Public recordCritical
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 19:51 UTC
KUAILESHANGWEI / s-ui
An advanced Web Panel • Built for SagerNet/Sing-Box
KUAILESHANGWEI/s-ui holds a health index of 20 out of 100, placing it in the Critical band. It scores highest on Vitality (80/100) and lowest on Community & Adoption (12/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
20
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
20
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.
Ownership
KUAILESHANGWEIPersonal account
1 follower49 public repossince Jul 2023
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/KUAILESHANGWEI/s-ui | v1.5.4 | - | 13 | 67 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
80
Development activity
73Good
How it's scored
| 28.8/36 | Push recency — last push 8 days ago |
| 20.8/36 | Commit cadence — 30/52 weeks with commits |
| 18/18 | Commit volume — 181 commits in the last year |
| 5/10 | OpenSSF Scorecard: Maintained — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
Inputs used
| commits_last_year | 181 |
| human_commit_share | 0.86 |
| days_since_last_push | 8 |
| active_weeks_last_year | 30 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 7 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 27/27 | Release cadence — a release every ~9.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 7 |
| latest_release_tag | v1.5.4 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 9.8 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
12
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (GPL-3.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
39
Maintainer resilience (bus factor)
30At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 1/22.5 | Commit distribution — top contributor authored 96% of commits |
| 13.5/13.5 | Contributor breadth — 18 contributors |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 18 |
| top_contributor_share | 0.955 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
38At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 2.2/25 | Owner reach — 1 followers of KUAILESHANGWEI |
| 18.4/25 | Track record — 49 public repos, account ~3 yr old |
Inputs used
| followers | 1 |
| owner_type | User |
| is_verified | — |
| owner_login | KUAILESHANGWEI |
| public_repos | 49 |
| account_age_days | 1,097 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 67 days ago |
| 20/20 | Version history — 13 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/KUAILESHANGWEI/s-ui |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 67 |
Engineering Quality
Are baseline engineering and documentation practices in place?
45
Engineering practices
58Moderate
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 0/24 | Tests present |
| 16/16 | Linter config — .eslintrc.js |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | no |
| has_editorconfig | yes |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
25Critical
How it's scored
| 0/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://t.me/XrayUI |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://t.me/XrayUI |
| has_readme | no |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
17
Security posture
17Critical
Jurisdiction risk alert
High-risk jurisdiction exposure detected
1 top contributor profilesRussiaSecurity and overall rating: At risk ceiling
Based on self-published public profile locations. This governance signal does not determine nationality, citizenship, intent, sanctions status, or individual trustworthiness.
How jurisdiction exposure is assessedHow it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 3.8/7.5 | Maintained — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 48 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.4 |
| high_risk_jurisdiction_cap | 49 |
| high_risk_jurisdiction_multiplier | 50 |
| security_posture_after_multiplier | 17 |
| security_posture_before_jurisdiction | 34 |
Excluded from scoring (no data or not applicable): ci_tests, packaging. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier and gives Security posture an At risk ceiling of 49.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
51
Agent context & guidance
32At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 32.2/40 | Legible commit history — 52 of 86 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.605 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
53Moderate
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 0/22 | Automated tests |
| 11/11 | Lint / format config — .eslintrc.js |
| 11/11 | Static type checking — frontend/tsconfig.json |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 14 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | no |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | yes |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | frontend/tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.14 |
How it's scored
| 27/45 | Type-checkable code — Vue with type-check config (frontend/tsconfig.json) |
| 55/55 | Manageable file sizes — 0/105 source files over 60KB |
Inputs used
| primary_language | Vue |
| largest_source_bytes | 25,445 |
| source_files_sampled | 105 |
| oversized_source_files | 0 |
Key facts
0GitHub stars
18contributors
181commits, last 12 months
8days since last push
7releases
1bus factor
0open issues
Go, npmpackage ecosystems
Data collection warnings
- Community profile unavailable
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.4 / 10
3.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 5 | Maintained | 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 48 existing vulnerabilities detected |
Direct dependencies 30
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @mdi/font | 7.4.47 | frontend/package.json |
| npm | axios | ^1.16.1 | frontend/package.json |
| npm | chart.js | ^4.5.1 | frontend/package.json |
| npm | clipboard | ^2.0.11 | frontend/package.json |
| npm | core-js | ^3.49.0 | frontend/package.json |
| npm | moment | ^2.30.1 | frontend/package.json |
| npm | notivue | ^2.4.5 | frontend/package.json |
| npm | pinia | ^3.0.4 | frontend/package.json |
| npm | qrcode.vue | ^3.9.1 | frontend/package.json |
| npm | roboto-fontface | ^0.10.0 | frontend/package.json |
| npm | vue | ^3.5.34 | frontend/package.json |
| npm | vue-chartjs | ^5.3.3 | frontend/package.json |
| npm | vue-i18n | ^11.4.4 | frontend/package.json |
| npm | vue-router | ^5.0.7 | frontend/package.json |
| npm | vue3-persian-datetime-picker | ^1.2.2 | frontend/package.json |
| npm | vuetify | ^4.0.7 | frontend/package.json |
| npm | yaml | ^2.9.0 | frontend/package.json |
| Go | github.com/gin-contrib/gzip | v1.2.6 | go.mod |
| Go | github.com/gin-contrib/sessions | v1.1.0 | go.mod |
| Go | github.com/gin-gonic/gin | v1.12.0 | go.mod |
| Go | github.com/gofrs/uuid/v5 | v5.4.0 | go.mod |
| Go | github.com/op/go-logging | v0.0.0-20160315200505-970db520ece7 | go.mod |
| Go | github.com/robfig/cron/v3 | v3.0.1 | go.mod |
| Go | github.com/sagernet/sing | v0.8.10 | go.mod |
| Go | github.com/sagernet/sing-box | v1.13.12 | go.mod |
| Go | github.com/shirou/gopsutil/v4 | v4.26.4 | go.mod |
| Go | golang.zx2c4.com/wireguard/wgctrl | v0.0.0-20241231184526-a9ab2273dd10 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | gorm.io/driver/sqlite | v1.6.0 | go.mod |
| Go | gorm.io/gorm | v1.31.1 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 3034,
"has_wiki": true,
"homepage": "https://t.me/XrayUI",
"languages": {
"Go": 271931,
"Vue": 537565,
"HTML": 471,
"SCSS": 1312,
"Shell": 35453,
"Batchfile": 16941,
"Dockerfile": 1390,
"JavaScript": 240,
"PowerShell": 4269,
"TypeScript": 175537
},
"pushed_at": "2026-07-19T13:50:21Z",
"created_at": "2026-04-12T14:19:22Z",
"owner_type": "User",
"updated_at": "2026-05-21T16:11:19Z",
"description": "An advanced Web Panel • Built for SagerNet/Sing-Box",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-3.0",
"default_branch": "main",
"license_spdx_raw": "GPL-3.0",
"primary_language": "Vue",
"significant_languages": [
"Vue",
"Go",
"TypeScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "KUAILESHANGWEI",
"company": null,
"location": null,
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/140654396?v=4",
"created_at": "2023-07-26T19:45:06Z",
"is_verified": null,
"public_repos": 49,
"account_age_days": 1097
},
"license": {
"state": "standard",
"spdx_id": "GPL-3.0",
"raw_spdx": "GPL-3.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2026-07-19T13:50:21Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2026-07-04T19:34:26Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2026-07-03T04:06:00Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-06-30T01:17:52Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-06-28T01:22:47Z"
},
{
"tag": "external-assets",
"kind": "other",
"published_at": "2026-05-21T15:50:40Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2026-05-21T15:49:50Z"
}
],
"recent_commits": [
{
"oid": "e71daae71783a3203cc9188b6f55a6ff984c3a6b",
"body": null,
"is_bot": false,
"headline": "Use main branch raw URLs",
"author_name": "KUAILESHANG",
"author_login": null,
"committed_at": "2026-05-21T16:07:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "245da43d30f4b146bb44bfc128060cf077ca941f",
"body": null,
"is_bot": false,
"headline": "Localize repository mirrors and release assets",
"author_name": "KUAILESHANG",
"author_login": null,
"committed_at": "2026-05-21T16:06:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8c9292b7741cf66a0d55088ae2ec7e60bf37b10",
"body": null,
"is_bot": false,
"headline": "v1.4.2",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-05-19T20:09:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d37fbb8c6ef0cd83ef605981908cf64bdbc36b3",
"body": null,
"is_bot": false,
"headline": "update frontend and docker",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-05-19T19:10:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e8aac8784a9de7dfd352154c35263ec3f3d0d17",
"body": null,
"is_bot": false,
"headline": "Go v1.26.3 - SingBox v1.13.12",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-05-19T18:57:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a46f058419f4a3e13de5541e01169e99ba620644",
"body": "fix: SQLite connection leak causing unbounded memory growth",
"is_bot": false,
"headline": "Merge pull request #1118 from ayi21sui/fix/sqlite-conn-leak",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-05-19T18:51:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "855c269fb8c1ca2a3226df73148042bbe5189e93",
"body": "SaveStats returned tx.Create().Error directly without assigning to the\nlocal err variable, so the deferred closure always saw err==nil and\ncalled Commit() on a failed transaction. This left the underlying\ngo-sqlite3 connection unreturned to the pool. With StatsJob firing\nevery 10s, leaked connection\n[…]\nache_size=-200 to reduce per-connection memory from ~2 MB to ~200 KB\n\nMeasured: RSS dropped from 419 MB to 66 MB, db file descriptors from\n4484 to 6, with zero growth over 3-minute observation window.",
"is_bot": false,
"headline": "fix: SQLite connection leak causing unbounded memory growth",
"author_name": "ayi21sui",
"author_login": "ayi21sui",
"committed_at": "2026-05-07T04:30:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f393fc37fae50cafe6029bdc7620617e1576e50",
"body": null,
"is_bot": false,
"headline": "v1.4.1",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-29T08:31:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "764e1ba165c7408c97fc418343b643e1abf0e473",
"body": null,
"is_bot": false,
"headline": "fix: update ECH handling in ClashService",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-28T19:49:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fed5298156ba9b78fd70fb5188460d13523263ef",
"body": null,
"is_bot": false,
"headline": "Sing-Box v1.13.4",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-28T19:48:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "456aed053e5d95809a6a6c682d1b4b25bbd2e84a",
"body": "…om/sagernet/sing-box-1.13.3\n\nBump github.com/sagernet/sing-box from 1.13.2 to 1.13.3",
"is_bot": false,
"headline": "Merge pull request #1060 from alireza0/dependabot/go_modules/github.c…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T20:50:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a5b17b103b566832ecf59904b65bc385f7fbbd9",
"body": "…olang.org/grpc-1.79.3\n\nBump google.golang.org/grpc from 1.79.1 to 1.79.3",
"is_bot": false,
"headline": "Merge pull request #1061 from alireza0/dependabot/go_modules/google.g…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T20:50:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "722005f3454bdc8a27f3883a323228bd2c034931",
"body": null,
"is_bot": false,
"headline": "[clash] default proxy and proxy-group support #1066",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T20:41:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02c67d9232e399d89c166f802143c081359bc260",
"body": "Fix hy2 mport format when generating JSON",
"is_bot": false,
"headline": "Merge pull request #1065 from cola-prince/fix-hy2-mport-compat",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T19:25:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84e6aa5e21e53de1664793be1609fde1372917f1",
"body": "fix: remove default up_mbps and down_mbps fallback to allow BBR",
"is_bot": false,
"headline": "Merge pull request #1064 from cola-prince/fix-up-mbps",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T19:23:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0042d3e7f4f830bafbd765c99d93cca2dc4a7f1b",
"body": "fix: correct servername handling for vless/vmess",
"is_bot": false,
"headline": "Merge pull request #1063 from cola-prince/fix-servername",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T19:22:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d21993804c2c03e2970cd93b0e5f91431a8ba211",
"body": null,
"is_bot": false,
"headline": "fix tracker nil porinter #1057",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T18:10:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d35e02e0ec22c71832db7f110996cc7ac2b7b1e",
"body": null,
"is_bot": false,
"headline": "fix db WAL memory leak #1056",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T18:08:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "135fcb0cda08192a6699900aea0dcb771fd8d1fc",
"body": null,
"is_bot": false,
"headline": "fix http restart memory leak #1056",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T17:46:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11505a5c05f3489053ec00c01717b755255f3a2c",
"body": null,
"is_bot": false,
"headline": "simplify conn tracker #1056",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T17:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "237707b31c4eec85396e1edc456028d9b44fde30",
"body": null,
"is_bot": false,
"headline": "fix conn tracker memory leak #1056",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-22T17:29:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae4581d17b75a0dbc3a30642742ffbc3dc43a5ce",
"body": null,
"is_bot": false,
"headline": "Fix hy2 mport parsing compatibility",
"author_name": "cola-prince",
"author_login": "cola-prince",
"committed_at": "2026-03-21T06:43:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b099f60c5b1fe3e1b30d6c220bc60927f0f94cb",
"body": null,
"is_bot": false,
"headline": "fix: remove default up_mbps fallback to allow BBR",
"author_name": "cola-prince",
"author_login": "cola-prince",
"committed_at": "2026-03-21T05:31:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ce40e300a659895817c242b58f7d0cf6ee04b66",
"body": null,
"is_bot": false,
"headline": "fix: correct servername handling for vless/vmess",
"author_name": "cola-prince",
"author_login": "cola-prince",
"committed_at": "2026-03-21T05:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f0a3a25f19440b6fed4248097b1e1191ce8f6c6",
"body": "Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.1 to 1.79.3.\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.1...v1.79.3)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n dependency-version: 1.79.3\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump google.golang.org/grpc from 1.79.1 to 1.79.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-19T02:26:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e74944065b191daabfc7bff4467191d52cea9265",
"body": "---\nupdated-dependencies:\n- dependency-name: github.com/sagernet/sing-box\n dependency-version: 1.13.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump github.com/sagernet/sing-box from 1.13.2 to 1.13.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-16T17:39:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ef0ffa60eb8ecf8a9678cae8c91cd0fed50e36b",
"body": null,
"is_bot": false,
"headline": "fix reset core conflict",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-11T22:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51cf30f42990ffae3d1e7118b2def62ef9f5d048",
"body": null,
"is_bot": false,
"headline": "v1.4.0",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-09T01:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14ea27292fc9417fd1d8fbdbba5040c8987e6869",
"body": null,
"is_bot": false,
"headline": "use journal mode WAL for expand db use",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-08T22:18:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba547331e9459ee4a48b93cff2b03af6a2b9597",
"body": null,
"is_bot": false,
"headline": "[feat] delayStart and autoReset #718",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-08T22:18:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4e08c8ae3d99732245549a042ffd183ff604c97",
"body": null,
"is_bot": false,
"headline": "downsampling for traffic chart #987",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-08T00:50:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4424565da48c0281c79a99a81b87030541696e0f",
"body": null,
"is_bot": false,
"headline": "bulk edit-delete #636 #1035",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-08T00:23:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93dd02f53ef5d959fb229a879064c04b6b6531e5",
"body": null,
"is_bot": false,
"headline": "better restart error handling by 15s wait",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T13:39:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b5b30ca8f1e50c5e7cddfd4933af247ab75dffc",
"body": null,
"is_bot": false,
"headline": "SingBox v1.13.2",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T13:36:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4caddb800d55cf8fe503f5274a3c7a42da7672e3",
"body": "…ons/cache-5\n\nBump actions/cache from 4 to 5",
"is_bot": false,
"headline": "Merge pull request #1044 from alireza0/dependabot/github_actions/acti…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T10:38:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f50be0bb41a17c2e778af5eb7e87d976e86bc1b8",
"body": "…ons/download-artifact-8\n\nBump actions/download-artifact from 7 to 8",
"is_bot": false,
"headline": "Merge pull request #1045 from alireza0/dependabot/github_actions/acti…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T10:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bfd753bb02bc1659181624faebde557337bf1e4",
"body": "…er/setup-buildx-action-4\n\nBump docker/setup-buildx-action from 3 to 4",
"is_bot": false,
"headline": "Merge pull request #1046 from alireza0/dependabot/github_actions/dock…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T10:37:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "654249deb641fcaf4a458a92bfd52565889903d2",
"body": "…er/metadata-action-6\n\nBump docker/metadata-action from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #1049 from alireza0/dependabot/github_actions/dock…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T10:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe6bca87c497378c2c0b671c0aee61ded7d2ffc",
"body": "…er/build-push-action-7\n\nBump docker/build-push-action from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #1050 from alireza0/dependabot/github_actions/dock…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-07T10:36:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a721c859555fa226616e20583dcc265a9cada266",
"body": "* Fix core restart panic on invalid DNS config\n\n* Avoid nil instance race after core stop",
"is_bot": false,
"headline": "Bugfix: User can't change DNS Invaild Settings (#1042)",
"author_name": "Seva",
"author_login": "sevcator",
"committed_at": "2026-03-07T10:34:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69d79e5d915c1f151880494ecaa9400e073075e1",
"body": "Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.\n- [Release notes](https://github.com/docker/build-push-action/releases)\n- [Commits](https://github.com/docker/build-push-action/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: docker/build-push-action\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump docker/build-push-action from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-06T16:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2deb250a236185ae1edc76d74f0a1941ea7ad542",
"body": "Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6.\n- [Release notes](https://github.com/docker/metadata-action/releases)\n- [Commits](https://github.com/docker/metadata-action/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: docker/metadata-action\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump docker/metadata-action from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-06T16:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14c889f948359f067d0554dce68d84b0f63e6645",
"body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/setup-buildx-action\n dependency-version: '4'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump docker/setup-buildx-action from 3 to 4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-05T17:29:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e76ca2ea9dfeb79007d36c436e6ec60f2c138742",
"body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)\n\n---\nupdated-dependencies:\n- dependency-name: actions/download-artifact\n dependency-version: '8'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/download-artifact from 7 to 8",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-05T17:29:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "775b9b57bcfb3b96c99ee5dc8c9454d1208f04a1",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: '5'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/cache from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-05T17:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c70f0f97b3a8600a07bcb2616dfecead584c7be6",
"body": null,
"is_bot": false,
"headline": "Sing-Box v1.13.0",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-03-04T23:48:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86379818a2ae697352273034d5e6a72f9bac1bda",
"body": null,
"is_bot": false,
"headline": "v1.3.11",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-28T12:28:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a07d2df7e1a8a5e414c89067ba860e536dac3e2",
"body": "…ons/upload-artifact-7\n\nBump actions/upload-artifact from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #1033 from alireza0/dependabot/github_actions/acti…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-28T01:03:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d63da8be35cd0932fb4bdee46f854765e724c15",
"body": "…ons/download-artifact-8\n\nBump actions/download-artifact from 7 to 8",
"is_bot": false,
"headline": "Merge pull request #1032 from alireza0/dependabot/github_actions/acti…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-28T01:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06ee9cfce27cb123e8288d0c90a6b9d2491ebb36",
"body": null,
"is_bot": false,
"headline": "Sing-Box v1.12.23",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-28T01:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13d475da20af23960943ac245a4714da10a438a7",
"body": null,
"is_bot": false,
"headline": "fix crash on restart due to change #1030",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-28T00:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbf46a72b0957ff7e269320be4a84b7103e00bf4",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/upload-artifact from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-27T16:53:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bb15ff2c9933e5b4dd291055bb26850b0ad42e8",
"body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)\n\n---\nupdated-dependencies:\n- dependency-name: actions/download-artifact\n dependency-version: '8'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/download-artifact from 7 to 8",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-27T16:53:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5812d6a8270a71d39db9b6e9976b8e0624c770ae",
"body": null,
"is_bot": false,
"headline": "fix docker logs and db #1019",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-17T20:14:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "083f19324f33cf8da8b89c1c61b94d320a158e49",
"body": "* Update install-windows.bat\n\n* Update s-ui-windows.bat\n\n* Update install-windows.bat\n\n* Update build-windows.bat",
"is_bot": false,
"headline": "Fix directory when running as administrator (#1009)",
"author_name": "Seva",
"author_login": "sevcator",
"committed_at": "2026-02-17T19:26:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd07abf501c1fd4af357bc2c6004d29a9f5a43e3",
"body": null,
"is_bot": false,
"headline": "fix inbound delete affects on client #1008",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-17T19:08:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0202a3e05577ef77907541b31a5721fd85042c26",
"body": null,
"is_bot": false,
"headline": "v1.3.10",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-13T21:30:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66ca82c6359061cccb30dc2c879377fdc7923d56",
"body": null,
"is_bot": false,
"headline": "Go v1.25.7",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-13T21:00:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85d42ee91ccd3046732862a41defdb79d85dbda8",
"body": null,
"is_bot": false,
"headline": "improve converting link to json",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-13T20:49:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdc25bb3d6b0bcd2c3e7bcb8eb6d1fa8191e8ad2",
"body": "#111",
"is_bot": false,
"headline": "Add contribution guide",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-12T22:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6689ae2dc0bb46061f40e333b5f8ab7e8e70a8c",
"body": null,
"is_bot": false,
"headline": "[api] convert sub to Json",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-12T22:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "688e0c3e23bc97a11fc63b64e671a50ba87e00c8",
"body": null,
"is_bot": false,
"headline": "add api checkOutbound #761",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-11T20:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d996e7171bbb8ce8fd4f6a4a1ce2eb458812da3b",
"body": null,
"is_bot": false,
"headline": "fix: core full stop",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-11T18:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76e91aa9b87d4cbd034005390686ee399b2a39df",
"body": null,
"is_bot": false,
"headline": "windows pipeline on tag",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-09T23:11:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af5bd9f75d119cd46749297ff63f018cf908ad43",
"body": null,
"is_bot": false,
"headline": "v1.3.9",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-09T23:02:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fd36e4e6de93c1482215c6b326fbf876596d5ff",
"body": null,
"is_bot": false,
"headline": "Sing-Box v1.12.21",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-09T23:02:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f29e2ad31ef88c4ea79dbea1a70f7994c6216a2",
"body": null,
"is_bot": false,
"headline": "[clash] fix ipv6 by simple detection #871",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-09T00:02:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ce36476704ff2e2e9468bf46bc5996683f8d419",
"body": null,
"is_bot": false,
"headline": "db status data for first page",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-08T23:51:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90976cded11b10903581ee9d4acdc8f45f1000a1",
"body": null,
"is_bot": false,
"headline": "fix dblock on failure #964",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-08T20:19:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5714eccee3d6b728a72a433add52b0085bb464c",
"body": null,
"is_bot": false,
"headline": "release on tag",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-08T16:17:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e84f7530e34a4769390007d37cb9f5e0f2ac01b2",
"body": null,
"is_bot": false,
"headline": "v1.3.8",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-08T16:02:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63cc7ca957d6b516f3b7cc3e28519b441c3d2d86",
"body": null,
"is_bot": false,
"headline": "Sing-Box v1.12.20",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-08T16:01:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8432fda54740bbc2ec04422161b605f8732c627",
"body": null,
"is_bot": false,
"headline": "update dependencies",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-03T20:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "022574a1d71b62dc3d8e6a9b5e811c199a8c405d",
"body": "…ns/checkout-6.0.2\n\nBump actions/checkout from 6.0.1 to 6.0.2",
"is_bot": false,
"headline": "Merge pull request #975 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-03T19:58:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76ab5e2ccc4b61d950e6da052b10be02a6b86656",
"body": "…ns/cache-5\n\nBump actions/cache from 4 to 5",
"is_bot": false,
"headline": "Merge pull request #967 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-03T19:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10ba989175c352661337758bf3a944008ece0c37",
"body": "…ns/upload-artifact-6\n\nBump actions/upload-artifact from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #966 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-03T19:57:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46434a6b3fc6755a3c342b286ac2646d3aa164b1",
"body": "…ns/download-artifact-7\n\nBump actions/download-artifact from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #965 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-02-03T19:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5e07ba07695f26f63f63a2dd62dfd605e697e51",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2)\n\n---\nu\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.1 to 6.0.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-22T16:53:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5c6bdaefff325cb5728a6416de87e13a12f254f",
"body": "Fixing Parameter Order in Generated Links",
"is_bot": false,
"headline": "Merge pull request #962 from Kagashini/fix/link-parameter-ordering",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-09T19:50:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f69b55f7210feb6bb6ef4f54f608d19e21efeac2",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: '5'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/cache from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-05T16:09:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c9d1787092c4168eaea70a25c2284ef60429f29",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/upload-artifact from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-05T16:09:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14013b7d7004bcbce862cb211193515b734b7a19",
"body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/download-artifact\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/download-artifact from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-05T16:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d367fb83db2f1d9345aa646d9e6579c27cabfed",
"body": null,
"is_bot": false,
"headline": "refactor(genLink): replace map with struct for link params",
"author_name": "Anem",
"author_login": "Kagashini",
"committed_at": "2026-01-05T07:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ef5db4846c316fa6e12994fe94cd10aeb714c70",
"body": null,
"is_bot": false,
"headline": "[feat] download singbox config #938 #957",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-04T16:36:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94cc29edf5133058d6227d90317d09eb14922285",
"body": "Fix the issue where the default IP lookup URL is inaccessible on some networks",
"is_bot": false,
"headline": "Merge pull request #947 from sky22333/main",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-04T15:46:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40e2b4cc8ad67b48d4068bb2b8ca28f2baa4ea72",
"body": null,
"is_bot": false,
"headline": "sub header enhancement",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-04T15:38:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b0006f8c8826553f688a236a754a1e0c99006d9",
"body": null,
"is_bot": false,
"headline": "downgrade quic-go",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-04T00:08:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "216a76051ea07a784eb65651bbdd3d986d5469bd",
"body": "fix(security): use CSPRNG (crypto/rand) for random number generation",
"is_bot": false,
"headline": "Merge pull request #937 from chaosoffire-org/feature-random",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T22:49:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0d7bcc8293d5125c65c4a80d59be9a05212178c",
"body": "feat(sub): add HEAD method support for sub resource",
"is_bot": false,
"headline": "Merge pull request #926 from Kagashini/head-request-support",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T22:47:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87e3118d6b8ede650df4bd50b49f937e4a808932",
"body": null,
"is_bot": false,
"headline": "update dependencies",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T22:29:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bc4fe843b8d0e0f39c013db13315d90d4be5bc5",
"body": null,
"is_bot": false,
"headline": "add nftables to docker image #872",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T22:09:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b779e3b825da85e208cfe0df3c6a1a3acad78baa",
"body": "…ns/checkout-6.0.1\n\nBump actions/checkout from 5.0.0 to 6.0.1",
"is_bot": false,
"headline": "Merge pull request #924 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T19:20:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e97afebab70c9c116a3b4a9da795fa66e97fe2e",
"body": "…ns/download-artifact-6\n\nBump actions/download-artifact from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #882 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T19:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3de228ebcd22b8c6e53fac3ccf546b6aac1514e8",
"body": "…ns/upload-artifact-5\n\nBump actions/upload-artifact from 4 to 5",
"is_bot": false,
"headline": "Merge pull request #880 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T19:20:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abd1c378d5cd7f8b711c19c9c0c996309be55084",
"body": "…ns/setup-node-6\n\nBump actions/setup-node from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #863 from alireza0/dependabot/github_actions/actio…",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T19:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de7197cc58d436a83d0a37c105b04938d556d47d",
"body": null,
"is_bot": false,
"headline": "update deps",
"author_name": "Alireza Ahmadi",
"author_login": "alireza0",
"committed_at": "2026-01-03T19:18:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a4c010a4589762107e4ef9cbba7a09230c43e90",
"body": null,
"is_bot": false,
"headline": "Fetch IP address concurrently using multiple endpoints",
"author_name": "starry",
"author_login": "sky22333",
"committed_at": "2025-12-26T22:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09e94c6213414bab70cd54119a0f0395a3db1468",
"body": "- Updated `common.Random` and added `common.RandomInt` to use `crypto/rand` for cryptographically secure random number generation.\n- Added a thread-safe fallback to `math/rand` in case of system entropy failure.\n- Optimized `allSeq` initialization by using a rune slice literal instead of a loop in `init()`.\n- Refactored `util/outJson.go` to use the new `common.RandomInt`, removing the direct dependency on `math/rand`.",
"is_bot": false,
"headline": "refactor: replace math/rand with crypto/rand for secure generation",
"author_name": "Chaosoffire",
"author_login": "chaosoffire",
"committed_at": "2025-12-15T13:43:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc88f5a509240f0935633a708c0f34bd358332f5",
"body": "- Implement HEAD method for retrieving sub resource metadata for some clients (example: Karing)",
"is_bot": false,
"headline": "feat(sub): add HEAD method support for sub resource",
"author_name": "Anem",
"author_login": "Kagashini",
"committed_at": "2025-12-05T13:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c34e146c19410228f94ee6f70455065924f2614",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5.0.0...v6.0.1)\n\n---\nu\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.1\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 5.0.0 to 6.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-02T16:43:49Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 7,
"commits_last_year": 181,
"latest_release_at": "2026-07-19T13:50:21Z",
"latest_release_tag": "v1.5.4",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 30,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.8
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/KUAILESHANGWEI/s-ui",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/KUAILESHANGWEI/s-ui",
"is_deprecated": false,
"latest_version": "v1.5.4",
"repository_url": "https://github.com/KUAILESHANGWEI/s-ui",
"versions_count": 13,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-05-21T16:07:11Z",
"latest_version_yanked": null,
"days_since_latest_publish": 67
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"frontend/tsconfig.json"
],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 25445,
"source_files_sampled": 105,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"frontend/package.json",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "@mdi/font",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "7.4.47"
},
{
"name": "axios",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^1.16.1"
},
{
"name": "chart.js",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^4.5.1"
},
{
"name": "clipboard",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.11"
},
{
"name": "core-js",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.49.0"
},
{
"name": "moment",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^2.30.1"
},
{
"name": "notivue",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^2.4.5"
},
{
"name": "pinia",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.4"
},
{
"name": "qrcode.vue",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.9.1"
},
{
"name": "roboto-fontface",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^0.10.0"
},
{
"name": "vue",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.5.34"
},
{
"name": "vue-chartjs",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.3"
},
{
"name": "vue-i18n",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^11.4.4"
},
{
"name": "vue-router",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.7"
},
{
"name": "vue3-persian-datetime-picker",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.2"
},
{
"name": "vuetify",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.7"
},
{
"name": "yaml",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "github.com/gin-contrib/gzip",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.6"
},
{
"name": "github.com/gin-contrib/sessions",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/gin-gonic/gin",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.0"
},
{
"name": "github.com/gofrs/uuid/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.4.0"
},
{
"name": "github.com/op/go-logging",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20160315200505-970db520ece7"
},
{
"name": "github.com/robfig/cron/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "github.com/sagernet/sing",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.10"
},
{
"name": "github.com/sagernet/sing-box",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.13.12"
},
{
"name": "github.com/shirou/gopsutil/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.26.4"
},
{
"name": "golang.zx2c4.com/wireguard/wgctrl",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20241231184526-a9ab2273dd10"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "gorm.io/driver/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "gorm.io/gorm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.31.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "alireza0",
"commits": 466,
"avatar_url": "https://avatars.githubusercontent.com/u/12573084?v=4"
},
{
"type": "User",
"login": "cola-prince",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/41108397?v=4"
},
{
"type": "User",
"login": "Kagashini",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/10905488?v=4"
},
{
"type": "User",
"login": "sevcator",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/68725282?v=4"
},
{
"type": "User",
"login": "Shellgate",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/128194280?v=4"
},
{
"type": "User",
"login": "cany748",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/30237734?v=4"
},
{
"type": "User",
"login": "chaosoffire",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/81634128?v=4"
},
{
"type": "User",
"login": "Misaka-blog",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/122191366?v=4"
},
{
"type": "User",
"login": "Peter1303",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/13428400?v=4"
},
{
"type": "User",
"login": "shahin-io",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/115543613?v=4"
}
],
"contributors_sampled": 18,
"top_contributor_share": 0.955
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"docker.yml",
"release.yml",
"sync-external-release-assets.yml",
"sync-upstream-release-assets.yml",
"windows.yml"
],
"has_docs_dir": false,
"linter_configs": [
".eslintrc.js"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "48 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e71daae71783a3203cc9188b6f55a6ff984c3a6b",
"ran_at": "2026-07-27T19:50:56Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T15:27:40Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/KUAILESHANGWEI/s-ui",
"host": "github.com",
"name": "s-ui",
"owner": "KUAILESHANGWEI"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "jurisdiction_overall_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 20,
"inputs": {
"security": 17,
"vitality": 80,
"community": 12,
"governance": 39,
"engineering": 45,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"weighted_overall_before_jurisdiction": 41,
"overall_after_jurisdiction_multiplier": 20
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 80,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"commits_last_year": 181,
"human_commit_share": 0.86,
"days_since_last_push": 8,
"active_weeks_last_year": 30
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "30/52 weeks with commits",
"points": 20.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 30
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "181 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 181
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 7,
"latest_release_tag": "v1.5.4",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "7 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 7
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-3.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-3.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 39,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 18,
"top_contributor_share": 0.955
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 96% of commits",
"points": 1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 96
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "18 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 18
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"followers": 1,
"owner_type": "User",
"is_verified": null,
"owner_login": "KUAILESHANGWEI",
"public_repos": 49,
"account_age_days": 1097
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of KUAILESHANGWEI",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "KUAILESHANGWEI"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "49 public repos, account ~3 yr old",
"points": 18.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 49
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/KUAILESHANGWEI/s-ui"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 67
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 67 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 67
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "13 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 13
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 45,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://t.me/XrayUI",
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://t.me/XrayUI",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 17,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "jurisdiction_posture_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 17,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.4,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"security_posture_after_multiplier": 17,
"security_posture_before_jurisdiction": 34
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "48 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "moderate",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 50,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": true,
"exposures": [
{
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "Russia: top_contributor (1)",
"points": 50,
"status": "partial",
"details": [
{
"code": "jurisdiction_exposure",
"params": {
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.605,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "52 of 86 human commits state their intent (structured subject or explanatory body)",
"points": 32.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 52,
"sampled": 86
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"frontend/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.14
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "14 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 14,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Vue",
"largest_source_bytes": 25445,
"source_files_sampled": 105,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Vue with type-check config (frontend/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "frontend/tsconfig.json",
"language": "Vue"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/105 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 105,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T19:51:08.573426Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/KUAILESHANGWEI/s-ui.svg",
"full_name": "KUAILESHANGWEI/s-ui",
"license_state": "standard",
"license_spdx": "GPL-3.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.