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d901791384cc26aa18fe529d668a0d6e541c51f1",
"body": "Adds a v1.9.2 section to BENCHMARKS.md covering what landed since\nv1.9.1 — divergence metric, TestPProf_LargeDB_MixedRW characterisation\nof large-DB workloads, errcheck cleanup, and a documented dead-end\nwhere two attempts to eliminate the C→Go→C refresh round trip\nregressed throughput 40–90×. Headl\n[…]\nenchmark numbers from v1.9.1\nremain accurate; v1.9.2 has no perf-impacting code changes.\n\nREADME \"current report\" pointer rebased from v1.8.0 to v1.9.x.\nProject-structure listing similarly retargeted.",
"is_bot": false,
"headline": "docs: refresh BENCHMARKS.md and README for v1.9.2",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-21T00:42:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c882becba1a44af682da5d78d37cd459bf1d3306",
"body": "…MiB datasets\n\nAdds a new MEMDB_PPROF=1-gated test that seeds 100 000 rows × 1 KiB\n(~97 MiB) and runs a 3-second mixed read+write workload (1 writer +\n8 readers, default 50 ms refresh interval). Captures CPU + heap pprof\nto /tmp / MEMDB_PPROF_DIR.\n\nPurpose: empirical signal for whether session-exten\n[…]\nl-DB workloads the\nexisting v1.9.1 shared-buffer + write-generation short-circuit is\nalready near-optimal.\n\nNo behaviour change. Test is gated on MEMDB_PPROF=1 so it does not\nrun in the default suite.",
"is_bot": false,
"headline": "test(pprof): TestPProf_LargeDB_MixedRW characterises refresh on ~100 …",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:52:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdc86bf8f1d16fcc2973468ae91ecd0aea3a104d",
"body": "…ragglers\n\nFollow-up to 93e27c8 (production errcheck → 0). This sweep catches:\n\n - Test-file findings (memdb_test, memdb_extra_test, memdb_pprof_test,\n memdb_bench_test, memdb_compare_test, server/*_test, replication/raft/*_test,\n logging/syslog_test, profiling/*_test, backends/backends_test,\n[…]\n / Fprintln(...) → prefix with _ = / _, _ =\n\ngolangci-lint errcheck count: 50 (start of day) → 0 (now).\nFull race suite passes including the 38s replication/raft integrity tests.\n\nNo behaviour change.",
"is_bot": false,
"headline": "chore: silence errcheck across test files and remaining production st…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:48:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93e27c8ef6667505f251ee9a1e12a635ea9a0fd9",
"body": "…ross production\n\nPre-existing golangci-lint errcheck findings on Close, os.Remove, and\nFprintln/Fprintf calls in production code (server/, replication/raft/,\nbackends/, backup.go, memdb.go, driver.go, cmd/memdb/, cmd/memdb-cli/,\nbackend.go, examples/quickstart/). Every site is one of:\n\n - defer X.\n[…]\n 0. The remaining 51 findings are all in *_test.go\nfiles and don't ship — addressing those is a separate cleanup pass.\n\nFull -race test suite passes including the 36s replication/raft\nintegrity tests.",
"is_bot": false,
"headline": "chore: silence errcheck on best-effort Close/Remove/Fprintln calls ac…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:20:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ff06f26ed217bd45ba892deadc34241daad22087",
"body": "Brief §8 #2. When replicaPool.refresh fails partway through migrating\nreplicas to a new shared buffer, the rollback may itself fail — leaving\nsome replicas pointing at the new snapshot and others at the old. Reads\nserved by different replicas during such a window may differ until the\nnext successful\n[…]\niably. The wiring test pins the\nobservability plumbing; the partial-fail path itself is exercised\nimplicitly by the alloc/free lifecycle tests in v1.9.1.\n\nNo behaviour change for happy-path workloads.",
"is_bot": false,
"headline": "feat(replica): surface refresh divergence via counter + structured log",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:09:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76f57cfe184e643327a4e4af33c27dcfba736a34",
"body": "… from 19% to 2%\n\nRefactor replicaPool.refresh to allocate ONE C buffer per refresh tick\nand point every replica at it via SQLITE_DESERIALIZE_READONLY (no\nFREEONCLOSE — the pool owns the buffer's lifetime). The previous path\nwent through mattn.SQLiteConn.Deserialize, which sqlite3_malloc64s and\nmemc\n[…]\no-shimmed sqlite3_deserialize\npath now, just with different flag words.\n\nNo wire-format break. No API change. Race-clean across the full -race\nsuite including the 67s replication/raft integrity tests.",
"is_bot": false,
"headline": "perf(replica): shared READONLY snapshot buffer drops mixed-RW memmove…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:00:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc3089357e369319c42750ad2116c32eeee01f53",
"body": "…s don't get SQLITE_FULL\n\nRoot cause: DB.Restore (and replicaPool.refresh) called mattn's\nSQLiteConn.Deserialize, which invokes sqlite3_deserialize with only\nSQLITE_DESERIALIZE_FREEONCLOSE and N=M=len(buf). SQLite then permanently\nfreezes the database page capacity at the snapshot size, and any\nsubs\n[…]\niter grows between ticks (general regression, not RESIZEABLE-specific)\n\ngo vet, golangci-lint (no new findings), and the full -race suite all\npass — including the 66s replication/raft integrity tests.",
"is_bot": false,
"headline": "fix(restore): use SQLITE_DESERIALIZE_RESIZEABLE so post-restore write…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T22:28:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb37656ec53ed1c8b9aad1cb4147da6d3037ea4d",
"body": "Adds 14 new test files (~3.5k lines) raising coverage for areas that\npreviously had only smoke tests: the memdb / memdb-cli main commands\n(including the raft subprocess path), the logging package's text/JSON\n+ syslog + hclog adapters, the replication binary codec, the raft FSM\nand on-disk log/stable\n[…]\nze buffer would require pinning to a\nspecific mattn struct layout; revisit when a real workload justifies it.\n\nNo behaviour changes. go vet, go test ./..., and the 66s raft\nintegration suite all pass.",
"is_bot": false,
"headline": "test: expand coverage across CLI, raft, logging, server, codec",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T21:59:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "432bf5d3b82770074db2c4c42cd9054da1e8191f",
"body": "Profiling BenchmarkForwarding_PoolReuse (added in this commit) showed\ngob.(*Decoder).getDecEnginePtr / recvType / compileDec accounting for\n~45% of allocations on the forwarding hot path. Cause: writeMsg/readMsg\ncreated a fresh gob.Encoder/Decoder on every call, which forced gob to\nre-send the Forwa\n[…]\nn.\n- TestConnPool_FullPool / TestConnPool_Close updated for the new pool\n signatures (Get returns *RPCConn, Put takes *RPCConn).\n- Full make test-race green; gofmt / go vet / golangci-lint all clean.",
"is_bot": false,
"headline": "perf(raft): cache gob Encoder/Decoder per forwarding conn",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-06T03:15:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9650b8ae352a5958558621b8793df07d6d6b58d9",
"body": "The follower's ConnPool returns a connection to its idle channel after every\nsuccessful sendForward, expecting it to be reusable across requests. But\nforwarder.handleConn was single-shot: defer conn.Close() ran after one\nrequest, so every reused conn within the 30s idle window was already\nhalf-close\n[…]\niet.\n\nRegression covered by TestReplication_ForwardingPoolReuse, which issues\n20 sequential forwarded writes through one follower without a leader\nchange. Pre-fix, the second call would fail with EOF.",
"is_bot": false,
"headline": "fix(raft): loop in forwarder.handleConn so pooled conns survive reuse",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-06T02:29:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c32846870fc9ef61c4269cbfe2c9c5cdff1bb315",
"body": "Fresh end-to-end run (make bench + make pprof + make pprof-server +\nmake pprof-raft) on the reference hardware. v1.7.x and v1.8.0 are\nfeature releases (CLI Raft wiring, SCRAM-SHA-256 auth, Extended Query\nProtocol, memdb-cli wire mode) and do not touch the measured hot paths;\nper-release shifts are w\n[…]\no describe the actual\n v1.6.2+ wire format (8-byte prefix + 40-byte footer) instead of the\n long-since-superseded 40-byte header\n- Postgres wire table gains an Extended Query Protocol row (147k q/s)",
"is_bot": false,
"headline": "docs: refresh BENCHMARKS.md and README for v1.8.0",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T23:26:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5490bc46c4ee817f6a28e0c03f9b8f9bd3b286fe",
"body": "Two complementary additions that turn memdb-cli from a read-only\ninspection shell into a full client for both snapshot files and\nrunning servers.\n\nWire mode (-addr HOST:PORT) connects via lib/pq to a memdb server\nover the PostgreSQL wire protocol. Behaves like a small psql: full\nread+write (subject \n[…]\nry writes, and\nloadTableNames sqlite_* exclusion. 50+ subtests pass under -race.\n\nNew deps: github.com/peterh/liner (pure Go, ~1k LOC, MIT) and\ngithub.com/lib/pq (the standard PG database/sql driver).",
"is_bot": false,
"headline": "feat(cli): wire-mode client + history + tab completion",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T22:46:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "935ca33383683e42d8f4c14b3ad07dfd8b022392",
"body": "sqlite3-style REPL that opens a snapshot file (works while\n'memdb serve' is running — atomic-rename writes don't affect\nalready-open fds, so the inode the CLI opens is a stable\npoint-in-time view). Strips the MDBK envelope via the new public\nUnwrapSnapshot helper, opens the unwrapped payload with\nmo\n[…]\n per-row scan scratch in scanAll and replacing\nfmt.Fprintf(\"%-*s\") with io.WriteString against a 256-byte space\nslab in writeFixedWidthRow (-41% time, -49% memory, -50% allocs\nvs the naive first cut).",
"is_bot": false,
"headline": "feat(cli): add memdb-cli read-only snapshot inspection shell",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T22:06:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5340f3886a4ad0c4dbbe9a50d9e644380b2aa42",
"body": "The repo had an `example/` directory at the root holding the same\ncode as the top-level README's Quick Start snippet. Moving it under\nthe new `examples/` tree alongside `restapi` and `cluster` keeps\ndiscovery in one place and makes the library/library+REST/library+\nraft progression visible at a glance. git mv preserves history.",
"is_bot": false,
"headline": "docs(examples): move stray example/ to examples/quickstart",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T17:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "064706a67cca5e192bff6c83cf297c4533dd3429",
"body": "Single-process demo that brings up three replicated memdb nodes\njoined into one Raft cluster, each exposing the PostgreSQL wire\nprotocol on its own port. Writes from any node forward to the leader,\nreplicate under consensus, and become visible on every node before\nthe response returns. Self-generate\n[…]\nation pointing to the new\n example.\n\nVerified end-to-end: CREATE on follower → forwarded; INSERT/UPDATE\nvisible on every node; pgx in default binary-format mode reads\ncommitted data through any node.",
"is_bot": false,
"headline": "docs(examples): 3-node Raft cluster + PG wire example",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T17:54:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c81f1c2ff022fdc73facb4e27c1d1b88d295e99",
"body": "Server: Parse / Bind / Describe / Execute / Sync / Close / Flush, with\nserver-side prepared statements, named portals, and the\nskip-until-Sync error state. Result rows are materialised eagerly at\nDescribe('P') / Execute time so a portal never holds a *sql.Rows\nacross messages — the previous draft ke\n[…]\nthat drive the full Parse→Sync sequence, plus a pprof scenario\n(make pprof-server-extended-select via TestPProf_Server_Extended_Select)\nthat hit ~190k q/s on a 16-client parameterised SELECT workload.",
"is_bot": false,
"headline": "feat(server): Extended Query Protocol; dual-protocol restapi example",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T17:24:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ca1d01067f29db370e7fe299950a3d62215fa74",
"body": "Modern psql/pgx default to SCRAM and won't downgrade to cleartext, so\nthe previous BasicAuth-only path locked those clients out (or required\nrunning them in a less-safe configuration). Add a SASL exchange driver\nplus a ScramAuth credential type that derives StoredKey and ServerKey\nonce at constructi\n[…]\n matches the standard rather than only being self-consistent), parser\n unit tests, hand-rolled-client end-to-end SASL exchange. Verified\n with real psql 16 against `memdb serve -auth-method scram`.",
"is_bot": false,
"headline": "feat(server): SCRAM-SHA-256 auth (RFC 5802); -auth-* CLI flags",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T16:22:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "881ce6e7f408e0e9feff01b941ab4ad59dca8938",
"body": "- cmd/memdb: -raft-* flags expose replication via the bundled binary;\n buildRaftNode loads mutual-TLS PEMs, builds the adapter, sets OnExec\n via a captured pointer so memdb.Open precedes node bootstrap safely;\n -durability=none|wal|sync flag with auto-default (none in raft mode,\n wal standalone)\n[…]\n pprof-raft-memdb target captures the full integrated path\n (PG → OnExec → raft → FSM → ExecDirect) on a 3-node cluster of real\n memdb.DB instances, vs the existing pprof-raft which uses a mock FSM.",
"is_bot": false,
"headline": "feat(cli): wire raft replication into serve; add -durability flag",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T15:46:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "45aa2227c5eba89fe4d4d302faf4e678693b5610",
"body": "Replace the bytes.Buffer-based snapshot writer that buffered the entire\nserialised payload to compute SHA-256 with a streaming writer. The\nintegrity wrap moves from a 40-byte header to an 8-byte prefix\n([magic][version]) plus a 40-byte footer ([payloadLen][sha256]); the\nwriter feeds payload bytes th\n[…]\nreverted: on consumer\nNVMe the cond-variable bookkeeping costs more than the fsyncs it\nsaves (BenchmarkWAL_Append_Parallel-8 +25%). The new bench is\nretained as a regression guard for future WAL work.",
"is_bot": false,
"headline": "perf: streaming snapshot writer, -39% time / -98% B/op on large flushes",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T13:37:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4fdc74ba0589fb4f35fcdd345f7fa7fe0510d02d",
"body": "Reuse a per-handler cmdBuf slice when assembling CommandComplete\nframes. Replaces the per-response make([]byte, size) in\nsendCommandComplete and the make+string([]byte) in buildTag with\nin-place append into stable storage. New sendCommandCompleteCount\nformats \"PREFIX N\" tags (INSERT/UPDATE/DELETE/SE\n[…]\n (8 clients): total alloc_space\ndrops from 473 MB to 431 MB; the buildTag and sendCommandComplete\nallocation sites disappear from the profile. Throughput unchanged\nwithin run-to-run noise (~35 k q/s).",
"is_bot": false,
"headline": "perf(server): scratch buffer for CommandComplete; remove buildTag",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T23:54:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e31e7f31a0b45f343474558361017e17477a2c2a",
"body": "…Sponsors\n\nThe Profile-analysis section in BENCHMARKS.md previously quoted\nfunction-by-function percentages from the v1.5 capture, even though\nthe surrounding throughput numbers were already v1.6.1. Re-read all\nfour pprof files in coverage/pprof/ (and server/coverage/pprof/ for\nthe wire-server captu\n[…]\ncoverage/pprof/\nbecause the test resolves MEMDB_PPROF_DIR relative to the package.\n\nREADME: appended Contributors / Sponsors / License sections in the\nsame format used by voicetel/freeswitch-security.",
"is_bot": false,
"headline": "docs: refresh pprof tables with v1.6.1 numbers; add Contributors and …",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T20:12:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "185e843013e929e5b928303c8a49e2d5c96b75e1",
"body": "Re-run `make bench`, `make pprof`, `make pprof-server`, and\n`make pprof-raft` on the reference hardware (12th Gen i7-1280P,\n20 threads, Linux, Go 1.24) and update both BENCHMARKS.md and the\nREADME summary tables.\n\nHeadline shifts vs the v1.5.0 reference run already documented:\n\n- Raft Apply (3-node)\n[…]\nhe v1.6.0 test change that pinned\nReadPoolSize=GOMAXPROCS, so the Narrow SELECT and Wide SELECT\nthroughputs now reflect a tuned deployment rather than a\nsingle-connection bottleneck.\n\nNo code changes.",
"is_bot": false,
"headline": "docs: refresh benchmarks for v1.6.1",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T19:42:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84633dd56d9b8c5585d9bef8a018990121ca902a",
"body": "…er, replica pool\n\nThree smaller wins surfaced after the v1.6.0 sweep removed the dominant\nhot spots. None of these are individually large, but each removes a\nper-operation allocation from a hot path that runs once per request.\n\n- replication/raft/store.go: replace json.Marshal/Unmarshal in the\n on\n[…]\nft log entries written by\nv1.6.0 are JSON and will not decode under v1.6.1. Operators upgrading\nan in-flight cluster should snapshot first.\n\nTested\n- go test -race ./... passes.\n- make check is clean.",
"is_bot": false,
"headline": "perf: second-sweep allocation cleanups in raft log store, server read…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T18:31:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8fc6e48759f1437fc28c5371cd7ca1940f2d51f3",
"body": "… flush\n\nA second pprof sweep found six concrete wins; this commit lands all of\nthem as a single coherent change. Numbers are from /tmp/memdb-prof-after\non a 12th-gen i7-1280P (20 threads), captured by the new pprof tests\nlisted below.\n\nPerformance changes\n- Move the WAL binary v1 codec into package\n[…]\ngets a v1.6 update note with the measured deltas.\n\nTested\n- go test -race ./... passes (modulo a pre-existing flaky\n TestReplication_AllNodesConverge unrelated to this change).\n- make check is clean.",
"is_bot": false,
"headline": "perf: 2.47x raft apply, 1.38x contended writes, 25% faster compressed…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T18:12:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd5c60af321afb73310b90b80687c0d63fa18402",
"body": "When 'memdb serve' failed to bind the requested port (e.g. 5432 already\nin use by PostgreSQL), the error was logged exclusively to syslog and\nthe process exited 0 silently. The operator had no visible indication\nof the failure and no way to diagnose it without checking syslog — which\ncaused exactly \n[…]\n supervisors, and CI pipelines.\n\nBefore: silent exit 0, error only in syslog.\nAfter: 'memdb: server error: listen tcp 127.0.0.1:5432: bind: address\n already in use' printed to stderr, exit 1.",
"is_bot": false,
"headline": "fix(cli): print port-conflict errors to stderr and exit non-zero",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-24T12:38:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c911d39c9a99b51315b7e51459f5f81512e46f8f",
"body": "…spection\n\nClearly separates what application code needs (fully supported) from\nwhat administrator tooling needs (not supported via wire protocol).\n\n§ Server Mode — new 'Protocol compatibility' section:\n * Table of supported statements (SELECT/INSERT/UPDATE/DELETE/DDL/PRAGMA)\n * Explicit statement\n[…]\nhould use the library API directly.\n\n§ Good Fit / Bad Fit:\n * New bad-fit bullet for psql backslash commands with a pointer to\n the Protocol compatibility section and the sqlite_master workaround.",
"is_bot": false,
"headline": "docs(server): document protocol compatibility and administrator intro…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-24T12:19:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ff5bfa9198efe3bd3bcae5efb3a49e278602d3c",
"body": "Re-applies the README changes from the reverted v1.5.2 commit.\nNo code changes — documentation only.\n\nThree additions:\n1. CLI section: new 'Inspecting snapshots with sqlite3' subsection.\n Explains the 40-byte MDBK header, the 'dd if=... skip=40' workaround,\n and the psql alternative for live dat\n[…]\nth the sqlite3 CLI' sub-section with the\n exact error message and the fix.\n3. Good Fit / Bad Fit: 'direct sqlite3 CLI' added as a bad-fit bullet\n with a pointer to the snapshot inspection section.",
"is_bot": false,
"headline": "docs: restore sqlite3 snapshot inspection documentation",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-24T12:08:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b768503e72d9bd4f6b9ce74945662edd8581886a",
"body": "The SSLRequest packet layout is:\n buf[0:4] = length field (0x00000008 = 8)\n buf[4:8] = magic number (0x04D2162F = 80877103)\n\nThe code was reading buf[0:4] (the length field, always 8) and\ncomparing it to 80877103. That condition can never be true, so the\nSSLRequest handling path was silently dea\n[…]\nServer_SSLRequest_Declined and\nTestServer_SSLRequest_Declined_QueryWorks introduced in the\nv1.5.1 integration test suite. Those tests exercise the real wire\nprotocol path that psql and pgx always use.",
"is_bot": false,
"headline": "fix(server): correct SSLRequest magic byte offset in handleStartup",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-23T22:46:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b04b8384f9e72bc6c3ee0ce7f7b7bf5f6df1ff4f",
"body": "…urrency, Stop\n\nThe server package had zero TLS test coverage despite TLS being a\nfirst-class config option (Config.TLSConfig). A self-signed cert in the\nright Config was all it took for the TLS path to go completely untested:\ntls.Listen, the TLS handshake inside ListenAndServe, and the full\nquery r\n[…]\n on free port, waits for Accept\n doStartup — no-auth startup handshake\n doStartupWithSSL — SSLRequest + startup handshake\n readMsg / sendSimpleQuery / drainToReady — wire-level helpers",
"is_bot": false,
"headline": "test(server): comprehensive integration suite — TLS, SSLRequest, conc…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-23T21:21:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bfdac8b34c219e8629aed404982e6c4dd52d2639",
"body": "…0 docs\n\nWAL.Append: pre-reserve 4-byte length prefix in the pool buffer before\nwalEncodeBinary, eliminating the make+copy per write. Result: 642 → 476\nns/op, 128 → 0 B/op, 1 → 0 allocs/op (~26% faster on the WAL hot path).\n\nServer write buffer: bufio.NewWriterSize 4 KB → 32 KB. Eliminates ~6\nimplic\n[…]\nncurrent read: ~26% faster than file SQLite at 4 goroutines (was ~22%)\n - WAL-durability INSERT: 1.63× faster than file/sync=off (was 1.58×)\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: WAL zero-alloc append + 32 KB server write buffer; update v1.5.…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T19:42:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3595eff6d522da293b0b949bb48db89837cffc1f",
"body": "- Features list: add Panic-safe callbacks bullet\n- Config block: document DisableForeignKeys field\n- Server Mode: note Config.Logger and BasicAuth constant-time comparison\n- WAL format section: add Snapshot integrity subsection documenting the\n 40-byte MDBK header, SHA-256 verification on load, legacy-file compat,\n and ErrSnapshotCorrupt sentinel",
"is_bot": false,
"headline": "docs: document Sprint 1 security changes in README",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T15:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a890fcd540c78badfa32161641501761101e008",
"body": "…, snapshot checksums\n\n1.1 — Constant-time authentication (server/server.go)\n BasicAuth.Authenticate now uses crypto/subtle.ConstantTimeCompare for\n both username and password comparisons. Go's native == short-circuits\n at the first differing byte; over a real network this leaks credential\n leng\n[…]\nthan an in-process buffer.\n\n Tests: checksum round-trip, payload corruption detected, header\n corruption detected, legacy files load cleanly, ErrSnapshotCorrupt\n is a proper sentinel for errors.Is.",
"is_bot": false,
"headline": "security: Sprint 1 — timing-safe auth, FK enforcement, panic recovery…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T15:45:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5215df17f142527ecc63dee6a0505859d39bc42",
"body": "grep audit found the same five 'make pprof-*' target lines appearing\nverbatim in two separate sections:\n\n 1. § Profiling (pprof) → Capture targets (L863-867)\n 2. § CLI → Makefile reference (L935-939)\n\nThe authoritative list lives with the Profiling section — that's where\nan operator \n[…]\nppears twice,\n once standalone and once composed with EncryptedBackend) are\n legitimate distinct examples.\n\nNo content deleted — every pprof target remains fully documented in\nexactly one place.",
"is_bot": false,
"headline": "docs: de-duplicate pprof target list in README",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:58:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8eb7fa62f9dec7ed7bb69ff280cb699fbb9dba6c",
"body": "The purego build path was a second SQLite driver (modernc.org/sqlite)\nmaintained in parallel with the primary mattn/go-sqlite3 (cgo) path via\n'go:build purego / !purego' split files. It was never the primary build\ntarget and has documented second-class semantics (no backup API, no\nupdate hooks, no R\n[…]\n tests continue to pass because the primary (cgo) path was\nalready the only path that was actually exercised by the test suite —\nno _purego files had tests of their own, they were pure fallback\nstubs.",
"is_bot": false,
"headline": "refactor: drop purego build tag and modernc.org/sqlite support",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:51:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe57ae8481e37ae111dd50f31a89e9ad0c7faf0e",
"body": "Found several inconsistencies between README.md and the just-regenerated\nBENCHMARKS.md / coverage/bench.txt. Fixing:\n\nStale headline claims\n * Header blurb and Features bullet claimed '2.26× faster writes than\n file SQLite'. Current data shows 8237/4376 = 1.88× on INSERT; fixed.\n * Features bul\n[…]\ny benchmark number in the README now cross-checks against the\nmatching entry in coverage/bench.txt / BENCHMARKS.md — verified by\nrunning 'grep -E \"\\d+×|ns/op\"' through the file and auditing every\nhit.",
"is_bot": false,
"headline": "docs: sync README and godoc benchmark numbers to v1.4.0 reference run",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:38:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15411f97440e5dd73eda910a58f2298d3fa68100",
"body": "The Concurrent-read (parallelism=4) table appended the word 'slower' to\nthe single-conn row (2.71× slower) but left the file-SQLite rows as\nbare '1.22×' — which read like a contradiction with the prose that\ncalled memdb/pool '2.71× faster than memdb without the pool'.\n\nFix by following the same conv\n[…]\no added a short header note explaining the baseline choice, because\nthis is the only comparison table where the baseline is not a plain\n'memdb' row — memdb/pool wins outright and takes the 1.00× slot.",
"is_bot": false,
"headline": "docs(bench): fix contradictory ratio convention in Concurrent-read table",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:30:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a1574eba1a781bc8a112bf256e68c2554c6a3d71",
"body": "Makes the tuning package discoverable from the natural starting point:\n\n * Config.ReadPoolSize godoc now cites the 2.71× concurrent-read\n win from BENCHMARKS.md and shows the canonical tuning.Recommend\n call that produces drop-in Config fields.\n * README gets a new 'Tuning' section with the \n[…]\nare purely discoverability edits. The\nTestRecommend_Calibration_* tests already guard against the model\ndrifting relative to the benchmark, so this documentation will stay\naccurate across future runs.",
"is_bot": false,
"headline": "docs: point Config.ReadPoolSize godoc and README at tuning.Recommend",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cad6edc51e4a72b15860f689539299f436c31bf3",
"body": "…reshInterval\n\nAdds a new memdb/tuning package that turns the v1.4 benchmark findings\ninto a reusable mathematical model. Callers pass in their workload\ncharacteristics (DB size, memory budget, staleness tolerance, read/write\nmix) and get back a Recommendation struct whose fields drop straight\ninto \n[…]\ne_ doc-tests (ExampleRecommend, tightMemory, writeHeavy,\nnoPoolFallback, stalenessBand) verifying the golden output of realistic\nscenarios so the package godoc on pkg.go.dev is also a working example.",
"is_bot": false,
"headline": "feat(tuning): closed-form recommender for ReadPoolSize and ReplicaRef…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:17:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abd080be03e47e0ffb997b8de2d8ffe7def16c5d",
"body": "Captures a complete run of the benchmark suite on reference hardware\n(20-thread i7-1280P, Go 1.24, mattn/go-sqlite3) and summarises:\n\n * Headline throughput for 11 core-DB and 5 server scenarios.\n * All microbenchmarks (single-row, transaction, WAL, flush,\n lifecycle, concurrent-mixed) with ns/\n[…]\numbers; the summary table inline remains as a quick\n reference.\n * BenchmarkOpen / BenchmarkOpenRestore now use discardLogger() so\n benchmark output is no longer polluted with INFO flush lines.",
"is_bot": false,
"headline": "bench: consolidate v1.4.0 results into BENCHMARKS.md with pprof analysis",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:58:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f44cafd0980ae7751b0bd6cf6f5cf853b810f93",
"body": "pprof-server runs all five server pprof scenarios into\n./coverage/pprof. Individual targets for each:\n\n pprof-server-select narrow SELECT, 16 clients\n pprof-server-select-wide 500-row SELECT, 8 clients — the profile\n that surfaced the 57% allocation finding\n pprof-server-insert concurrent INSERT DML\n pprof-server-mixed mixed workload with mutex+block sampling\n pprof-server-connect connect/query/disconnect cycles",
"is_bot": false,
"headline": "build: add Makefile targets for server pprof capture scenarios",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:38:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be0884bab012af8cc5bd10f24f002f164f065a38",
"body": "Finding from pprof (wide-SELECT alloc_space profile, 500 rows/query,\n8 concurrent clients): three per-row allocations dominated server-side\nallocation rate:\n\n row := make([][]byte, len(cols)) — 261 MB / 21%\n appendCell(nil, v) per cell — 171 MB / 14%\n buf := make([]byte, size) in\n s\n[…]\nMLs\n TestPProf_Server_Mixed mutex+block sampling, 1-in-4 writes\n TestPProf_Server_Connect connect/query/disconnect cycles\nAll MEMDB_PPROF=1-gated so default `go test` skips them.",
"is_bot": false,
"headline": "perf(server): reuse row/cell/wire buffers across rows in handleSelect",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:37:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfc968388e46344fde347e88c25f2aa1996898c0",
"body": "Finding from pprof (block profile of read-only workload): the refresh\nloop allocated a new goroutine + channel + context on every tick to\nwire up shutdown cancellation for refresh, even when refresh itself\nshort-circuited as a no-op thanks to the write-generation check.\n\nAt the 50ms default that is \n[…]\ns/s, refresh below 0.5% sampling threshold (+16%)\n\nThis is on TOP of the previous write-gen short-circuit win (519k→727k).\nCumulative read-throughput improvement across the sprint: 519k → 845k\n(+63%).",
"is_bot": false,
"headline": "perf(replica): fast-path refresh tick to skip per-tick goroutine/channel",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:37:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "adadb29a8621f6bd741bb114c193b0ce79f07794",
"body": "…umbers\n\n- New 'WAL on-disk format' section documents the binary v1 wire layout,\n the legacy-gob fallback, the set of supported arg types, and the\n ErrWALUnsupportedArgType escape hatch.\n- Benchmarks section updated:\n WAL append: ~1.3 µs / 11 allocs → ~540 ns / 1 alloc\n WAL writes: 135k/\n[…]\ns pay zero per-tick CPU regardless\n of how short the interval is set (measured 519k→727k reads/s). The\n empirical sweep is clarified as the writer-active case where the\n short-circuit cannot apply.",
"is_bot": false,
"headline": "docs: binary WAL format, write-gen short-circuit, updated benchmark n…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:25:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68db98429d8d3f4126902e2239da54b9df9caa89",
"body": "The integrity suite was ~1/8 flaky under 'go test -race ./...' when the\nfull replication/raft package test binary ran in parallel. Root cause:\n\n 1. waitForLeader returned as soon as ANY node entered the leader\n state, even if followers had not yet received the first\n heartbeat and still rep\n[…]\nfirst-leader. Budget\n raised 10s → 20s to accommodate the larger timeouts. On timeout\n returns a diagnostic snapshot of every node's state so a CI\n failure is triagable from the log alone.",
"is_bot": false,
"headline": "test(raft): harden cluster convergence under -race + parallel load",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:23:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ef2387e77e65be46c70addc4e6d51f80b329624",
"body": "Finding from pprof (DurabilityWAL profile): encoding/gob reflection\naccounted for ~25% of total CPU inside WAL.Append (780 ms / 3.17 s).\nThe entry shape is fixed (Seq, Timestamp, SQL, Args []any where each\narg is one of a small finite set of scalar types), so replacing the\nreflection-based encoder w\n[…]\n\n RoundTrip_AllArgTypes, EmptyArgs, NilArg, LargeString,\n LargePayload_Rejected, UnsupportedArgType, BackwardsCompat_Gob,\n TruncatedTail_StopsCleanly, CorruptVersion, MixedFormat,\n NextSeqUpdated.",
"is_bot": false,
"headline": "perf: replace gob with binary WAL wire format (5× faster Append)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:23:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d3b6c32f495ef1c59515f8e131d78aaa8896f87",
"body": "Finding from pprof (reviewed in prior sprint): the replica refresh loop\ndeserialises the entire writer state into every replica on every tick,\nregardless of whether any write has actually occurred. For read-heavy\nworkloads this is pure waste — the pages being copied are identical\nto what the replica\n[…]\nU. Would introduce a stale-method-value double-release\n risk if a caller ever accidentally invokes the release func\n twice. Keeping the current allocation is worth the correctness\n guarantee.",
"is_bot": false,
"headline": "perf: skip replica refresh when writer idle (40% read-throughput win)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:23:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25bcf30fd321e5549a9a16445e7e9eca42cd17e7",
"body": "Motivation (from reviewing pprof output of TestPProf_MixedReadWrite):\n\n Under a mixed RW workload with ReplicaRefreshInterval=2ms and a 500-row\n dataset, pprof attributed ~43% of total CPU to replicaRefreshLoop —\n driven by sqlite3_deserialize memmoves into every replica on every\n tick. The publ\n[…]\nof\n capture using the package default, so the before/after profiles\n can be diffed directly. The common workload body is factored into\n runMixedPProf so both variants are strictly comparable.",
"is_bot": false,
"headline": "perf: raise ReplicaRefreshInterval default 1ms → 50ms (2.7× throughput)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:42:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4da8b62f37ac8ed962f3ed39b1137af4550bbd94",
"body": "README:\n- Durability Modes table updated — DurabilitySync now accurately\n described as WAL append + full backend flush per write, zero loss\n window.\n- Context-aware methods (ExecContext/QueryContext/QueryRowContext)\n documented.\n- New 'Replication Testing' section lists every test in the new\n in\n[…]\npprof: run benchmarks with CPU/mem/mutex/block profiling\n enabled via go test's native -cpuprofile / -memprofile / -mutex /\n -block flags.\n- pprof-view PROF=<path>: open a profile in pprof's web UI.",
"is_bot": false,
"headline": "docs: README + Makefile for pprof, replication integrity, DurabilitySync",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:31:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "873901858d583d895523be6fa796575fe34364e8",
"body": "New file replication_integrity_test.go brings up a real 3-node Raft\ncluster on loopback ports for every test. Each test asserts byte-level\nequality of every node's FSM log across the cluster — the same\nproperty Raft guarantees on paper — so any corruption, duplication,\nor reordering surfaces immedia\n[…]\non / snapshotLogs / leader / follower accessors, and\nassertLogsIdentical that surfaces the first divergent entry with\nexact offsets so debugging a regression does not require manual\ncross-referencing.",
"is_bot": false,
"headline": "replication/raft: add end-to-end integrity suite (11 tests)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:31:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4a38c119a0022ceb27258d40e43b5fba006c743",
"body": "New package memdb/profiling wraps net/http/pprof with:\n\n- StartServer / Config: runs pprof on a loopback address by default,\n optional MutexProfileFraction and BlockProfileRate to enable the\n corresponding runtime samplers.\n- CaptureCPUProfile / CaptureHeapProfile / CaptureNamedProfile: write\n pr\n[…]\n) gated\n behind MEMDB_PPROF=1. Observed 254k writes/s in a 3s run.\n\ngo.mod: promote hashicorp/go-hclog from indirect to direct (already\nimported by logging package and replication/raft/raft_test.go).",
"is_bot": false,
"headline": "profiling: add pprof package with HTTP server and capture helpers",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:31:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a63f38a29e088cd6926067291ea08eadc5079bd",
"body": "- DurabilitySync now actually forces a full backend flush after every\n successful Exec (previously defined but unimplemented — writes with\n DurabilitySync behaved identically to DurabilityNone). The WAL is\n still appended first so a crash between the WAL append and the\n backend flush is recovera\n[…]\nestart.\n- replica_purego.go: add checkout stub so the purego build compiles.\n The stub is unreachable (newReplicaPool returns an error in purego\n builds) but satisfies the shared memdb.go code path.",
"is_bot": false,
"headline": "core: implement DurabilitySync, add *Context APIs, pool WAL encoder",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:30:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8fbce507c289800b8836cfffc283353cd29b0f2b",
"body": "wal.go (critical correctness):\n Rewrote with self-contained per-record framing — each record is a\n [4-byte big-endian length][independent gob message]. Previously, a fresh\n gob.Encoder was created on every OpenWAL, each of which emitted its own\n type descriptor; multiple processes appending to t\n[…]\nte test output.\n - Updated TestWAL_Replay_CorruptEntry to match the new tolerant replay\n behaviour (truncate at corrupt tail, do not error — preserves any\n valid records before the corruption).",
"is_bot": false,
"headline": "fix: comprehensive review round 2 — 35+ correctness and perf fixes",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T03:14:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5cd9f2502519f3ca2c0d52c9f23c448cd97c4bcf",
"body": "Benchmarks / performance:\n - Performance headline added to opening paragraph\n - Features: added 2.26× write speed and concurrent read pool bullets\n - Single-goroutine table: all numbers updated from current run\n - Concurrent reads: updated numbers, pool now described as channel-based\n exclusi\n[…]\nated file descriptions to reflect current state\n (ExecDirect, WrapBackend, Serialize/Restore, channel pool, driver_shared.go,\n memdb_extra_test.go, SSL negotiation, WaitGroup tracking, ConnPool)",
"is_bot": false,
"headline": "docs: full README update for current codebase state",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T01:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "307574e8b0dad16c532238a46d806142f319175c",
"body": "README.md:\n - Go version corrected to 1.24\n - Single-goroutine table updated: INSERT 3,627 ns (was 4,178) giving\n 2.26× advantage over file/off (was 1.81×); all other operations\n updated with current measurements\n - WAL overhead updated: ~1.6 µs per write (was ~1.3 µs), still 1.57×\n fast\n[…]\n× (was 1.5-1.8×)\n\nmemdb_bench_test.go / memdb_compare_test.go:\n - discardLogger() helper sets a discard slog handler for benchmarks\n so flush/restore INFO events no longer pollute benchmark output",
"is_bot": false,
"headline": "docs: update benchmark results; silence slog output in bench helpers",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T00:56:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e11b5ad57aa05d6e65469f6050cfca75644ba3e9",
"body": "…serialize\n\nPrevious design: RWMutex + round-robin atomic counter.\n\n Problem 1 — The RLock in next() was released before the caller used\n the *sql.DB. refresh() calling sqlite3_deserialize on a replica while\n an open *sql.Rows cursor existed on it was undefined behaviour in SQLite.\n The RLock di\n[…]\ned.\n\n Partial Deserialize failure: remaining replicas (including the failed\n one) are returned to the channel before the error is surfaced so the\n pool stays usable with a mix of old and new state.",
"is_bot": false,
"headline": "feat(replica): channel-based pool eliminates open-cursor race with De…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T00:29:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1f52b4e8e00f63458bba4da91c265f4bb9dbde0",
"body": "memdb.go:\n - Close() now sets closed=true immediately after wg.Wait(), before Flush,\n eliminating the race window where goroutines could write to a closing DB\n - Extracted flushUnchecked() so Close() can flush after marking closed\n - QueryRow: added closed check (routes to d.mem which returns \n[…]\nched attrs appear before call-site attrs\n\ncmd/memdb/main.go:\n - ListenAndServe error logged as slog.Error not slog.Info\n - signal.Stop(quit) deferred to prevent goroutine leak after runServe returns",
"is_bot": false,
"headline": "fix: full code review — 41 issues resolved across all packages",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T00:06:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6518f718a3ecb8f609c4a10d7312a16afe70beec",
"body": "…og adapter\n\ncontext.TODO() signals 'I have not decided what context to use yet'.\ncontext.Background() is correct here — the hclog.Logger interface has no\ncontext parameter on its methods, so these calls originate from hashicorp/raft\ninternal goroutines with no request context. Background() correctly expresses\n'long-lived, no cancellation' which is the semantics of a logger.",
"is_bot": false,
"headline": "fix(logging): replace context.TODO() with context.Background() in hcl…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:39:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac347de872ee2e67843e19b8049bcba989c4a289",
"body": "…ndlers\n\nlogging/ package (new, no new dependencies):\n logging.go — NewTextHandler, NewJSONHandler (stdlib slog wrappers)\n syslog.go — NewSyslogHandler: custom slog.Handler that routes each\n record to the matching syslog priority (LOG_DEBUG /\n LOG_I\n[…]\nup, falling back to text on stderr\n\nREADME.md:\n New Logging section: handlers, level table, wiring examples, hclog bridge\n Features bullet updated\n Project Structure updated with logging/ directory",
"is_bot": false,
"headline": "feat(logging): structured slog logging with syslog, JSON, and text ha…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:36:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa5106b0ae1b557d95e77d740859fea0c07527c3",
"body": "…ding\n\nrpc.go:\n Add connPool — a channel-based pool of idle TLS connections to the\n current leader's ForwardAddr. The buffered channel IS the pool:\n\n Get() — non-blocking receive; returns warm conn or dials fresh\n Put() — non-blocking send; closes conn if channel full\n Close()— drains c\n[…]\nQL (INSERT OR REPLACE /\n ON CONFLICT DO NOTHING) for safe retries — the standard Raft\n recommendation used by etcd, CockroachDB, rqlite, and Consul.\n Update rpc.go description in Project Structure.",
"is_bot": false,
"headline": "feat(replication): channel-based TLS connection pool for write forwar…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:25:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "660da41d26adfc3e878cdaa4f803f46c4aedb244",
"body": "README.md:\n Features: update replication bullet to describe Raft + TLS forwarding\n Configuration: add OnExec field with full explanation of the local-write\n bypass and FSM loop prevention\n Replication section: complete rewrite\n - Remove Leader/Follower section (deleted)\n - Document clust\n[…]\n for follower.LeaderAddr() to be\n non-empty before calling follower.Exec, preventing a race where the\n election is won but the leader address has not yet propagated to\n follower nodes via heartbeat",
"is_bot": false,
"headline": "docs(replication): rewrite documentation for Raft-only replication",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:07:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7287344485abce5572be458a3a0e102158734cb",
"body": "…orwarding\n\nQuorum enforcement:\n NewNode now rejects even peer counts with a clear error explaining that\n even-sized clusters have no fault tolerance advantage (e.g. 2-of-2 quorum\n fails on any single node loss, same as 1-of-1). Valid sizes: 1, 3, 5, 7.\n Single-node clusters log a warning. Minim\n[…]\ns: updated from 2 to 3 peers\n - TestNode_Exec_NotLeader: updated from 2 to 3 peers\n - TestNode_AddRemoveVoter_NotLeader: updated from 2 to 3 peers\n - TestParsePeers_Valid: updated from 2 to 3 peers",
"is_bot": false,
"headline": "fix(replication): quorum validation, crash-safe stores, transparent f…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:00:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c9d69957b296905ed7f77d02d7a89661dbb81330",
"body": "Remove:\n replication/leader.go, follower.go, transport.go and their tests.\n The Transport interface was never implemented for real network use;\n the leader/follower model provided no automatic failover.\n\nAdd:\n replication/replication.go\n WALEntry type isolated here so replication/raft can imp\n[…]\n can route writes\n through node.Exec for cluster consensus.\n\nmemdb.go:\n Wire OnExec into DB.Exec — invoked after WAL append, before return.\n Non-nil error from OnExec propagates back to the caller.",
"is_bot": false,
"headline": "feat(replication): replace leader/follower with full Raft over TLS",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T22:40:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "77b517b1fe3dd0f9f646ac5df1f27253245d250f",
"body": "…ference\n\n- Installation: split into library (go get) and CLI (make build/install)\n sections; add Makefile quick-reference for build-purego and build-all\n- CLI: replace non-existent commands (wal inspect/replay, --config flag)\n with the three real sub-commands (serve, snapshot, restore) and their\n\n[…]\nion from 1.18 to 1.24 (required\n by the current dependency graph after go mod tidy)\n- Project Structure: add Makefile entry\n- purego note: clarify that flush/restore are unavailable (not just slower)",
"is_bot": false,
"headline": "docs: update README with Makefile build workflow and corrected CLI re…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:57:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3224e85e708b1e613072091835083338c6ecd95c",
"body": null,
"is_bot": false,
"headline": "chore: add /build/ and /coverage/ to .gitignore",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:56:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "097fc790d740bb41d19a899f07194e41c67f828e",
"body": "Targets:\n Build: build, build-purego, build-prod, build-all (linux/darwin × amd64/arm64)\n Run: run, run-args\n Core tests: test, test-race, test-short, test-coverage, test-coverage-check,\n test-specific, test-count\n Pkg tests: test-core, test-backends, test-server, \n[…]\nean, clean-tests, clean-all\n Help: help (default target)\n\nUses SHELL := /bin/bash for echo -e colour support on dash systems.\nVersion/commit/build-time injected via -ldflags from git describe.",
"is_bot": false,
"headline": "build: add Makefile",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:54:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbf428cdaac033302cab4855c0dbf8563eeacff5",
"body": "backends/backends_test.go (17 tests):\n- LocalBackend: Exists, Write/Read round-trip, atomic rename, reader\n error cleanup, file-not-found\n- CompressedBackend: round-trip, Exists delegation, corrupt stream\n rejection, inner write error propagation\n- EncryptedBackend: round-trip, nonce randomness pe\n[…]\nE, error response\n- Multiple rows (3xDataRow), empty result set\n- Terminate message closes connection\n- Unix domain socket listener\n\nTotal: 107 tests passing, -race clean, go vet + golangci-lint clean",
"is_bot": false,
"headline": "test: comprehensive test suite across all packages",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:48:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "073eb8a22e9362d36e434fd8e17667f86b4fecdd",
"body": "follower.go:\n- Remove dead AllowStaleReads field (had no implementation)\n- Fix gap detection off-by-one: fresh follower with Seq != 1 now\n triggers resync instead of silently accepting a mid-stream entry\n- Fix gap entry dropped after resync: entry is re-applied when\n entry.Seq > snapshotSeq, skipp\n[…]\n/Persist/Restore round-trip,\n serialize error, restore read error, package-level Apply (not leader,\n leader success, string args, context cancelled), Release no-op\n- All 26 new tests pass with -race",
"is_bot": false,
"headline": "fix(replication): correct bugs and add full test coverage",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:31:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c63e91ab0bb7a257802f8d16f39caa0cadc225b",
"body": "- In-memory SQLite DB with periodic snapshot persistence via SQLite Online Backup API\n- Three durability modes: DurabilityNone, DurabilityWAL, DurabilitySync\n- Pluggable backend interface (LocalBackend, CompressedBackend, EncryptedBackend)\n- WrapBackend adapter bridges ExternalBackend to internal me\n[…]\nvia hashicorp/raft\n- cgo (mattn/go-sqlite3) and purego (modernc.org/sqlite) build tag support\n- Comprehensive benchmark suite including memdb vs file SQLite comparison\n- go vet and golangci-lint clean",
"is_bot": false,
"headline": "feat: initial release",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T16:40:16Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 18,
"commits_last_year": 80,
"latest_release_at": "2026-07-17T14:42:43Z",
"latest_release_tag": "v1.10.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 8,
"days_since_latest_release": 4,
"mean_days_between_releases": 9.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/voicetel/memdb",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/voicetel/memdb",
"is_deprecated": false,
"latest_version": "v1.10.0",
"repository_url": "https://github.com/voicetel/memdb",
"versions_count": 24,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T14:21:23Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_stars": 3
},
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 40454,
"source_files_sampled": 94,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.19.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 60
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 16,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/hashicorp/go-hclog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.3"
},
{
"name": "github.com/hashicorp/raft",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.3"
},
{
"name": "github.com/klauspost/compress",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.0"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.3"
},
{
"name": "github.com/mattn/go-sqlite3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.48"
},
{
"name": "github.com/peterh/liner",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/hashicorp/go-hclog",
"direct": true,
"version": "v1.6.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/raft",
"direct": true,
"version": "v1.7.3",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": true,
"version": "v1.19.0",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": true,
"version": "v1.12.3",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-sqlite3",
"direct": true,
"version": "v1.14.48",
"ecosystem": "go"
},
{
"name": "github.com/peterh/liner",
"direct": true,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/armon/go-metrics",
"direct": false,
"version": "v0.4.1",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.13.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-immutable-radix",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-metrics",
"direct": false,
"version": "v0.5.4",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-msgpack/v2",
"direct": false,
"version": "v2.1.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.12",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.3",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.19.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 16,
"direct_count": 6,
"indirect_count": 10
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 7,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "voicetel",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/8617362?v=4"
},
{
"type": "User",
"login": "mavroudis",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1646475?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.973
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql.yml",
"dependency-submission.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/23 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "073ef17387d089296e13ef17fa82b6ded3fdf9a1",
"ran_at": "2026-07-22T02:46:11Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T11:10:09Z",
"oldest_open_prs": [
{
"number": 8,
"created_at": "2026-07-20T11:10:08Z",
"last_comment_at": "2026-07-20T11:10:08Z",
"last_comment_author": "dependabot"
},
{
"number": 9,
"created_at": "2026-07-20T11:10:14Z",
"last_comment_at": "2026-07-20T11:10:15Z",
"last_comment_author": "dependabot"
}
],
"last_merged_pr_at": "2026-07-14T21:25:40Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/voicetel/memdb",
"host": "github.com",
"name": "memdb",
"owner": "voicetel"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"security": 61,
"vitality": 75,
"community": 23,
"governance": 54,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 80,
"human_commit_share": 0.912,
"days_since_last_push": 1,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "80 commits in the last year",
"points": 17.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 80
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 18,
"latest_release_tag": "v1.10.0",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 9.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 23,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 0,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.973
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 97% of commits",
"points": 0.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 97
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 7,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "7/7 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 7,
"decided": 7
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "voicetel",
"public_repos": 42,
"account_age_days": 4341
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of voicetel",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "voicetel"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "42 public repos, account ~11 yr old",
"points": 23.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 42
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/voicetel/memdb"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "24 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 24
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 61,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 16 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 16
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 16,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 16,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 62,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "73 of 73 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 73,
"sampled": 73
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.013,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.087
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 80 commits agent-authored or agent-credited",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 80
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "7 of the last 80 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 7,
"sampled": 80
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 40454,
"source_files_sampled": 94,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/94 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 94,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T02:46:18.951853Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/voicetel/memdb.svg",
"full_name": "voicetel/memdb",
"license_state": "custom",
"license_spdx": null
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con voicetel/memdb. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.
