Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-29 01:13 UTC
LensDNS / DNSFleet
Unified control plane for managing AdGuard Home fleets. GitOps-style DNS configuration, observability, and centralized control for self-hosted DNS infrastructure.
LensDNS/DNSFleet holds a health index of 47 out of 100, placing it in the At risk band. It scores highest on Engineering Quality (77/100) and lowest on Security (25/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
47
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
47
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
LensDNSOrganization
0 followers3 public repossince May 2026
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/lensdns/dnsfleet | v0.2.0 | - | 6 | 8 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
64
Development activity
47At risk
How it's scored
| 28.8/36 | Push recency — last push 8 days ago |
| 2.8/36 | Commit cadence — 4/52 weeks with commits |
| 15.3/18 | Commit volume — 49 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 49 |
| human_commit_share | 1 |
| days_since_last_push | 8 |
| active_weeks_last_year | 4 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 6 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 27/27 | Release cadence — a release every ~14.1 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 6 |
| latest_release_tag | v0.2.0 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 14.1 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
33
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
32
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
35At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 0/25 | Owner reach — 0 followers of LensDNS |
| 4.8/25 | Track record — 3 public repos, account ~0 yr old |
Inputs used
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | LensDNS |
| public_repos | 3 |
| account_age_days | 82 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 8 days ago |
| 20/20 | Version history — 6 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/lensdns/dnsfleet |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 8 |
Engineering Quality
Are baseline engineering and documentation practices in place?
77
Engineering practices
88Excellent
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — eslint.config.mjs |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | yes |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
60Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 14 topics |
| 10/10 | Wiki |
Inputs used
| topics | adguardhome, control-plane, dns, fleet-management, golang, homelab, infrastructure, monitoring, networking, nextjs, observability, realtime, self-hosted, websocket |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
25
Security posture
25Critical
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 1/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 62 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 2.5 |
Excluded from scoring (no data or not applicable): ci_tests. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
67
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 46 of 49 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.939 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — eslint.config.mjs |
| 11/11 | Static type checking — web/tsconfig.json |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 49 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 2/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | web/tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/185 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 57,276 |
| source_files_sampled | 185 |
| oversized_source_files | 0 |
Key facts
0GitHub stars
1contributors
49commits, last 12 months
8days since last push
6releases
1bus factor
0open issues
Go, npmpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 2.5 / 10
2.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 2 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 2 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 62 existing vulnerabilities detected |
Direct dependencies 17
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/glebarez/sqlite | v1.11.0 | go.mod |
| Go | github.com/gorilla/websocket | v1.5.3 | go.mod |
| Go | github.com/labstack/echo/v4 | v4.15.2 | go.mod |
| Go | gorm.io/gorm | v1.31.1 | go.mod |
| npm | @base-ui/react | ^1.4.1 | web/package.json |
| npm | @tanstack/react-virtual | ^3.13.24 | web/package.json |
| npm | class-variance-authority | ^0.7.1 | web/package.json |
| npm | clsx | ^2.1.1 | web/package.json |
| npm | lucide-react | ^1.14.0 | web/package.json |
| npm | next | 16.2.6 | web/package.json |
| npm | next-themes | ^0.4.6 | web/package.json |
| npm | react | 19.2.4 | web/package.json |
| npm | react-dom | 19.2.4 | web/package.json |
| npm | shadcn | ^4.7.0 | web/package.json |
| npm | sonner | ^2.0.7 | web/package.json |
| npm | tailwind-merge | ^3.5.0 | web/package.json |
| npm | tw-animate-css | ^1.4.0 | web/package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"adguardhome",
"control-plane",
"dns",
"fleet-management",
"golang",
"homelab",
"infrastructure",
"monitoring",
"networking",
"nextjs",
"observability",
"realtime",
"self-hosted",
"websocket"
],
"is_fork": false,
"size_kb": 2305,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 276825,
"CSS": 5381,
"Makefile": 792,
"Dockerfile": 849,
"JavaScript": 3271,
"PowerShell": 835,
"TypeScript": 410394
},
"pushed_at": "2026-07-20T04:18:07Z",
"created_at": "2026-05-08T18:12:57Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T04:17:27Z",
"description": "Unified control plane for managing AdGuard Home fleets. GitOps-style DNS configuration, observability, and centralized control for self-hosted DNS infrastructure.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "LensDNS",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/282590276?v=4",
"created_at": "2026-05-07T13:14:13Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 82
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-20T04:15:07Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-05-15T17:06:56Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-05-13T11:02:05Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-05-12T11:49:58Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-05-11T14:05:20Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-05-10T19:09:59Z"
}
],
"recent_commits": [
{
"oid": "acd47b0057dcbd024228ba597a0a5cd118b5375f",
"body": "Lengthen poll interval and use one WS read deadline so CI no longer races a second tick or panics after read timeout.",
"is_bot": false,
"headline": "test(querylog): stabilize single-page-per-tick hub integration",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-20T04:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bbc413dc087459f65280ba86a0c092286eadb69",
"body": "Align go.mod and Docker builder with the current Go security point release; sync web package-lock version to 0.2.0.",
"is_bot": false,
"headline": "chore(release): bump Go to 1.26.5 for v0.2.0",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-20T04:09:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92871ded37ec4cbcfcc2ff905feb4e96018088f7",
"body": "Stop patch auto-target from failing commits; keep uploads for the badge while using the current codecov-action major.",
"is_bot": false,
"headline": "ci: make Codecov status informational and bump action to v7",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T19:45:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a027d4ca80410fd2ea5d73ef7c4d7329f9e7ceb",
"body": "Clarify Hub→Sync→Node value, Bootstrap, Sync Trace, investigation, and safe managed sync; keep gofmt clean for CI.",
"is_bot": false,
"headline": "docs: refresh README for v0.2 operations console narrative",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T19:35:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffae52b30cac01471d6cbabcb00daa0d5e9e3708",
"body": "Blank rewrite rows no longer report managed=true, matching Sync/Drift skip semantics; refresh the HTTP API managed docs for all four domains.",
"is_bot": false,
"headline": "fix(v0.2): align GET managed.rewrite with Sync non-empty gate",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T19:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a831a49cbf2f07865296cc888ae464a31086d12",
"body": "Gate Sync/Drift on Hub-managed upstream and rewrite like filters/clients, and strip empty unmanaged Advanced keys so Save cannot seed wipe paths.",
"is_bot": false,
"headline": "fix(v0.2): skip unmanaged rewrite/upstream on Sync and sanitize Advanced",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T18:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb68ee037545c5948d611da3b47f1db7c1423239",
"body": "Tighten unmanaged-save guards so metadata-only or blank rows cannot mark Hub domains managed and wipe edge config on Sync.",
"is_bot": false,
"headline": "fix(v0.2): require real filter/client/rewrite content before manage",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T18:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15d8d22520b212907f1fcc49b55eb3ad9d063dfe",
"body": "Refuse placeholder Filters/Clients saves until Bootstrap or real entries exist, and omit empty rewrite on first DNS save so Sync cannot wipe edge lists by accident.",
"is_bot": false,
"headline": "fix(v0.2): block empty unmanaged Filters/Clients saves",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T18:42:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b338bf50f8a6b37af4888ed6e379fbca57867f8",
"body": "…ains\n\nDNS/Filters/Clients PUT only their tab keys; Advanced omits unmanaged domains from the draft. GET now exposes managed flags so the console stays aligned with Hub Sync skip semantics.",
"is_bot": false,
"headline": "fix(v0.2): scope Fleet Config saves so Sync cannot wipe unmanaged dom…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T18:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5802e3786372b8d0a53a6969625a890ce808a147",
"body": "Prevent Sync from wiping unmanaged filters/clients before Bootstrap, make PUT update only present domains, and fix Live/Explore deep-link races so the operations console workflow stays trustworthy.",
"is_bot": false,
"headline": "fix(v0.2): harden sync safety, partial PUT, and investigation deep links",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T18:30:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56298a6472e36ea60d7026e706c242c656d5cf56",
"body": "Ship the AdGH-inspired console shell with Overview/Wizard, domain Config\ntable+modal and Advanced buffer, bidirectional Live/Explore investigation\nlinks, and SyncRunPanel timelines. JSON stays collapsed Advanced; tests\ncover buffer, import collapse, deeplink, and sync panel state.",
"is_bot": false,
"headline": "feat(web): v0.2 operations console UX",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T17:08:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cacb1725143040dcd1bd917f3669dc7f483e10f",
"body": "Complete P0 product pillars: structured Fleet Configuration with client\nround-trip and whitelist filters, Import Bootstrap preview/diff APIs,\ndomain-level sync trace, Live Logs investigation context, and Explorer\ndeep links. Seed default global config rows and reduce GORM noise on\nmissing config rows.",
"is_bot": false,
"headline": "feat: fleet config UI, import bootstrap, and sync trace",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-07-19T07:10:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c6ff7fb3f8ba38c0f70d235aede2c0b1c7173a7",
"body": "Add Query Explorer fan-out API/UI, dashboard snapshot aggregation, and\nglobal desired-state for filters and clients with sync and drift. Extend\nprobe stats with top-domain/client JSON, unify public docs around the\noperations console narrative, and trim scattered README/doc.go files.",
"is_bot": false,
"headline": "feat: v0.2 operations console foundation",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-06-24T03:21:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0023692969b6cba77a8cf388166ab4d7d8a22f65",
"body": "Add HTTP tests for POST /nodes/:id/mark-offline (200, 404, invalid id).\nAdd querylog Hub tests for recordPollFailure/clearPollFailure and nil safety.\nAdd nodeoffline package tests for offline + runtime field clears.\nFix parseNodeID so id 0 yields an error instead of falling through to 404.",
"is_bot": false,
"headline": "test: cover mark-offline, hub poll streak, and nodeoffline.Mark",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-15T16:56:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfe0f1415b262023e67664f3c15cb216511fb319",
"body": "…ine marking\n\nAdd AdGuard GET /control/stats on probe; expose runtime_* on nodes API and UI.\n\nIntroduce nodeoffline.Mark, POST /nodes/:id/mark-offline, and hub streak-based\nmark-offline after repeated querylog poll failures.\n\nDashboard: FleetNodesProvider (15s probe tick, 30s list refresh); Fleet an\n[…]\neTracker + generation guards on first-page\nfetch, cross-referenced fail thresholds with hub.\n\nDocument mark-offline and runtime snapshot in api/DNSFLEET_HTTP_API.md; drift\nuses shared offline marking.",
"is_bot": false,
"headline": "feat: fleet-wide node context, runtime stats probe, and querylog offl…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-15T16:38:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23bb3c9691f599c2e900a085cd1573865a2e1abf",
"body": "Aggregate node counts on Fleet from the same GET /nodes list. Add\nclient-side Live Logs scope (all / online / per node) via visibleRows;\nkeep WebSocket merge global and align older_than paging with the\nvisible tail. Remove duplicate \"cached\" from the response summary\n(cache hits use the Badge only). Collapse system messages by default\nwith a bounded scroll area so the log table keeps the main viewport.",
"is_bot": false,
"headline": "feat(web): fleet snapshot, Live Logs scope filter, and UX polish",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-15T06:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0605daa1bea78d64b96f8a64cd35a6a5470e83cc",
"body": "…mmary\n\n- Derive firstRowSummaryKey and split operatorLastLog memo so operatorSummary\n does not depend on the full logRows array.\n- Drive logRows and pausedDeep from a single reducer dispatch per merge;\n keep logRowsRef updates on the same stack as dispatch.\n- Serialize post-splice WS digest+merge\n[…]\n Use small-batch sort plus linear merge in live-logs-merge; extend tests\n with naive full-sort parity checks.\n- Align HTTP API and README notes on fingerprint vs REST dedupe and WS\n flush semantics.",
"is_bot": false,
"headline": "perf(web): optimize Live Logs merges, WS digest path, and operator su…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-13T09:28:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a1590764b76c4e1b3489e989defe16831a1e1f31",
"body": "Add @tanstack/react-virtual with padding-top/bottom rows, IO sentinel in\nbottom spacer, and optional history row after sentinel. Extract memo\nLogTableRow with tr measureElement; replace per-row Radix Button with a\nnative control and tbody click/keydown delegation via logRowsRef +\nsnapshotLogRow. Stabilize measure() with rowVirtualizerRef and narrow\neffect deps; document ESLint react-hooks/incompatible-library. Point\nREADME_zh Web section at web README for prod checklist and lint notes.",
"is_bot": false,
"headline": "feat(web): virtualize Live Logs merged table with TanStack Virtual",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-13T08:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b943a0831954a7a7c82caf6e4d6d666d27ba53b",
"body": "…ve flush\n\nHub\n- Stop clearing tail dedupe on last subscriber; keep nodeTail across zero subs.\n- Bounded warm ring (N=128) + replay before subs[conn] to avoid live/replay race.\n- Add log fingerprint (SHA-256 hex of entry bytes); emit and ring use same key.\n- Document shutdown order, warm oversize sk\n[…]\nng; CheckOrigin production warning; ordering wording.\n- web/README: locale reconnect, multi-tab, fingerprint disconnect limits, merge\n perf note, warm vs per-node semantics, CheckOrigin + token risk.",
"is_bot": false,
"headline": "feat(querylog,web): session continuity — warm replay, fingerprint, li…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-13T06:30:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c3f9867db836255ce54b0544a30a13aefb31614b",
"body": "…lders\n\n- Add config.ValidateStartupAdmin with table tests; call after ApplyLaunchOverrides.\n- Parse -admin-token/-listen via private flag.FlagSet; -h/-help exit 2 with writeUsage.\n- Replace pinned v0.1.1 with vX.Y.Z and a short placeholder note in README and README_zh.",
"is_bot": false,
"headline": "test(cmd): cover launch flags and admin gate; doc release tag placeho…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-12T12:30:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "789920e37ffb51ae755e984b4a59be74c63421a2",
"body": null,
"is_bot": false,
"headline": "chore: make .env.example comments English-only",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-12T11:36:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25fd8aed5f1edcd196e05d931bcec2063f6459d9",
"body": "- Parse flags before config.Load so -h skips DB parent MkdirAll\n- ApplyLaunchOverrides in internal/config with table-driven tests\n- Custom Usage (filepath.Base argv0), clearer fatal when token missing\n- README / README_zh: env first, optional overrides, ps argv warning,\n -h does not start server or create SQLite data dir; minor scannability\n- CONTRIBUTING + .env.example note on CLI vs env for production",
"is_bot": false,
"headline": "feat(cli): first-run flags -admin-token and -listen",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-12T11:32:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffae96e82a3d0d1268a6bdba718242f833a4050b",
"body": null,
"is_bot": false,
"headline": "Update Readme",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-12T08:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "673cbaf0bf24e0f7d9bd2ead8a672763ed526b6b",
"body": null,
"is_bot": false,
"headline": "Update Readme",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-11T13:53:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67848631e11208cd4ac3590551780b9b2230fa7c",
"body": "…rom tags\n\n- Add flat en/zh messages, LocaleProvider via useSyncExternalStore and dnsfleet-locale\n- Localize login, shell, gate, Fleet, Live Logs, Desired State, and sync terminal title\n- Use resolveMessage for HTTP 429 toast; result-kind labels; Live Logs time format and detail section titles\n- Ali\n[…]\noggle aria-label, and home redirect text\n- Fix SyncTerminalDrawer to theme semantic colors\n\nci(release): prefer annotated Git tag message for GitHub Release preamble, fallback to tagged commit message",
"is_bot": false,
"headline": "feat(web): bilingual UI (en/zh), locale coverage, and release notes f…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-11T13:07:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1555e0fb943d4dd479bbcbedbd4aded32240a261",
"body": "…kpressure and WS merge\n\n- Add POST /api/v1/nodes/:id/probe (AdGHSem, 404 before acquire, 422/503 aligned with querylog)\n- Document probe concurrency vs POST/PATCH probe and 503 semantics in DNSFLEET_HTTP_API.md and README\n- Fleet: probe offline nodes after refresh (bounded concurrency), per-row rep\n[…]\nAF flush, incremental newest-first merge; queueMicrotask for pausedDeep; discard pending queue on close (documented)\n- Add mergeNewestFirstDedupeIncremental, Vitest coverage, httptest for probe routes",
"is_bot": false,
"headline": "feat: Phase 1 stabilization — probe API, Fleet refresh, live logs bac…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-11T12:15:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e20d04ede270cd1fb75c7471ea46b7f58c12bee",
"body": "Run go test with -coverprofile on ubuntu-latest only; upload coverage.out\nvia codecov-action with optional CODECOV_TOKEN and OIDC. Grant id-token\nwrite and secrets inherit on CI/release callers; document in README.",
"is_bot": false,
"headline": "ci: upload Go coverage to Codecov from Ubuntu job",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-11T03:25:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d3f816008a41126df6ee4a0d43808aad6999d0f",
"body": "- Embed branding and Fleet / Desired State / Live Logs previews in README.md and README_zh.md\n- Add assets under assets/readme/",
"is_bot": false,
"headline": "docs(readme): add LensDNS logo and UI demo screenshots",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-11T03:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40c7236af1964d28e23af81e35f750ef29b4f5d6",
"body": "Wire GitHub Actions: call test.yml on ubuntu/windows/macos (gofmt, vet,\nweb lint/test/build, embed dist, go test); CI builds deploy Dockerfile\nwithout push; release on v* tags cross-compiles binaries with\nSHA256SUMS, pushes GHCR image, and creates GitHub Release with notes.",
"is_bot": false,
"headline": "ci: add reusable test matrix, PR Docker verify, and v* release pipeline",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T19:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97eafd784c8e27e0dffe2b92e4584e3449457afb",
"body": "Without eol=lf, GitHub Actions Windows checks out *.go as CRLF and gofmt -l\nreports nearly every file. Align cmd/internal with Linux/macOS formatting checks.",
"is_bot": false,
"headline": "chore: add .gitattributes for Go LF line endings (fix Windows CI gofmt)",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T18:31:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e81f9897ba7649aaf4a54a97d566aca27d767251",
"body": "go:embed all:dist must match at least one file; running go vet before\nthe Next.js build left internal/webui/dist empty and broke CI. Add a\nminimal index.html placeholder (same idea as Makefile ensure-webui-dist),\nthen replace dist with web/out after npm run build so go test sees _next\nassets.",
"is_bot": false,
"headline": "ci: seed embedded webui dist before go vet",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T18:27:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6815e1be5280c887cb25b97443a406b4dd18cecc",
"body": "…nd embed test fix\n\nCI:\n- Add reusable three-OS test workflow (Go fmt/vet/test, web ci/lint/test/build, embed UI).\n- Run CI on branch pushes and pull requests; release on v* tags with GHCR push and GitHub Release.\n- GHCR image uses lowercase repo path; Docker build omits SKIP_ADMIN auth in the bundl\n[…]\n\n- Resolve embedded Next CSS chunk path dynamically in internal/webui/serve_test (stable across builds).\n\nDocs:\n- web/README and .env.example note Hub vs REST limits and optional slow-query threshold.",
"is_bot": false,
"headline": "feat(ci,web): GitHub Actions matrix CI/release; Live Logs semantics a…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T18:17:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "701fc4bce427d3ab09f1a9c1714688b43269659a",
"body": "Expose GET /nodes/:id/querylog with upstream validation and error mapping.\nAlign Hub polling to single-page querylog fetches for deep history via REST.\nImplement Live Logs merge/dedupe, scroll loading, detail sheet, and layout\nfixes; add client helpers and Vitest coverage. Update HTTP API and READMEs.",
"is_bot": false,
"headline": "feat: add node querylog API and merged Live Logs experience",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T16:24:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c7c7209fcc55f7a74bf75641892943ab4f6991e",
"body": "- Remove ServerStatus.start_time (AdGH returns fractional ms; int64 decode broke GetStatus).\n- Use //go:embed all:dist so Next _next/ assets are embedded; add regression tests.\n- After successful POST /api/v1/sync, probe GET /control/status to refresh Online.\n- Document embed + drift vs probe in README comments.",
"is_bot": false,
"headline": "fix(adguard,webui): status JSON decode, embed _next, sync post-probe",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T12:11:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5d1d308d0f22f2f11f1ec9d262a4b0733131307",
"body": "Step 6 (product UI / dev integration)\n- Next App Router: Fleet, desired state, Live Logs; login and admin gate;\n sessionStorage with same-origin REST/WebSocket (rewrites, lib/api, ws-logs-url)\n- Sync terminal drawer, shadcn shell/layout; align types and backend-facing config\n\nStep 7 (static embed /\n[…]\nmerge, .dockerignore; volume/nonroot\n and HEAD semantics documented in deploy/README\n- Tooling: Makefile ensure-webui-dist, scripts, integration test (API not HTML SPA);\n root/web README and LICENSE",
"is_bot": false,
"headline": "feat: Step 6 control-plane UI and Step 7 embedded static UI with Docker",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T10:23:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "651df2b8347d03a7db3b8e628df701e4f775d24d",
"body": "- Scaffold App Router + TS + ESLint + Tailwind v4; shadcn + dark default + theme toggle\n- Rewrite /healthz and /api/v1/* to DNSFLEET_BACKEND_URL (trim trailing slash)\n- Add lib/api (getApiBase, apiFetch, path-under-base docs) and web/.env.example\n- Dashboard: Fleet / Desired State / Live Logs placeholders + README handoff notes\n- Bootstrapped with npm + package-lock.json; README notes pnpm alternative",
"is_bot": false,
"headline": "feat(web): Step 5 Next.js shell with same-origin API rewrites",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-10T07:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4e165892cb3bba506320ddcec0546f4bb0bfef5",
"body": "- Add hub_integration_test with httptest AdGuard mock and WS harness\n (querylog_disabled, upstream 401/403/500, multi-page cursor, dedupe,\n ctx cancel shutdown).\n- Assert GET /api/v1/ws/logs returns 503 when Deps.Hub is nil.\n- Add middleware AdminWS isolated tests for auth paths and insecure skip.",
"is_bot": false,
"headline": "test: add querylog hub integration, ws logs 503, and AdminWS cases",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T17:32:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ee2b3eb560ee5a073c173da546f349bcc490b28",
"body": "…-out\n\nAdd internal/querylog Hub: poll GET /control/querylog per online node with\ndedupe, bounded outbound queues, backpressure_drop/frame_too_large handling,\nand fan-out to GET /api/v1/ws/logs subscribers.\n\nExtend internal/adguard with GetQueryLog/GetQueryLogConfig and node client wiring.\nAdd DNSFL\n[…]\nntegration, Register handshake failure path, Ping/\nwrite failure unregister and close, defer ordering.\n\nAdd integration tests for dual upstream + WS; unit tests for dedupe and\ntryEnqueue backpressure.",
"is_bot": false,
"headline": "feat(querylog): Step 4 live log hub, AdGH querylog client, and WS fan…",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T16:58:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ebc4939b40cead54a1ee4cb78b39ee193b3735a7",
"body": "- 新增 GET /api/v1/ws/logs：升级 WebSocket、connected 系统帧、读循环与 ping\n- 引入 gorilla/websocket；AdminWS 中间件与 DNSFLEET_WS_MAX_FRAME_BYTES 等配置\n- 预留 internal/querylog（后续对接 AdGH 轮询）\n- 更新 README、.env.example、api/DNSFLEET_HTTP_API.md 与若干 internal 文档",
"is_bot": false,
"headline": "feat(httpapi): add /api/v1/ws/logs WebSocket and AdminWS (Step 4.1)",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T15:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c06fd45e0342b8bffd9285fad3c21a7e7a4c7cf1",
"body": "- Add /api/v1 with Admin middleware: node CRUD + probe (422), global GET/PUT, POST /sync\n- Share AdGHSem across sync and drift; sync total timeout with limited retries on timeouts\n- Drift loop with ticker and immediate first run; main enforces admin token and graceful shutdown\n- Update README, .env.example, and api/DNSFLEET_HTTP_API.md\n- Use WithContext on DB reads/updates in probe and node handlers; expand httptest coverage",
"is_bot": false,
"headline": "feat(httpapi): Step 3 control-plane API, sync, and drift detection",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T09:26:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd5862808fa14db18a2e69e589bd5530dca47677",
"body": "Add doJSON/postJSON/putJSON with 401/403/decode errors; GetStatus,\nGetDNSConfig, SetUpstreamDNSFromGlobalText, ListRewrites,\nApplyRewritesFromJSON (Q1 hand-written DNSConfig; rewrite order\ndelete→update→add). Extend README; document §2.2 constraints;\nmark docs §2.2–§2.4 done. httptest coverage incl. optional 403/bad JSON.",
"is_bot": false,
"headline": "feat(adguard): Step 2.2 client — status, DNS RMW, rewrite reconcile",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T08:25:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1076b22d2ff7471a706e8e17700efac3d50d6d82",
"body": "…join)\n\nAdd internal/adguard for AdGuard Home /control HTTP: NewClient with\nNormalizeBaseURL + scheme/host checks, non-empty credential, basic\nusername required, bearer gated by WithAllowBearerForProxy and\nErrBearerRequiresProxy. Internal do() uses NewRequestWithContext,\nurl.JoinPath for control pat\n[…]\nut 30s, override via\nWithHTTPTimeout.\n\nDocument paths and scope in internal/adguard/README.md; add doc.go,\nerrors.go, and white-box tests. Point internal/README.md to the new\npackage and API contract.",
"is_bot": false,
"headline": "feat(adguard): Step 2.1 control client (auth, timeouts, /control URL …",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T07:37:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "02f135138e80a18e88df4b182a6b2e0a5292479d",
"body": "List go fmt/vet/test/build commands and Windows binary note; align with\nclosed Step 1 milestone in repo status. Apply go fmt to cmd/dnsfleet.",
"is_bot": false,
"headline": "chore: document Step 1.6 local quality gate in README",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T06:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba99e489155b51173b3f22ff346d21e70ff265f",
"body": "Wire config.Load and fleetdb.OpenAndMigrate in cmd/dnsfleet; serve plain\ntext ok on /healthz; log listen addr and DB path; update README run docs.\n\nDependency: github.com/labstack/echo/v4",
"is_bot": false,
"headline": "feat(cmd): minimal HTTP entry with Echo and GET /healthz (Step 1.5)",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T06:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dad255060b1f011aeeaf61692ba0466eef84c1c",
"body": "Wire GORM to github.com/glebarez/sqlite, AutoMigrate Node and GlobalConfig,\nclose pool on migrate failure, and add tests (SELECT 1, tables, recreate DB).\n\nUpdate internal/README for the db package.",
"is_bot": false,
"headline": "feat(db): add glebarez SQLite Open/Migrate/OpenAndMigrate for Step 1.4",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T06:04:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cee471cbf75407f3b8013464038d1e7d86088520",
"body": "Add explicit-ID GORM structs, AuthKind/GlobalConfig type constants,\nNormalizeBaseURL with tests, and gorm.io/gorm dependency. Document\nmodels package and internal/README entry points for Step 1.4 DB wiring.",
"is_bot": false,
"headline": "feat(models): add Node and GlobalConfig GORM models",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T06:04:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2764d92ac0360b8a2b4c9381ea5862ad91b5c3f",
"body": null,
"is_bot": false,
"headline": "Create LICENSE",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-09T02:17:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1d3bd2b5492304217661892c19895006e93083f",
"body": "Add internal/config.Load for DNSFLEET_DB_PATH and DNSFLEET_HTTP_ADDR;\nresolve the database file to an absolute path, ensure parent directories\nexist, and reject in-memory DSNs. Add unit tests. Update .env.example and\nthe root and internal README configuration notes.",
"is_bot": false,
"headline": "feat(config): env-based DB path and HTTP listen address",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-08T18:24:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02d0cce94ed37a6534b1af28e86570df77d33d29",
"body": "建立可跟踪的目录占位（cmd/dnsfleet、internal、api、web、deploy、scripts）\n并补充各目录 README 说明用途。\n\n添加 .gitignore（Go/Node 产物、密钥与本地数据、以及本机文档与智能体\n资料不进入远程的策略）、.editorconfig 与 .env.example。\n\n根 README 描述项目定位、公开布局与状态；许可证待后续补充。",
"is_bot": false,
"headline": "chore: bootstrap repo layout and contributor conventions",
"author_name": "lens68",
"author_login": "lens68",
"committed_at": "2026-05-08T18:24:15Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 49,
"latest_release_at": "2026-07-20T04:15:07Z",
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 4,
"days_since_latest_release": 8,
"mean_days_between_releases": 14.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/lensdns/dnsfleet",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/lensdns/dnsfleet",
"is_deprecated": false,
"latest_version": "v0.2.0",
"repository_url": "https://github.com/lensdns/dnsfleet",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T04:17:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"web/tsconfig.json"
],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 57276,
"source_files_sampled": 185,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"web/package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/glebarez/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.15.2"
},
{
"name": "gorm.io/gorm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.31.1"
},
{
"name": "@base-ui/react",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.4.1"
},
{
"name": "@tanstack/react-virtual",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.13.24"
},
{
"name": "class-variance-authority",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "lucide-react",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.14.0"
},
{
"name": "next",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "16.2.6"
},
{
"name": "next-themes",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.4.6"
},
{
"name": "react",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "19.2.4"
},
{
"name": "react-dom",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "19.2.4"
},
{
"name": "shadcn",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.7.0"
},
{
"name": "sonner",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.7"
},
{
"name": "tailwind-merge",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.5.0"
},
{
"name": "tw-animate-css",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.4.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "lens68",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/282587232?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "62 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "acd47b0057dcbd024228ba597a0a5cd118b5375f",
"ran_at": "2026-07-29T01:13:04Z",
"aggregate_score": 2.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T04:23:31Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/LensDNS/DNSFleet",
"host": "github.com",
"name": "DNSFleet",
"owner": "LensDNS"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"security": 25,
"vitality": 64,
"community": 33,
"governance": 32,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 64,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"commits_last_year": 49,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "49 commits in the last year",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 49
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 14.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~14.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 14.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 32,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "LensDNS",
"public_repos": 3,
"account_age_days": 82
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of LensDNS",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "LensDNS"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~0 yr old",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/lensdns/dnsfleet"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "6 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 6
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"adguardhome",
"control-plane",
"dns",
"fleet-management",
"golang",
"homelab",
"infrastructure",
"monitoring",
"networking",
"nextjs",
"observability",
"realtime",
"self-hosted",
"websocket"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "14 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 14
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 25,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 25,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 2.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "62 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 67,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.939,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 49 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 49
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"web/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "web/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "web/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 49",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 49
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 57276,
"source_files_sampled": 185,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/185 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 185,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T01:13:09.683953Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/LensDNS/DNSFleet.svg",
"full_name": "LensDNS/DNSFleet",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.