Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 22:59 UTC
JuliaLang / NetworkOptions.jl
JuliaLang/NetworkOptions.jl holds a health index of 51 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (66/100) and lowest on AI Readiness (26/100). It was last updated 206 days ago. A single contributor accounts for most of its recent work.
51
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
51
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
JuliaLangOrganization
1,974 followers64 public repossince Apr 2011
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
29
Development activity
9Critical
How it's scored
| 3.6/36 | Push recency — last push 206 days ago |
| 1.4/36 | Commit cadence — 2/52 weeks with commits |
| 4.3/18 | Commit volume — 2 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 2 |
| human_commit_share | 0.981 |
| days_since_last_push | 206 |
| active_weeks_last_year | 2 |
Release discipline
60Moderate
How it's scored
| 27/27 | Ships releases — 4 releases published |
| 0/36 | Release recency — latest release 2,054 days ago |
| 27/27 | Release cadence — a release every ~10 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 4 |
| latest_release_tag | v1.2.0 |
| releases_from_tags | no |
| days_since_latest_release | 2,054 |
| mean_days_between_releases | 10 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
52
Popularity & adoption
34At risk
How it's scored
| 17.5/60 | Stars — 13 stars |
| 10.5/25 | Forks — 19 forks |
| 6.4/15 | Watchers — 15 watchers |
Inputs used
| forks | 19 |
| stars | 13 |
| watchers | 15 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
73Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 7.2/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | yes |
| has_code_of_conduct | yes |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
66
Maintainer resilience (bus factor)
42At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 9.7/22.5 | Commit distribution — top contributor authored 57% of commits |
| 13.5/13.5 | Contributor breadth — 17 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 21 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 17 |
| top_contributor_share | 0.569 |
How it's scored
| 40.9/46.8 | Issue resolution — 88% of issues closed |
| 35/38.3 | PR acceptance — 32/35 decided PRs merged |
| 7.5/15 | OpenSSF Scorecard: Code-Review — Found 15/27 approved changesets -- score normalized to 5 |
Inputs used
| merged_prs | 32 |
| open_issues | 1 |
| closed_issues | 7 |
| issue_closed_ratio | 0.875 |
| closed_unmerged_prs | 3 |
Ownership & stewardship
79Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 23.7/25 | Owner reach — 1,974 followers of JuliaLang |
| 25/25 | Track record — 64 public repos, account ~15 yr old |
Inputs used
| followers | 1,974 |
| owner_type | Organization |
| is_verified | — |
| owner_login | JuliaLang |
| public_repos | 64 |
| account_age_days | 5,575 |
Engineering Quality
Are baseline engineering and documentation practices in place?
55
Engineering practices
48At risk
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 2 out of 26 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
51
Security posture
51Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 0/2.5 | CI-Tests — 2 out of 26 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 15/27 approved changesets -- score normalized to 5 |
| 2.5/2.5 | Contributors — project has 21 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.1 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
26
Agent context & guidance
34At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 34.5/40 | Legible commit history — 33 of 51 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.647 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 52 |
| 8/8 | Automated maintenance — 1 of the last 52 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.019 |
Code legibility for models
1Critical
How it's scored
| 0/45 | Type-checkable code — Julia without a type-check config |
| 0/55 | Manageable file sizes — no source files detected |
Inputs used
| primary_language | Julia |
| largest_source_bytes | — |
| source_files_sampled | 0 |
| oversized_source_files | 0 |
Excluded from scoring (no data or not applicable): Manageable file sizes. Remaining weights renormalized.
Key facts
13GitHub stars
17contributors
2commits, last 12 months
206days since last push
4releases
1bus factor
1open issues
—package ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 19 ⇿
0Stars
19Forks
2Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 1
Each point covers 5 days.
OpenSSF Scorecard 5.1 / 10
5.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 0 | CI-Tests | 2 out of 26 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 15/27 approved changesets -- score normalized to 5 |
| 10 | Contributors | project has 21 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 81,
"has_wiki": true,
"homepage": null,
"languages": {
"Julia": 31984
},
"pushed_at": "2026-01-01T11:11:33Z",
"created_at": "2020-11-09T15:33:59Z",
"owner_type": "Organization",
"updated_at": "2025-11-17T07:26:56Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Julia",
"significant_languages": [
"Julia"
]
},
"owner": {
"blog": "https://julialang.org",
"name": "JuliaLang",
"type": "Organization",
"login": "JuliaLang",
"company": null,
"location": null,
"followers": 1974,
"avatar_url": "https://avatars.githubusercontent.com/u/743164?v=4",
"created_at": "2011-04-21T06:33:51Z",
"is_verified": null,
"public_repos": 64,
"account_age_days": 5575
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2020-12-09T23:35:53Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2020-11-12T17:49:26Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2020-11-11T23:36:35Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2020-11-09T22:19:35Z"
}
],
"recent_commits": [
{
"oid": "7034c55dbf52ee959cabd63bcbe656df658f5bda",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v5)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 4 to 5 (#44)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-11-17T07:26:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "46e14ef20739c8011b105c339146062cd0e2938c",
"body": "Fix JET-reported error in `ca_roots_path()`",
"is_bot": false,
"headline": "Merge pull request #43 from lgoettgens/lg/JET-ca_roots-path_convert",
"author_name": "Lars Göttgens",
"author_login": "lgoettgens",
"committed_at": "2025-08-20T13:24:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "532992fcc0f1d02df48374969cbae37e34c01360",
"body": "remove using `__init__` by either using `OncePerProcess` or recomputing",
"is_bot": false,
"headline": "Merge pull request #39 from JuliaLang/kc/init",
"author_name": "Kristoffer Carlsson",
"author_login": "KristofferC",
"committed_at": "2025-06-26T02:55:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3169a7cf7e0a7004ee81b2cab1d28998d2266c49",
"body": "Search SSL_CERT_FILE before SSL_CERT_DIR",
"is_bot": false,
"headline": "Merge pull request #37 from visr/ssl_cert_dir_last",
"author_name": "Avik Sengupta",
"author_login": "aviks",
"committed_at": "2025-02-25T10:54:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c93b06695798afdc3e201c5b08392c7696e2843",
"body": null,
"is_bot": false,
"headline": "[CI] Update GitHub Actions setup (#38)",
"author_name": "Mosè Giordano",
"author_login": "giordano",
"committed_at": "2025-01-04T12:40:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c090626d3feee6d6a5c476346d22d6147c9c6d2d",
"body": null,
"is_bot": false,
"headline": "Enable OpenSSL certificates (#36)",
"author_name": "Erik Schnetter",
"author_login": "eschnett",
"committed_at": "2025-01-04T12:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65eacbdb626d1b68128bcfc8db5bb49600038695",
"body": "In a way that would fail with the old precedence.",
"is_bot": false,
"headline": "More explicitly test precedence",
"author_name": "Martijn Visser",
"author_login": "visr",
"committed_at": "2025-01-02T10:24:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0a877c09013439ded1dea979ccfd477dcf993c",
"body": "This aligns better with the behavior of openssl.\nSee https://github.com/JuliaLang/Downloads.jl/issues/244#issuecomment-2543363078",
"is_bot": false,
"headline": "Search SSL_CERT_FILE before SSL_CERT_DIR",
"author_name": "Martijn Visser",
"author_login": "visr",
"committed_at": "2024-12-14T22:35:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8eec5cb0acec4591e6db3c017f7499426cd8e352",
"body": "Co-authored-by: Lilith Hafner <Lilith.Hafner@gmail.com>",
"is_bot": false,
"headline": "Hardcode doc edit backlink (#32)",
"author_name": "Lilith Orion Hafner",
"author_login": "LilithHafner",
"committed_at": "2024-02-20T15:22:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd33455cf3c77f2f87bf64167b64611dc5ff128",
"body": "…#35)",
"is_bot": false,
"headline": "also reset SYSTEM_CA_ROOTS and ENV_HOST_PATTERN_CACHE from __init__ (…",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2024-02-20T14:46:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aab83e5dd900c874826d430e25158dff43559d78",
"body": "…recompilation (#31)",
"is_bot": false,
"headline": "Reset BUNDLED_KNOWN_HOSTS_FILE in case we serialized a value due to p…",
"author_name": "Valentin Churavy",
"author_login": "vchuravy",
"committed_at": "2023-09-07T22:11:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "976e51a48abb4e09356f1979c3cde8fbc0852e2e",
"body": null,
"is_bot": false,
"headline": "Use human-readable title in the docs (#30)",
"author_name": "Waldir Pimenta",
"author_login": "waldyrious",
"committed_at": "2023-07-12T15:49:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "895aee96a81baf9c90458d85a10ac7f8e57f01ad",
"body": "See https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/.",
"is_bot": false,
"headline": "Update ssh-rsa key for github.com (#29)",
"author_name": "Fredrik Ekre",
"author_login": "fredrikekre",
"committed_at": "2023-03-24T15:36:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db83efd53ace041bdbad610e9b8891f512ef042c",
"body": null,
"is_bot": false,
"headline": "fix an issue found by JET (#28)",
"author_name": "Kristoffer Carlsson",
"author_login": "KristofferC",
"committed_at": "2023-02-23T12:56:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7bbeb66f05fc651adb12758b650e8630a998fbd",
"body": null,
"is_bot": false,
"headline": "convert tabs to spaces",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2022-11-09T18:55:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "791fa05928f03b7f18ff5ba0d6c7fbf6c6c25e78",
"body": null,
"is_bot": false,
"headline": "Avoid allocating an extra string in `verify_host` (#26)",
"author_name": "Nick Robinson",
"author_login": "nickrobinson251",
"committed_at": "2022-11-01T14:47:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c06cb20362f39d97e3ae450ee050ff7b5699f950",
"body": null,
"is_bot": false,
"headline": "add eliptic curve keys for github.com (#27)",
"author_name": "Oscar Smith",
"author_login": "oscardssmith",
"committed_at": "2022-10-31T15:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ce1e104eeddcf9c7ccb387dc4811ddb1c750cc2",
"body": "Fix #24. PR https://github.com/JuliaLang/NetworkOptions.jl/pull/18\r\nchanged the logic for searching for CA root cert files to skip files\r\ncontaining OpenSSL-only \"BEGIN TRUSTED CERTIFICATE\" certificates since\r\nMbedTLS cannot use these certificates. This was a bit too aggressive:\r\nregular certs and O\n[…]\n file that has some regular cert in it, even if it also\r\nhas OpenSSL-only certs. We should only emit a warning if we (1) found no\r\nfiles with regular certs and (2) found files with OpenSSL-only certs.",
"is_bot": false,
"headline": "ca_roots: use files mixing regular and OpenSSL-only certs (#25)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2022-09-21T13:31:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d3df6445bbca0556a7a9f2abb0e48ba7d774f5a",
"body": null,
"is_bot": false,
"headline": "CI: auto-cancel outdated PR builds (#23)",
"author_name": "Dilum Aluthge",
"author_login": "DilumAluthge",
"committed_at": "2022-02-16T02:41:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be3d406bf9c99fe3c91805d2d40bf4deea24a1b5",
"body": "…anged\" view of a pull request. (#22)",
"is_bot": false,
"headline": "[CI] Codecov: disable the inline Codecov annotations in the \"Files Ch…",
"author_name": "Dilum Aluthge",
"author_login": "DilumAluthge",
"committed_at": "2022-02-16T01:02:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01e6ec17aa4ef74b4a0ea19c193dacf8d2cfc353",
"body": "* [ci] remove travis-ci\r\n* [ci] add github ci badge",
"is_bot": false,
"headline": "[ci] remove travis-ci + add github ci badge (#20)",
"author_name": "woclass",
"author_login": "inkydragon",
"committed_at": "2021-10-21T15:46:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3501634739bd9108a018177ef478d79e0e8ef0c4",
"body": null,
"is_bot": false,
"headline": "[doc] add index file (#19)",
"author_name": "woclass",
"author_login": "inkydragon",
"committed_at": "2021-10-21T15:45:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42a0b5fcb7edb8ed5b0ae699f15ca6aedc0098ca",
"body": "Certificate file with `BEGIN TRUSTED CERTIFICATE` in them are specific\r\nto OpenSSL and cannot be used by MbedTLS. This adds a few more places to\r\nlook for these files and logic to skip any files that are OpenSSL-only.",
"is_bot": false,
"headline": "ca_roots: skip OpenSSL-specific cert files (#18)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2021-08-06T20:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cea813ca841c400627b6cf4d4f4ec2599965ab6",
"body": null,
"is_bot": false,
"headline": "CI: Standardize the workflow for testing and changing the UUID (#17)",
"author_name": "Dilum Aluthge",
"author_login": "DilumAluthge",
"committed_at": "2021-06-07T01:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80246e6145d3e01176dcb37f4f22d63f1b8ba05a",
"body": null,
"is_bot": false,
"headline": "README.md: fix typos (#14)",
"author_name": "Max Horn",
"author_login": "fingolfin",
"committed_at": "2021-01-05T17:52:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a251de1e1c8ce4edc351d0f05233ba7fe7d2c27a",
"body": "We should return an empty file if there are no known hosts files\r\nas this will cause no hosts to be considered known, which means\r\nwe're defaulting secure here.",
"is_bot": false,
"headline": "ssh_known_hosts_file: fix bug with empty list (fix #11) (#13)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-12-09T23:15:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4a27718ca552809785a86a3ce0388b2dcdb7a0d",
"body": "…#12)",
"is_bot": false,
"headline": "ca_roots: empty JULIA_SSL_CA_ROOTS_PATH ignores SSL_CERT_{FILE,DIR} (…",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-12-09T23:10:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af6efadd852b301c4e5acd78efea3b163109f336",
"body": null,
"is_bot": false,
"headline": "bump version to v1.2.0",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-12-09T22:26:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d8a45c52c37e63ffec6774e1a033c922de8119b",
"body": null,
"is_bot": false,
"headline": "bundled known hosts: generate file on the fly (#10)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-12-03T16:47:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32fe92646b25632fa5a69b51882c1f6092b05320",
"body": null,
"is_bot": false,
"headline": "ssh options: add various options for SSH connections (#9)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-12-01T04:59:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462628a2790a1d1b531b9e29517887a39462a524",
"body": "JULIA_ALWAYS_VERIFY_HOSTS: pattern for hosts to always verify",
"is_bot": false,
"headline": "Merge pull request #8 from JuliaLang/sk/always-verify-hosts",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-29T18:34:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00a0800a8f7fcb1bc0a0a58937ef8fc95308e28a",
"body": "This seems useful for situations where only external connections are\ntransparently proxied and internal connections should behave normally.",
"is_bot": false,
"headline": "JULIA_ALWAYS_VERIFY_HOSTS: pattern for hosts to always verify",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-29T18:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6f3b7b6b93902863e09fa93aaa2b3be1f17f6d3",
"body": "Copied from https://github.com/JuliaLang/Downloads.jl/pull/72",
"is_bot": false,
"headline": "Set up GitHub Actions for testing",
"author_name": "Dilum Aluthge",
"author_login": "DilumAluthge",
"committed_at": "2020-11-29T18:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7c9bb8627b2e6d62b32fe14faba7bd9d46b4b16",
"body": "These are respected by OpenSSL by default and are commonly set to\r\ninstruct it where to find CA root certificates. The LibGit2 library\r\nalready respects these, so picking them up here allows us to switch\r\nLibGit2 to using NetworkOptions for finding CA root certificates.",
"is_bot": false,
"headline": "ca_roots: respect SSL_CERT_{DIR,FILE} env vars (#7)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-18T22:34:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fa4a3c2d2035e73fa79b43d7bc2e64c33389b3f",
"body": null,
"is_bot": false,
"headline": "tests: refactor environment variable handling (save, clear, reset) (#6)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-18T21:51:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e61363297db8cd87cd8e4fe087e299dd0f0b3551",
"body": "Fixes https://github.com/JuliaLang/julia/issues/38429",
"is_bot": false,
"headline": "ca_roots: bundled_ca_roots cannot be a constant (#4)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-13T13:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b248a8c2f1f5bb80467ab222b21469079cc9ad3",
"body": null,
"is_bot": false,
"headline": "bump version to v1.1.1",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-12T17:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbb05b2b27e5696c176e897afbddd005c6544dca",
"body": "disable_logging() manipulates a global setting so it may interfere with\r\nany other concurrent tests. Instead, use the @test_logs macro to\r\ncapture logs.\r\n\r\nI've also chosen to specifically test that a warning is produced here\r\n(rather than just use @test_logs min_level=Error which would be more\r\nlike without_warnings()).",
"is_bot": false,
"headline": "Improve warning testing for bad patterns (#3)",
"author_name": "Chris Foster",
"author_login": "c42f",
"committed_at": "2020-11-12T14:08:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "738dc1e6ff70e6d6f0210e4c3470283220e96260",
"body": null,
"is_bot": false,
"headline": "bump version to v1.1.0",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-11T23:31:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c71624bf2ec266afd88ae5d8758b1a143ed9cab1",
"body": "ca_roots: add API for finding CA root certificate paths",
"is_bot": false,
"headline": "Merge pull request #2 from JuliaLang/sk/ca_roots_path",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-11T17:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50c027a95f109ae01281d26493379fe11354fb8f",
"body": null,
"is_bot": false,
"headline": "ca_roots: add API for finding CA root certificates",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-11T17:24:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "926c2e533787167d073f068e88f1c2c461700011",
"body": null,
"is_bot": false,
"headline": "move verify_host into separate file",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-11T13:51:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45d64a32df020e0b778a5b253ef9e2f870ffbf1e",
"body": null,
"is_bot": false,
"headline": "rewrite README & verify_host docstring",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-06T21:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee14fcd5d5f0a2f0bbe2bdb7cfd4c12add3825e",
"body": null,
"is_bot": false,
"headline": "rename package: NoVerifyHosts => NetworkOptions (#5)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-06T21:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fc547f4b401bdadaff1be6f40de7a53214b2aac",
"body": null,
"is_bot": false,
"headline": "bump version to v1.0.0",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-05T08:56:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cbba4f1014faf591a051bcdf3c846715653d3fd",
"body": null,
"is_bot": false,
"headline": "remove .vscode (accidentally committed)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-05T00:00:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65470419cecdddf6cb5d156d3cbacb506d14c617",
"body": null,
"is_bot": false,
"headline": "enable codecov (#3)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-04T23:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "951318dc26b9f895ebeda525057b24d2a9bde18d",
"body": "This allows graceful addition of new syntaxes: if someone starts\r\nusing a new syntax like `host[0-9].company.com` and the uses an\r\nolder version of this package, the rest of the patterns will work\r\nand a warning will only be emitted for the unrecognized pattern,\r\nallowing the user to diagnose the problem if verification causes\r\nissues for their application.",
"is_bot": false,
"headline": "skip bad patterns, don't invalidate entire pattern list (#2)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-04T23:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a176520095f932a9abd0243b38ade6e304e36557",
"body": null,
"is_bot": false,
"headline": "add .travis.yml file (copied from Downloads.jl) (#1)",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-04T22:04:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ae72acf92015310bdffbd26bac244b8dc2483f6",
"body": null,
"is_bot": false,
"headline": "NoVerifyHosts: small utility package to decide which hosts to verify",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-04T21:46:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e09b27c383f5bd9499d2aa807cf327ab1d859f5f",
"body": "PkgTemplates version: 0.7.13",
"is_bot": false,
"headline": "Files generated by PkgTemplates",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-04T13:17:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80aeb31cb32bff54b55f2bd52cd368e1f6f60c79",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Stefan Karpinski",
"author_login": "StefanKarpinski",
"committed_at": "2020-11-04T13:17:05Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 4,
"commits_last_year": 2,
"latest_release_at": "2020-12-09T23:35:53Z",
"latest_release_tag": "v1.2.0",
"releases_from_tags": false,
"days_since_last_push": 206,
"active_weeks_last_year": 2,
"days_since_latest_release": 2054,
"mean_days_between_releases": 10
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 19,
"stars": 13,
"watchers": 15,
"fork_history": {
"days": [
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2021-01-02",
"count": 1
},
{
"date": "2021-04-26",
"count": 3
},
{
"date": "2021-04-29",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2022-10-24",
"count": 1
},
{
"date": "2022-10-28",
"count": 1
},
{
"date": "2023-03-24",
"count": 1
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-09-18",
"count": 1
},
{
"date": "2023-10-18",
"count": 1
},
{
"date": "2024-11-29",
"count": 1
},
{
"date": "2024-12-14",
"count": 1
},
{
"date": "2025-06-26",
"count": 1
},
{
"date": "2025-08-20",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2026-02-15",
"count": 1
}
],
"complete": true,
"collected": 19,
"total_forks": 19
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": null,
"source_files_sampled": 0,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 32,
"open_issues": 1,
"closed_ratio": 0.875,
"closed_issues": 7,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "StefanKarpinski",
"commits": 29,
"avatar_url": "https://avatars.githubusercontent.com/u/153596?v=4"
},
{
"type": "User",
"login": "DilumAluthge",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5619885?v=4"
},
{
"type": "User",
"login": "KristofferC",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1282691?v=4"
},
{
"type": "User",
"login": "visr",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/4471859?v=4"
},
{
"type": "User",
"login": "inkydragon",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/5158738?v=4"
},
{
"type": "User",
"login": "aviks",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/378918?v=4"
},
{
"type": "User",
"login": "c42f",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/601473?v=4"
},
{
"type": "User",
"login": "eschnett",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/213514?v=4"
},
{
"type": "User",
"login": "fredrikekre",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/11698744?v=4"
},
{
"type": "User",
"login": "lgoettgens",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/26390525?v=4"
}
],
"contributors_sampled": 17,
"top_contributor_share": 0.569
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"CompatHelper.yml",
"TagBot.yml",
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "2 out of 26 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 15/27 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 21 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "7034c55dbf52ee959cabd63bcbe656df658f5bda",
"ran_at": "2026-07-26T22:59:00Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-03-01T11:15:08Z",
"oldest_open_prs": [
{
"number": 42,
"created_at": "2025-06-26T03:20:04Z",
"last_comment_at": "2025-06-26T03:22:31Z",
"last_comment_author": "codecov"
},
{
"number": 45,
"created_at": "2026-01-01T11:11:34Z",
"last_comment_at": "2026-01-01T11:14:59Z",
"last_comment_author": "codecov"
}
],
"last_merged_pr_at": "2025-11-17T07:26:52Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 41,
"created_at": "2025-06-23T21:36:20Z",
"last_comment_at": "2025-06-26T02:54:16Z",
"last_comment_author": "Keno"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/JuliaLang/NetworkOptions.jl",
"host": "github.com",
"name": "NetworkOptions.jl",
"owner": "JuliaLang"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"security": 51,
"vitality": 29,
"community": 52,
"governance": 66,
"engineering": 55
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 29,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 9,
"inputs": {
"commits_last_year": 2,
"human_commit_share": 0.981,
"days_since_last_push": 206,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 206 days ago",
"points": 3.6,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 206
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "2 commits in the last year",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 2
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"releases_count": 4,
"latest_release_tag": "v1.2.0",
"releases_from_tags": false,
"days_since_latest_release": 2054,
"mean_days_between_releases": 10
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "4 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 4
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2054 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2054
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~10 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 10
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [],
"signals": [
"release_stall",
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 2,
"unanswered_open_issues": 1,
"days_since_last_merged_pr": 251,
"days_since_last_human_commit": 340,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 340 days, with nothing left unanswered",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 340
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 52,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 19,
"stars": 13,
"watchers": 15,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "13 stars",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 13
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "19 forks",
"points": 10.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 19
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "15 watchers",
"points": 6.4,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 15
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 7.2,
"status": "met",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 66,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 17,
"top_contributor_share": 0.569
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 57% of commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 57
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "17 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 17
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 21 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"merged_prs": 32,
"open_issues": 1,
"closed_issues": 7,
"issue_closed_ratio": 0.875,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "88% of issues closed",
"points": 40.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 88
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "32/35 decided PRs merged",
"points": 35,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 32,
"decided": 35
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 15/27 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"followers": 1974,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "JuliaLang",
"public_repos": 64,
"account_age_days": 5575
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,974 followers of JuliaLang",
"points": 23.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1974,
"login": "JuliaLang"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "64 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 64
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 55,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 26 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 26 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 15/27 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 21 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "critical",
"name": "AI Readiness",
"value": 26,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.647,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "33 of 51 human commits state their intent (structured subject or explanatory body)",
"points": 34.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 33,
"sampled": 51
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.019
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 52",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 52
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 52 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 52
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "critical",
"name": "Code legibility for models",
"note": "Excluded from scoring (no data or not applicable): Manageable file sizes. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"manageable_file_sizes"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"primary_language": "Julia",
"largest_source_bytes": null,
"source_files_sampled": 0,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Julia without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Julia"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "no source files detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_source_files",
"params": {}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T22:59:21.276973Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/JuliaLang/NetworkOptions.jl.svg",
"full_name": "JuliaLang/NetworkOptions.jl",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.