Registro públicoModerado
Informe de salud del softwareesquema 0.26.0 · métricas 1.13.0 · 2026-07-22 04:33 UTC
zyra / gobac
BACnet protocol implementation in Golang
zyra/gobac tiene un índice de salud de 57 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Engineering Quality (80/100) y la más baja, Community & Adoption (24/100). Se actualizó por última vez hace 3 días. Una sola persona concentra la mayor parte del trabajo reciente.
57
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
57
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Zyra MediaOrganización
3 seguidores20 repositorios públicosdesde feb 2016
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Go | github.com/zyra/gobac/v2 | v2.2.0 | - | 4 | hace 3 días |
| Go | github.com/zyra/gobac | v1.5.9 | - | 20 | hace 1957 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
69
Actividad de desarrollo
64Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 3 días |
| 0.7/36 | Cadencia de commits — 1/52 semanas con commits |
| 17.4/18 | Volumen de commits — 86 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 86 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 1 |
Disciplina de publicación
76Bueno
Cómo se puntúa
| 27/27 | Publica versiones — 12 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 3 días |
| 12.6/27 | Cadencia de publicación — una versión cada ~273,4 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Datos de entrada utilizados
| releases_count | 12 |
| latest_release_tag | v2.2.0 |
| releases_from_tags | no |
| days_since_latest_release | 3 |
| mean_days_between_releases | 273,4 |
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
24
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 1 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 2 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 1 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
Salud de la comunidad
50Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
61
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 10/10 | OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Capacidad de respuesta a issues y PR
85Excelente
Cómo se puntúa
| 46.8/46.8 | Resolución de issues — 100% de issues cerradas |
| 38.2/38.3 | Aceptación de PR — 9/9 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 9 |
| open_issues | 0 |
| closed_issues | 1 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 0 |
Propiedad y custodia
56Moderado
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 4.3/25 | Alcance del propietario — 3 seguidores de zyra |
| 21.6/25 | Trayectoria — 20 repos públicos, cuenta de ~10 años |
Datos de entrada utilizados
| followers | 3 |
| owner_type | Organization |
| is_verified | — |
| owner_login | zyra |
| public_repos | 20 |
| account_age_days | 3809 |
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 2 paquete(s) en go |
| 35/35 | Recencia de publicación — última publicación hace 3 días |
| 20/20 | Historial de versiones — 20 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | github.com/zyra/gobac/v2, github.com/zyra/gobac |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 3 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
80
Prácticas de ingeniería
84Bueno
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 3 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 16/16 | Configuración de linter — .flake8 |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | sí |
| has_precommit_config | no |
Documentación
75Bueno
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
40
Postura de seguridad
40En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 0/7.5 | Vulnerabilities — 26 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4 |
Excluidos de la puntuación (sin datos o no aplicable): packaging. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
56
Contexto y guía para agentes
29Crítico
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 28.8/40 | Historial de commits legible — 54 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,54 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 12.6/18 | Arranque con un solo comando — go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod (convención del toolchain, sin ejecutor de tareas) |
| 22/22 | Pruebas automatizadas |
| 11/11 | Configuración de lint / formato — .flake8 |
| 11/11 | Verificación estática de tipos — Go (tipado estático) |
| 10/10 | Entorno reproducible — Dockerfile, lockfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | sí |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | sí |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod, vendor/gopkg.in/yaml.v2/go.mod |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Go (tipado estático) |
| 55/55 | Tamaños de archivo manejables — 0/170 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Go |
| largest_source_bytes | 43.938 |
| source_files_sampled | 170 |
| oversized_source_files | 0 |
Interfaces legibles por máquina
40En riesgo
Cómo se puntúa
| 0/40 | Esquema de API (OpenAPI/GraphQL/proto) |
| 0/20 | Servidor MCP |
| 40/40 | Ejemplos ejecutables — examples |
Datos de entrada utilizados
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Datos clave
1estrellas de GitHub
1contribuidores
86commits en los últimos 12 meses
3días desde el último push
12versiones publicadas
1factor bus
0issues abiertas
Goecosistemas de paquetes
Advertencias de recopilación de datos
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 4.0 / 10
4.0agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/7 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/d | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 0 | Vulnerabilities | 26 existing vulnerabilities detected |
Dependencias directas 6
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/stretchr/testify | v1.4.0 | go.mod |
| Go | github.com/urfave/cli | v1.21.0 | go.mod |
| Go | golang.org/x/sys | v0.0.0-20190405154228-4b34438f7a67 | go.mod |
| Go | gopkg.in/yaml.v2 | v2.2.2 | go.mod |
| Go | fyne.io/fyne/v2 | v2.8.0 | gui/go.mod |
| Go | github.com/zyra/gobac/v2 | v2.0.0 | gui/go.mod |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1808,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 880290,
"Dockerfile": 135
},
"pushed_at": "2026-07-18T21:27:05Z",
"created_at": "2019-07-29T07:34:01Z",
"owner_type": "Organization",
"updated_at": "2026-07-18T21:27:09Z",
"description": "BACnet protocol implementation in Golang",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://zyramedia.com",
"name": "Zyra Media",
"type": "Organization",
"login": "zyra",
"company": null,
"location": "Toronto, ON",
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/17262907?v=4",
"created_at": "2016-02-16T02:01:09Z",
"is_verified": null,
"public_repos": 20,
"account_age_days": 3809
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-07-18T21:14:47Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-07-18T13:31:00Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-07-17T23:15:41Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-07-16T03:14:38Z"
},
{
"tag": "v1.5.9",
"kind": "patch",
"published_at": "2021-03-13T06:11:58Z"
},
{
"tag": "v1.5.8",
"kind": "patch",
"published_at": "2020-12-08T08:01:10Z"
},
{
"tag": "v1.5.7",
"kind": "patch",
"published_at": "2020-03-10T15:21:48Z"
},
{
"tag": "v1.5.6",
"kind": "patch",
"published_at": "2019-10-23T14:54:13Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2019-10-23T14:51:34Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2019-10-23T14:47:47Z"
},
{
"tag": "1.1",
"kind": "other",
"published_at": "2019-08-26T08:10:09Z"
},
{
"tag": "1.0",
"kind": "other",
"published_at": "2019-08-18T22:30:20Z"
}
],
"recent_commits": [
{
"oid": "60082a53f852711389dc53c94011bfe23d3d4cda",
"body": "Write Windows-native toolchain path for the arm64 GUI leg",
"is_bot": false,
"headline": "Merge pull request #10 from zyra/fix-win-arm64-path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:27:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d666b08f8853fe7be14e363221a733d3dfc9ef",
"body": null,
"is_bot": false,
"headline": "Write Windows-native toolchain path for the arm64 GUI leg",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811944cd2f5566055f000de159ef46fbbe561103",
"body": "Rework GUI for first-run usability",
"is_bot": false,
"headline": "Merge pull request #9 from zyra/gui-ux",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:13:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0cdebbcf39650ae3f33751f775b3a9f1066930",
"body": "Replace raw \"sweep failed:\", \"open failed:\", \"save failed:\", and\n\"simulation start failed:\" status text with plain sentences that\nstill include the underlying error as a short reason.",
"is_bot": false,
"headline": "Use plain-language wording for scan/open/save/simulation errors",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e1d569ae08df3f02ad563b168a3eb5ff84f21c9",
"body": "Automatic picked the alphabetically first non-loopback interface, so\na docker/bridge/veth interface could beat the real LAN NIC. Mark\ncandidates matching common virtual-interface prefixes and rank them\nafter physical ones in both the sorted list and Automatic's pick,\nwithout hiding them from the dropdown.",
"is_bot": false,
"headline": "Rank physical NICs ahead of virtual interfaces in Automatic",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22f582c8caa15af081513f8832d6a891f29740d8",
"body": "The nav List's item template was an empty-string label, so Fyne's\ncached per-row min size collapsed the whole rail to near zero width\nand long labels like \"Network Explorer\" rendered as \"Net\". Seed the\ntemplate with the widest actual nav label instead, and strengthen the\nrendered-launch test to assert the nav rail and each rendered nav\nlabel are at least as wide as their own MinSize.",
"is_bot": false,
"headline": "Fix nav rail clipping labels at natural width",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d762faf1af0673bc305ce1047a1b834e5114dc4",
"body": "Settings' Network dropdown gains \"All networks\" ahead of the\nexisting Automatic entry, persisting a \"*\" sentinel that\nStartFromSettings maps to the bacnet library's new wildcard listen.\nAutomatic keeps the \"(recommended)\" wording since its directed\nbroadcast is more reliable on multi-homed hosts than All networks'\nlimited broadcast.",
"is_bot": false,
"headline": "Add an All networks option to the Settings network picker",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61feeaec17e8ace4db5ecddc9b11afaa84491114",
"body": "getNetworkSet(\"\") now returns the wildcard source (0.0.0.0) paired\nwith the limited broadcast address (255.255.255.255) instead of\nfailing, so a Server can bind and send on every network the OS\nroutes to rather than one named interface. Named interfaces are\nunaffected.",
"is_bot": false,
"headline": "Library: support wildcard listen for all-networks binding",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:17:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "283b39534b9f8492d96014e714482961412e8f59",
"body": "Home greets first-run users with two big actions (Simulate a network,\nDiscover my network) plus a Settings shortcut instead of a blank pane.\nNav trims to Home / Network Explorer / Simulator; Object Browser is now\na drill-down of Network Explorer with a Back-to-results button rather\nthan its own top-level row. Discovery gets plain-language copy (Scan\nnetwork, an empty-state placeholder) and a launch failure now reports\n\"Not connected yet\" instead of a raw error.",
"is_bot": false,
"headline": "Add welcoming Home view and rework navigation to plain language",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:05:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faa47364cf04e89ac0d5a8a3eae7c10e862a27b6",
"body": "Mounts the editor view into a real window/canvas and asserts the\nstrip actually occupies rendered space and paints content once a\nsimulation starts, catching the exact clipped/zero-size failure mode\nthat v.root.Refresh() in onRun/onStop guards against.",
"is_bot": false,
"headline": "Add rendered regression test for running-devices strip visibility",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T16:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f802050631f7afe48dbaa66de3685d07244b6b69",
"body": "Adds Run/Stop controls and a running-devices strip to the scenario\neditor, migrating the runner lifecycle from the deleted Quickstart view.\nRun validates the document, serializes it via the editor's own\nscenariodoc.Document, and starts it through simrun; a scenario simrun\ncan't run gets plain-langua\n[…]\nted\"/\"Network\" text.\n\nboot.go wires the shared DeviceStore into the Simulator view and a\nPortHint callback so a running simulation's status includes a tip when\nthe current session port won't reach it.",
"is_bot": false,
"headline": "Consolidate Simulator Editor and Quickstart into one Simulator view",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T16:28:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2254edd4a45a4975952097d2e44f36bc0b5afa9a",
"body": "Settings now offers \"Automatic (recommended)\" plus each usable network\ninterface by human-friendly label instead of a raw text field, backed\nby a new netpick package. Bootstrap resolves Automatic to the best\nreal interface at start time, and Settings now restarts the live\nsession on save instead of requiring a relaunch, reporting plain\nconnected/failed status either way.",
"is_bot": false,
"headline": "Replace free-text network interface with a picked dropdown",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T15:58:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f40599dd7b440b7c90e9ba8ee70fc9a1095fb15",
"body": "AppShell embedded *fyne.Container directly, which only satisfies\nfyne.CanvasObject by method promotion; the driver's render-tree walk\nonly recognizes a concrete *fyne.Container or a fyne.Widget, so\nwindow.SetContent(shell) painted nothing. Make AppShell a real widget\n(widget.BaseWidget + CreateRende\n[…]\noot.Compose, the single\ncomposition root shared by main() and the new rendered regression\ntests, which capture the composed window's canvas and assert on\npainted pixels rather than the container tree.",
"is_bot": false,
"headline": "Fix blank AppShell rendering and add a composition root",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T15:40:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16d3c6a1743fa6c9a4857517e1f57b270b97683d",
"body": "Fix windows-arm64 GUI release builds",
"is_bot": false,
"headline": "Merge pull request #8 from zyra/release-arm64-fix",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:53:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "671833c4d5f0c638abf1f9a8c5d868c48b784c6d",
"body": "Install a pinned llvm-mingw aarch64 toolchain on the windows-11-arm\ngui-release leg so CGO doesn't fall back to the runner's x86 gcc,\nwhich can't assemble arm64 code. Also add a workflow_dispatch trigger\nthat re-runs only gui-validate/gui-release against an existing tag,\nso a failed GUI leg can be retried without cutting a new release.",
"is_bot": false,
"headline": "Fix windows-arm64 GUI release builds",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:49:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db51ce5dedec7782188c38401fe1d9a6d17efa36",
"body": "Fix GUI CI on Linux and macOS",
"is_bot": false,
"headline": "Merge pull request #7 from zyra/ci-fixes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62b26b5e8ad9d53b7b4e16f51d44546ec17b9330",
"body": "Two latent failures surfaced once the Windows leg ran to completion\n(it was previously cancelled early by fail-fast whenever macOS\nfailed):\n\n- TestSaveToUnwritableDirectoryFails assumed 0o555 on a directory\n blocks file creation; on Windows Unix permission bits don't, so\n skip it there like the ex\n[…]\n\n process-global text shaper - exactly the DATA RACE CI reported.\n Raise these waits to a generous 30s (a passing wait still returns\n immediately) in browser, discovery, quickstart and shell tests.",
"is_bot": false,
"headline": "Fix Windows-only GUI test failures",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:50:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ad812e28df9efdbdaa128f072a96b33c105f198",
"body": "CI confirmed the actual darwin failure once startup errors started\nsurfacing: \"listen udp4 127.255.255.255:PORT: bind: can't assign\nrequested address\". Unlike Linux, BSD-family kernels (including\ndarwin, which server_generic.go also serves) refuse to bind a UDP\nsocket directly to a directed-broadcas\n[…]\nputed broadcastAddr.\n\nAlso set fail-fast: false on gui-validate.yml's OS matrix so a\nfailure on one leg doesn't cancel the other two before they finish,\nwhich was hiding their actual pass/fail status.",
"is_bot": false,
"headline": "Bind the generic listen path's broadcast socket to the wildcard address",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:31:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1da428137f90353207ebce52d7ca9e9840b63e75",
"body": "bacnet.Server.Listen closes its Start() channel even when\nListenContext failed to bind (it calls markStarted() on the error\npath too), so Live.Start treated that close as unconditional success.\nA failed listener then surfaced later and confusingly, as \"server is\nnot listening\" from the first Send ca\n[…]\nnto the buffered Errors()\nchannel, so once Start() fires, a startup failure is guaranteed to\nalready be queued there. awaitStart checks for it non-blockingly and\nwraps it into the error Start returns.",
"is_bot": false,
"headline": "Surface bacnet listener startup errors from session.Live.Start",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8441c5e89f858d2755042bfcd4fa43752ce9c7b0",
"body": "ListenContext on this platform set binds two UDP sockets sharing one\nport: a unicast socket on the interface's address and a broadcast\nsocket on its directed-broadcast address (e.g. 127.0.0.1:p and\n127.255.255.255:p for loopback). SO_REUSEADDR alone covers this on\nLinux/FreeBSD, but they never reach\n[…]\nL.\n\nsetReusePort is split into its own file per GOOS subset because\nunix.SO_REUSEPORT isn't defined for solaris in the vendored\ngolang.org/x/sys/unix, which is otherwise part of this file's build\ntag.",
"is_bot": false,
"headline": "Set SO_REUSEPORT on the darwin/BSD generic listen path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e6e70db299d300e981254d09c9a2ab894a078bd",
"body": "go-gl/glfw v3.4 (pulled in by Fyne 2.8) needs wayland-client-core.h\nand xkbcommon headers to compile on Linux, so every Linux leg that\nbuilds the gui module now installs libwayland-dev and\nlibxkbcommon-dev alongside the existing GL/X11 dependencies.",
"is_bot": false,
"headline": "Install Wayland headers for Fyne builds on Linux CI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f2d949cf2607a900dfd1529f4490b525e32ab2",
"body": "Build and publish binaries for all desktop targets",
"is_bot": false,
"headline": "Merge pull request #6 from zyra/release-automation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530459d5280e9d60cb8780091396a4ea6dd805a5",
"body": "The upload step ran under PowerShell on the Windows runners, where the\nbash-only script fails; force bash for every run step in the job. The\nWindows images also expose python but not python3, so resolve whichever\nis on PATH for the zip and checksum steps. Bundle README.md alongside\nLICENSE to match the CLI packages, and document the augment-after-\npublish ordering of GUI asset uploads.",
"is_bot": false,
"headline": "Fix Windows legs of the GUI release job",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe9fbc0d6a1b30d6dfcdf58489bd6eac2c3ab8b1",
"body": "Add windows/arm64 to the CLI cross-compile matrix and a new gui-release\nmatrix job that builds gobac-gui natively on all six OS/arch runners\n(Fyne requires CGO, so it can't cross-compile from ubuntu). Each GUI\nleg uploads its own asset and checksum file to the release created by\nthe existing release job, gated by a fast Linux-only gui-validate job.",
"is_bot": false,
"headline": "Build and publish binaries for all desktop targets",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:04:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53dd7a7fa6f5850b1d0cf56584bd1876a7885397",
"body": "Add cross-platform GUI operator workstation",
"is_bot": false,
"headline": "Merge pull request #5 from zyra/gui-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a846d19c26884fdd0085e5bcb68f0ae161857ef",
"body": "Wire persisted interface/port settings into session.Start on launch\nand session.Stop on window close, instead of leaving Discovery,\nBrowser, and Quickstart hitting an unstarted session. The\nsettings-to-config mapping and start/stop wiring now live in a small\ntestable session.Starter seam with unit t\n[…]\nsettings\ndialog, and widen the GUI CI path filters to cover the parent library\npackages the module depends on via its replace directive, plus add a\nreachability probe to the macOS loopback alias step.",
"is_bot": false,
"headline": "Start and stop the BACnet session on launch/close",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:47:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "44db28e843760ba1f0796c1f4a65c50f69e156f1",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into gui-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8204e41a66001641f64a38dadf096f7942c24224",
"body": "Add Wave 1 client services and simulator realism",
"is_bot": false,
"headline": "Merge pull request #4 from zyra/lib-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:33:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f15397827c0ffb4c83f5b3b74c01f87793d86826",
"body": "Request.UnmarshalBinary and SubscribeCov.MarshalBinary returned their\nscratch buffer to the pool before resetting it. Go defers run LIFO,\nso the buffer went back into the pool while another goroutine could\nalready be writing to it, and the original goroutine's Reset() raced\nwith that write.\n\nReset now happens inside the same deferred closure as Put, so the\nbuffer is always cleared before it becomes visible to another Get().\n\nTest: go test -race -mod=vendor -count=20 ./bacnet",
"is_bot": false,
"headline": "Fix defer ordering race on pooled buffers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1697777cf7587e543dda461edb1377624a6ac19f",
"body": "Request.UnmarshalBinary and SubscribeCov.MarshalBinary returned their\nscratch buffer to the pool before resetting it. Go defers run LIFO,\nso the buffer went back into the pool while another goroutine could\nalready be writing to it, and the original goroutine's Reset() raced\nwith that write.\n\nReset now happens inside the same deferred closure as Put, so the\nbuffer is always cleared before it becomes visible to another Get().\n\nTest: go test -race -mod=vendor -count=20 ./bacnet",
"is_bot": false,
"headline": "Fix defer ordering race on pooled buffers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:15:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e28b8f63391fe0714067b29a0e808a5a3f988585",
"body": null,
"is_bot": false,
"headline": "Synchronize quickstart stop state with UI thread",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:06:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "256db6c38688dbfb1fb7d12971e4c22419bb14b9",
"body": null,
"is_bot": false,
"headline": "Synchronize quickstart runner state with UI thread on start",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bc155f7e597269880bc8b473c5a8c807ec18ffd",
"body": "internal/simrun runs a scenario's devices as loopback UDP BACnet/IP\nresponders, one goroutine each, and reports the OS-assigned port each\none actually bound. The Quickstart view decodes a bundled three-device\ndemo scenario, starts it, injects its devices into the shared device\nstore (Source \"local-s\n[…]\n the port it is itself\nconfigured with, so reading a quickstart device requires a session\nbound to that same port, and a same-port 127.0.0.1 device would\ncollide with the client's own loopback socket.",
"is_bot": false,
"headline": "Add in-process simulator quickstart",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:55:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80800d11eebf92ce7b7b10a9a00fe8de9bd5754c",
"body": null,
"is_bot": false,
"headline": "Repaint field hints when switching device or object selection",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:34:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a24f314de840385630c4f9d480dd22f84b6d8e4",
"body": "Full forms editor over scenariodoc.Document: open/save/save-as, a\nnetwork form, master-detail device and object editing (typed value\neditors per object type), and per-field validation feedback fed by\nscenariodoc.FieldErrors plus Document.Validate() gating the Save\nbutton. Mount it as the Simulator Editor nav entry.",
"is_bot": false,
"headline": "Add scenario editor UI with live validation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:32:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "effeb9574438d02fecf77ef0052ff196261aaca8",
"body": null,
"is_bot": false,
"headline": "Add scenario document layer with YAML/JSON round-trip guard",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0398bc3e5da0b1f69effc19ea24ff3fbae19e514",
"body": null,
"is_bot": false,
"headline": "Strengthen write-dialog test's device IP assertion",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:00:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad09627b2235d9c95cc841e65687082249f63f47",
"body": "Object tree from Object_List plus a property panel loaded via\nReadMultiple (one ReadSpec per property until RPM lands), with a\nwrite dialog for Present_Value. Extends the session facade to unwrap\nObjectId and BitString values and to wrap CharacterString writes, so\nthe browser never needs to import library wire types directly.",
"is_bot": false,
"headline": "Add RPM-based object browser with L1/L2 fallbacks",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a3496a211227924656de8ca94fdfcc7e4c3757",
"body": "Wire the Discovery nav entry to a real view: sweep/clear toolbar with\na duration selector, a device table bound to the DeviceStore, and row\nselection ready for the object browser to hook into. Sweeps run on a\ngoroutine and merge into the store as I-Ams arrive; the store listener\ndrives the table and\n[…]\nt label back on the Fyne thread.\n\nGive AppShell an exported SetView so the app entrypoint can swap the\nplaceholder Discovery label for the real view without changing the\nshell's constructor signature.",
"is_bot": false,
"headline": "Add discovery view with live sweep table",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:44:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2821aa91530ac47d8aae124540d1b16b007edcd1",
"body": "The client stack always sends to the port it listens on, so every\ndiscovered device is reachable at the session's own configured port.\nThread that port through DeviceSummary so callers can render a full\naddress without guessing it.",
"is_bot": false,
"headline": "Carry the listen port on discovered device summaries",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "344e3ed5a407cfd94ba825721ceffd4f919e5102",
"body": null,
"is_bot": false,
"headline": "Fix store package doc comment section reference",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:27:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb396d5bc020ca23265d51ed2ace5f63b2270f0f",
"body": null,
"is_bot": false,
"headline": "Add observable device/object store",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4be47a26fd086b1c85c44cc1a938101f52e34ffa",
"body": null,
"is_bot": false,
"headline": "Provision Windows loopback alias for GUI simulator tests in CI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71a948f0320b8574fd077be90c8464703e3e1139",
"body": null,
"is_bot": false,
"headline": "Un-skip session round-trip tests now that the library race is fixed",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b048f088d8d1d9ed324d4800342c736049efeae1",
"body": "Server.handle() re-read req.InvokeID() to release the invoke ID\nafter handing req to a client goroutine via deliverConfirmedHandler.\nThe client goroutine can concurrently Release() the request back to\nits sync.Pool, racing the reset against that read. Hoist the invoke\nID into a local before delivery\n[…]\nship\nhas transferred.\n\nAdds a regression test that drives the real dispatch path with a\nconsumer goroutine releasing the delivered request immediately,\nreproducing the race under -race before the fix.",
"is_bot": false,
"headline": "Fix data race on req after confirmed-handler delivery",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:11:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f898cd6d1ba36e7fe4079f6d0488849343a6323d",
"body": "Server.handle() re-read req.InvokeID() to release the invoke ID\nafter handing req to a client goroutine via deliverConfirmedHandler.\nThe client goroutine can concurrently Release() the request back to\nits sync.Pool, racing the reset against that read. Hoist the invoke\nID into a local before delivery\n[…]\nship\nhas transferred.\n\nAdds a regression test that drives the real dispatch path with a\nconsumer goroutine releasing the delivered request immediately,\nreproducing the race under -race before the fix.",
"is_bot": false,
"headline": "Fix data race on req after confirmed-handler delivery",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:08:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6b396000b1d51ef75f9dae0a02a51c3a0a478d75",
"body": "…fault",
"is_bot": false,
"headline": "Add simulator object realism: status, event state, OOS, relinquish de…",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:55:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c996af66eaaa7815c4674d891aba3d98d6b4ab8d",
"body": "Extend SubscribeCOV marshal/unmarshal with IssueConfirmed and\nLifetime/HasLifetime fields, add CovOptions and\nServer.SubscribeCovWithOptions so callers can request unconfirmed\nnotifications and an explicit or indefinite lifetime, and route\nunconfirmed COV notifications to the same per-device/process\nhandler confirmed notifications use so CovNotifier delivers both.\nExisting SubscribeCov/SubscribeCovWithProcessID keep emitting\nidentical bytes.",
"is_bot": false,
"headline": "Add unconfirmed and lifetime options to client SubscribeCOV",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0d3fd45dbdebb3003413b193e450e0f1b4e05b4",
"body": "Client can broadcast TimeSynchronization (choice 6) and\nUTCTimeSynchronization (choice 9) as fire-and-forget unconfirmed\nrequests. Simulator decodes both and records the synced date/time onto\nthe device's Local_Date and Local_Time properties, which stay unknown\nuntil the first sync.",
"is_bot": false,
"headline": "Add TimeSynchronization and UTCTimeSynchronization support",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73b00d593cc19b5c51cd11fcf45d8ebb8483ef3f",
"body": "TestStartStopLifecycle and startLiveAgainst hardcoded Config{Interface:\n\"lo\"}, which only exists on Linux (macOS uses \"lo0\", Windows something\nelse entirely) and made the non-skipped lifecycle test fail on the\nmacOS/Windows CI legs. Resolve the loopback interface by scanning\nnet.Interfaces() for a l\n[…]\nitigation,\nnot a resolution: the -race quarantine and the simulator's 127.0.0.2\nbind (forced by the library's shared-port addressing model, deviating\nfrom plan §6.7) still need a plan-owner amendment.",
"is_bot": false,
"headline": "Resolve loopback interface name per-OS in session tests",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:19:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "921d1ec1495b3a144934cca920f39faef82dfbc5",
"body": null,
"is_bot": false,
"headline": "Answer Who-Has broadcasts in the simulator",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:13:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef92eae6b96f84c7b682984bea70f21cd23b2e17",
"body": null,
"is_bot": false,
"headline": "Add client Who-Has/I-Have codec and broadcast",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:13:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce39fe355bb892b8241a211544727e20a5a51133",
"body": "Alias 127.0.0.2 on lo0 in the macOS CI leg so the simulator harness\ncan bind its distinct loopback address (macOS assigns only 127.0.0.1\nto lo0 by default).\n\nSkip the four round-trip session tests under -race: they reliably hit\na genuine data race inside bacnet/server.go (ReleaseInvokeID reads\nreq.I\n[…]\nbrary bug outside gui/'s scope, not something introduced here, and\nstill blocks the -race CI gate until it's fixed on the library side.\nNon-race runs still exercise the exact-value assertions in full.",
"is_bot": false,
"headline": "Fix macOS loopback binding and quarantine known library race",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:08:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6ac9d907ed14da138f897ff8c45afdb5f58d22be",
"body": null,
"is_bot": false,
"headline": "Add simulator WritePropertyMultiple handler with atomic writes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:58:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1b707a3621d90574a69a50df17b7b2ac55ebbb2",
"body": null,
"is_bot": false,
"headline": "Add WritePropertyMultiple client codec and error decoding",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e49a74c8a9a8b3dc7b923cc21cb2b24c02c670c5",
"body": "Introduce internal/session with a Session interface and Live\nimplementation that starts/stops the bacnet.Server listener, discovers\ndevices via Who-Is, and reads/writes object properties. Instance\nnumbers above 65535 are rejected with a pending-L2 error and\nReadMultiple falls back to sequential Read\n[…]\nvice scenario in-process and serves it\nover loopback UDP to exercise reads, a write-then-read-back round\ntrip, a write-access-denied error, the instance guard, and the\nstart/stop lifecycle end to end.",
"is_bot": false,
"headline": "Add session layer wrapping the BACnet client SDK",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:55:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbe4708290b85a204ff7780583c5aefbe3189a25",
"body": "Add ReadObjectProperty, WriteObjectProperty, and SubscribeCovObject\nthat accept a types.ObjectId with the complete 0..4194303 instance\nrange, delegating to the existing implementations. The CLI's\nreadprop/writeprop commands now parse and validate the full range\nand use the new methods.",
"is_bot": false,
"headline": "Expose full 22-bit object instances in client API and CLI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687a8cce82ca58503521411d80b8cbf949f30884",
"body": "Adds the nested github.com/zyra/gobac/gui module (Fyne v2.8, replace\ndirective to the repo root), a runnable app shell with left navigation,\nswitching content stack, and status bar, plus a settings dialog for\ninterface/port persisted via app preferences. Adds the 3-OS gui-validate\nCI workflow.",
"is_bot": false,
"headline": "Scaffold gui module with app shell and settings dialog",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ae2b3744ff4f6fb69812687fc2b41be8b7d805",
"body": null,
"is_bot": false,
"headline": "Add client ReadPropertyMultiple",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "399ce016015c55e9278981bc320abc4acc05c52c",
"body": null,
"is_bot": false,
"headline": "Merge pull request #3 from zyra/pr2-review-fixes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T14:08:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd53b12be7f6fc6f1027c17c18e0c2f0cf86ae42",
"body": "Introduce three package-level seams (whoIsRequest in whois.go;\nobjectProperties and deviceObjects in scan.go) following the existing\nreadPropertyRequest/writePropertyRequest pattern, with zero behavior\nchange. Add five tests covering: 22-bit DeviceInstance sort/ordering\n(guards the 16->22-bit PR #2 fix), the no-devices-found error path,\nduration forwarding from the CLI context, whois-error propagation\nthrough Scan, and end-to-end object/property collection with JSON\noutput assertions.",
"is_bot": false,
"headline": "Add test coverage for whois.go and scan.go via seams",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:24:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36b5136b3a5c3cecd41070e2e885091a064890cb",
"body": "Locks in handleWhoIs range filtering (out-of-range, exact boundary,\nabove-range, and unlimited Who-Is) and the modelError error-class/code\nmapping (unknown object/property, non-array property, invalid array\nindex via Priority_Array, and value-out-of-range on WriteProperty)\nagainst real encoded wire payloads, plus a direct unit test for the\ndefault and two previously-unasserted modelError branches.",
"is_bot": false,
"headline": "Add assertion tests for Who-Is filtering and modelError mapping",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1527f9fbd877ee60f26ae1319f40e31fc533b0c0",
"body": "Locks in Property.Read array-index guards (non-array rejection, out-of-range\nindex, BacnetArrayAll escape hatch), Network.AddDevice guards (nil device,\nout-of-range id, duplicate id), applyScenarioDefaults defaulting (version,\nnetwork mode auto-selection, port inheritance, vendor/model/protocol\nrevision), objectTypeNumber normalization/rejection, and\nnormalizePresentValue's numeric-analog validation end-to-end through\nDecodeScenario.",
"is_bot": false,
"headline": "Add assertion tests for simulator model and scenario error branches",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:11:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59181ace80e47d87dd936797bbeb18adc0c03555",
"body": "…hesis\n\nProperty.PriorityArray() was dead code. Wire it into Device.ReadProperty:\nwhen a commandable object's Present_Value is read and identifier 87 isn't\nin the Properties map, synthesize a transient 16-slot array Property from\nthe live per-priority slots (unset slots as NULL) and reuse Property.R\n[…]\nndable objects so it isn't invisible to ReadPropertyMultiple.\n\nNo stored Property for 87 is kept (would go stale after writes) and\nRelinquish_Default (104) is intentionally not exposed - out of scope.",
"is_bot": false,
"headline": "Expose Priority_Array (87) for commandable objects via read-time synt…",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:05:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f30b3105121db1ad0460ec27eef55ce639701a79",
"body": "Errors from conn.ReadFromUDP() other than timeouts previously killed the\nreceive goroutine permanently, leaving the server looking healthy while no\nlonger receiving datagrams. Treat non-timeout errors as transient by\ndefault (report and continue); only exit on shutdown/cancellation or a\n\"use of clos\n[…]\nmpare against).\n\nNarrows receive()'s conn parameter to a new udpReader interface (just\nReadFromUDP) so the error-handling paths can be exercised with a scripted\nreader in tests, without a real socket.",
"is_bot": false,
"headline": "Survive transient UDP read errors in receive()",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:57:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6eff307c24d1fc133239753844d48e9606bf5be8",
"body": "server_generic.go (the darwin/windows path for the legacy bacnet.Server\nAPI) created its two sockets with plain net.ListenUDP, so broadcast\nWho-Is/I-Am sends failed there unlike the linux/freebsd path\n(server_posix.go) and the transport package's udp_unix.go/udp_windows.go,\nboth of which set SO_BROA\n[…]\n ListenContext now calls listenBroadcastUDP for both\nthe broadcast and unicast sockets. Add server_generic_listen_unix_test.go\nverifying SO_BROADCAST reads back set, compiled by darwin/windows go vet.",
"is_bot": false,
"headline": "Set SO_REUSEADDR/SO_BROADCAST on generic bacnet.Server listen path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:51:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c2489c718bcb99130ef30c190b5ce2a369e0716",
"body": "The seed scenario field was parsed but never read anywhere, and the\nsimulator has no randomness (no math/rand import in any non-vendor\nfile). Its presence in the shipped example misleadingly implied\nseedable behavior. Remove the field, the example line, and the test\nfixture line, and lock the removal in with a strict-decoding\nregression test asserting that a scenario with a seed field is\nrejected as an unknown field.",
"is_bot": false,
"headline": "Remove dead Scenario.Seed field",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f2654c53f067f23d25a97c1d407941dc6d938df",
"body": "TestDecodeScenarioRejectsOverflowingPresentValue used tab characters\nto indent three fixture lines, which YAML rejects as a syntax error\nbefore DecodeScenario ever reaches the intended uint32-overflow\nvalidation. Replace the tabs with spaces so the fixture parses, and\npin the error message assertion to the \"exceeds the unsigned 32-bit\nrange\" substring so a regression to invalid YAML (or any unrelated\nerror) fails the test instead of passing for the wrong reason.",
"is_bot": false,
"headline": "Fix tab-indented YAML fixture in overflow test",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb3bb3ec915905b246e4e0b4c371a9658a65d081",
"body": "The test job's Test step invoked go test without -race, so the CI\nnever actually exercised the race detector despite the job claiming\nto. CGO defaults to 1 on ubuntu-latest with no override, so -race\nworks out of the box. cross-build job is untouched (CGO_ENABLED: 0,\nbuild-only, no tests).",
"is_bot": false,
"headline": "ci: run tests with -race in validate workflow",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47f694badff1fad21b4e00e8ff22ba519ebd7d8",
"body": null,
"is_bot": false,
"headline": "Update GitHub Actions runtimes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T03:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f79f9b71339bdb00edf1c72b044cc98f8a05ff96",
"body": null,
"is_bot": false,
"headline": "Prepare v2 release automation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T03:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cba5aebe4dcfc145d89ed44203a48139a374985d",
"body": null,
"is_bot": false,
"headline": "Add MIT License to the project",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T02:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "138e59390359c90aeac313307be1edc17d5db324",
"body": "Refresh BACnet SDK and add simulator",
"is_bot": false,
"headline": "Merge pull request #2 from zyra/refresh",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T02:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1620ab22e0bea7ece122ff7ce86d2f929efdb4e9",
"body": null,
"is_bot": false,
"headline": "Tighten protocol and simulator validation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5dad056bdc69e1ee6178f26e510aaa2ceff7da1",
"body": null,
"is_bot": false,
"headline": "Accept optional COV subscription fields",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a030cac27d16163ce0cb815838f5cceb381c1ea",
"body": null,
"is_bot": false,
"headline": "Support zero COV process identifiers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43bfd49985e43740024aa18d9740d6e737d8ef0",
"body": null,
"is_bot": false,
"headline": "Tighten simulator edge cases",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cac58f5e9b2d1afa40f8a2d55a6494876eb9a7c8",
"body": null,
"is_bot": false,
"headline": "Reject trailing scenario data",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b8b4e2f6cdcc27b66fafdac4078d3a0e58d07a",
"body": null,
"is_bot": false,
"headline": "Preserve COV API compatibility",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "882d29aa6e677b1e821358c588871e1e3e199c73",
"body": null,
"is_bot": false,
"headline": "Reset pooled device state",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:33:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b50782be42e49fbdd997e5760a903bc7400774f5",
"body": null,
"is_bot": false,
"headline": "Add BACnet network simulator",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cde9562fdadb26ed68df7ebf59b277ecb3f7892",
"body": null,
"is_bot": false,
"headline": "Support simulator UDP broadcasts",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8743a64efc5c35f172392b8cb53df818e523d119",
"body": null,
"is_bot": false,
"headline": "Add BACnet responder transport",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:22:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "577283c5dd33d8f902cabc9835cc794323659402",
"body": null,
"is_bot": false,
"headline": "Stabilize BACnet protocol lifecycle",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:22:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c4525235230b1299920224621917e87c78ea6bc",
"body": null,
"is_bot": false,
"headline": "Harden BACnet wire codecs",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:04:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3859a8b5a2e61bb3a4f2120843f5b7fe320ea2c4",
"body": null,
"is_bot": false,
"headline": "Restore project validation baseline",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be4803a55cec577f8517192ce5043f23cdab53f6",
"body": null,
"is_bot": false,
"headline": "update bacnet",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2021-03-13T02:56:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c14babdc034143fab54d53398a51621ad58f990",
"body": null,
"is_bot": false,
"headline": "export internal functions",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-12-08T07:59:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75e6428cd09c2ae377c63e31986fb760b472bfc9",
"body": null,
"is_bot": false,
"headline": "chore: build for mips archs",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-03-10T15:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b2bffc88273664df0050e85e16ba6e621c36ce",
"body": null,
"is_bot": false,
"headline": "update dependencies",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-01-16T18:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "576d0d0b28097e4396579248cf9288e6ce367db2",
"body": null,
"is_bot": false,
"headline": "await build steps",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fea87fef4f781b975ee917c5696e02a0e4f2542",
"body": null,
"is_bot": false,
"headline": "output binaries to shared volume",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f486c1f51d5c3ebdf2958da466da82aab04b085b",
"body": null,
"is_bot": false,
"headline": "update secret name",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd1b3f135b3f61f12af8212e7af5c6bf8b02171e",
"body": null,
"is_bot": false,
"headline": "gh release",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce63dd9f3f19cc27cb922461b9dbc5274537086d",
"body": null,
"is_bot": false,
"headline": "fix mount paths",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:41:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f13f3f06894762518532853ff40275770c8376b",
"body": null,
"is_bot": false,
"headline": "add missing images",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:40:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abd1ce61a48e225d0da802b39f15b4af5f13f865",
"body": null,
"is_bot": false,
"headline": "build in docker and release to GH",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:39:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e10f12c5e9167212e712a64b1f3ae448354a29",
"body": null,
"is_bot": false,
"headline": "delete Jenkinsfile",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dbcaae2f89424bcbf5126038491b5fcbea0bce0",
"body": null,
"is_bot": false,
"headline": "test config",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:13:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e08d483f855f867c6b62ce416476c65430957a4",
"body": null,
"is_bot": false,
"headline": "depend on other pipelines",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:11:31Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 86,
"latest_release_at": "2026-07-18T21:14:47Z",
"latest_release_tag": "v2.2.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 1,
"days_since_latest_release": 3,
"mean_days_between_releases": 273.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/zyra/gobac/v2",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/zyra/gobac/v2",
"is_deprecated": false,
"latest_version": "v2.2.0",
"repository_url": "https://github.com/zyra/gobac",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T21:13:05Z",
"latest_version_yanked": null,
"days_since_latest_publish": 3
},
{
"name": "github.com/zyra/gobac",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/zyra/gobac",
"is_deprecated": false,
"latest_version": "v1.5.9",
"repository_url": "https://github.com/zyra/gobac",
"versions_count": 20,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2021-03-13T02:56:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1957
}
]
},
"popularity": {
"forks": 0,
"stars": 1,
"watchers": 2,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2019-10-09",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_stars": 1
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"gui/go.mod",
"vendor/github.com/urfave/cli/go.mod",
"vendor/gopkg.in/yaml.v2/go.mod"
],
"largest_source_bytes": 43938,
"source_files_sampled": 170,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"gui/go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/urfave/cli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20190405154228-4b34438f7a67"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.2"
},
{
"name": "fyne.io/fyne/v2",
"manifest": "gui/go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.0"
},
{
"name": "github.com/zyra/gobac/v2",
"manifest": "gui/go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 9,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ihadeed",
"commits": 184,
"avatar_url": "https://avatars.githubusercontent.com/u/13794420?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"gui-validate.yml",
"release.yml",
"validate.yml"
],
"has_docs_dir": true,
"linter_configs": [
".flake8"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/7 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "60082a53f852711389dc53c94011bfe23d3d4cda",
"ran_at": "2026-07-22T04:33:18Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T21:35:51Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-18T21:27:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/zyra/gobac",
"host": "github.com",
"name": "gobac",
"owner": "zyra"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 40,
"vitality": 69,
"community": 24,
"governance": 61,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 86,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "86 commits in the last year",
"points": 17.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 86
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v2.2.0",
"releases_from_tags": false,
"days_since_latest_release": 3,
"mean_days_between_releases": 273.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~273.4 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 273.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 3,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 3 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 3
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 1,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 9,
"open_issues": 0,
"closed_issues": 1,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "9/9 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 9,
"decided": 9
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"followers": 3,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "zyra",
"public_repos": 20,
"account_age_days": 3809
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of zyra",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "zyra"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "20 public repos, account ~10 yr old",
"points": 21.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 20
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/zyra/gobac/v2",
"github.com/zyra/gobac"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 3
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 3 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 3
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "20 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 20
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".flake8",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.54,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod",
"gui/go.mod",
"vendor/github.com/urfave/cli/go.mod",
"vendor/gopkg.in/yaml.v2/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".flake8",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 43938,
"source_files_sampled": 170,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/170 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 170,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T04:33:33.735936Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/z/zyra/gobac.svg",
"full_name": "zyra/gobac",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.