Nucleus is the native desktop platform for the JVM. Combined with Compose Multiplatform, it forms the most complete, most performant, and most deeply integrated desktop application stack ever built — on any language, any runtime, any platform.
Kotlin · CMIT★ 308 stars⑂ 17 forkssince Feb 2026View on GitHub ↗
NucleusFramework/Nucleus holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Vitality (85/100) and lowest on Security (40/100). It was last updated today. A single contributor accounts for most of its recent work.
59
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
59
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 17 ⇿
0Stars
17Forks
93Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 0Patch 7
OpenSSF Scorecard 4.0 / 10
4.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-24 07:10 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"compose",
"compose-desktop",
"compose-multiplatform",
"desktop",
"desktop-app",
"framework",
"jvm",
"kotlin",
"linux",
"macos",
"native",
"windows"
],
"is_fork": false,
"size_kb": 30577,
"has_wiki": false,
"homepage": "http://nucleusframework.dev/",
"languages": {
"C": 1174555,
"C#": 5300,
"C++": 161930,
"HTML": 5652,
"Java": 27802,
"Rust": 274551,
"Shell": 97078,
"Swift": 14473,
"Kotlin": 4333277,
"Python": 6566,
"Batchfile": 74751,
"PowerShell": 35660,
"AppleScript": 808,
"Objective-C": 569356
},
"pushed_at": "2026-07-23T19:09:36Z",
"created_at": "2026-02-08T19:19:39Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T18:22:53Z",
"description": "Nucleus is the native desktop platform for the JVM. Combined with Compose Multiplatform, it forms the most complete, most performant, and most deeply integrated desktop application stack ever built — on any language, any runtime, any platform.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Kotlin",
"significant_languages": [
"Kotlin",
"C"
]
},
"owner": {
"blog": "https://nucleusframework.dev/",
"name": null,
"type": "Organization",
"login": "NucleusFramework",
"company": null,
"location": "Israel",
"followers": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/283423910?v=4",
"created_at": "2026-05-10T15:29:51Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 74
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.1.6",
"kind": "patch",
"published_at": "2026-07-23T18:59:15Z"
},
{
"tag": "v2.1.5",
"kind": "patch",
"published_at": "2026-07-21T05:26:37Z"
},
{
"tag": "v2.1.4",
"kind": "patch",
"published_at": "2026-07-19T20:20:28Z"
},
{
"tag": "v2.1.3",
"kind": "patch",
"published_at": "2026-07-18T19:41:18Z"
},
{
"tag": "v2.1.2",
"kind": "patch",
"published_at": "2026-07-17T16:11:15Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-07-17T14:44:19Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-07-17T12:30:39Z"
},
{
"tag": "v2.0.7",
"kind": "patch",
"published_at": "2026-07-14T15:20:00Z"
},
{
"tag": "v2.0.6",
"kind": "patch",
"published_at": "2026-07-14T14:26:03Z"
},
{
"tag": "v2.0.5",
"kind": "patch",
"published_at": "2026-07-14T07:03:56Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2026-07-13T20:31:02Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2026-07-13T16:47:35Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2026-07-13T13:42:30Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2026-07-13T11:33:27Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-07-13T10:08:30Z"
},
{
"tag": "v2.0.0-alpha-202607130836",
"kind": "prerelease",
"published_at": "2026-07-13T09:03:01Z"
},
{
"tag": "v2.0.0-alpha-202607130649",
"kind": "prerelease",
"published_at": "2026-07-13T07:28:12Z"
},
{
"tag": "v2.0.0-alpha-202607122115",
"kind": "prerelease",
"published_at": "2026-07-12T21:51:44Z"
},
{
"tag": "v2.0.0-alpha-202607122054",
"kind": "prerelease",
"published_at": "2026-07-12T21:36:43Z"
},
{
"tag": "v2.0.0-alpha-202607121452",
"kind": "prerelease",
"published_at": "2026-07-12T15:35:37Z"
},
{
"tag": "v2.0.0-alpha-202607121302",
"kind": "prerelease",
"published_at": "2026-07-12T13:47:46Z"
},
{
"tag": "v2.0.0-alpha-202607121139",
"kind": "prerelease",
"published_at": "2026-07-12T12:16:04Z"
},
{
"tag": "v2.0.0-alpha-202607121049",
"kind": "prerelease",
"published_at": "2026-07-12T11:21:28Z"
},
{
"tag": "v2.0.0-alpha-202607120908",
"kind": "prerelease",
"published_at": "2026-07-12T09:48:30Z"
},
{
"tag": "v2.0.0-alpha-202607120757",
"kind": "prerelease",
"published_at": "2026-07-12T08:21:09Z"
},
{
"tag": "v2.0.0-alpha-202607120617",
"kind": "prerelease",
"published_at": "2026-07-12T06:57:34Z"
},
{
"tag": "v2.0.0-alpha-202607120312",
"kind": "prerelease",
"published_at": "2026-07-12T00:39:25Z"
},
{
"tag": "v2.0.0-alpha-202607120006",
"kind": "prerelease",
"published_at": "2026-07-11T21:39:26Z"
},
{
"tag": "v2.0.0-alpha-202607101450",
"kind": "prerelease",
"published_at": "2026-07-10T15:47:47Z"
},
{
"tag": "v2.0.0-alpha-202607101432",
"kind": "prerelease",
"published_at": "2026-07-10T15:08:32Z"
},
{
"tag": "v2.0.0-alpha-202607101252",
"kind": "prerelease",
"published_at": "2026-07-10T13:30:20Z"
},
{
"tag": "v2.0.0-alpha-202607101141",
"kind": "prerelease",
"published_at": "2026-07-10T12:14:17Z"
},
{
"tag": "v2.0.0-alpha-202607100953",
"kind": "prerelease",
"published_at": "2026-07-10T10:43:10Z"
},
{
"tag": "v2.0.0-alpha-202607100944",
"kind": "prerelease",
"published_at": "2026-07-10T10:15:46Z"
},
{
"tag": "v2.0.0-alpha-202607100509",
"kind": "prerelease",
"published_at": "2026-07-10T05:38:00Z"
},
{
"tag": "v2.0.0-alpha-202607072216",
"kind": "prerelease",
"published_at": "2026-07-07T22:44:25Z"
},
{
"tag": "v2.0.0-alpha-202607050350",
"kind": "prerelease",
"published_at": "2026-07-05T01:25:00Z"
},
{
"tag": "v2.0.0-alpha-202607042242",
"kind": "prerelease",
"published_at": "2026-07-04T20:30:30Z"
},
{
"tag": "v2.0.0-alpha-202607042238",
"kind": "prerelease",
"published_at": "2026-07-04T20:18:46Z"
},
{
"tag": "v2.0.0-alpha-202607042201",
"kind": "prerelease",
"published_at": "2026-07-04T19:32:52Z"
},
{
"tag": "v2.0.0-alpha-202607031556",
"kind": "prerelease",
"published_at": "2026-07-03T16:33:18Z"
},
{
"tag": "v2.0.0-alpha-202607022249",
"kind": "prerelease",
"published_at": "2026-07-02T20:24:16Z"
},
{
"tag": "v2.0.0-alpha-202607022133",
"kind": "prerelease",
"published_at": "2026-07-02T19:08:19Z"
},
{
"tag": "v2.0.0-alpha-202607021927",
"kind": "prerelease",
"published_at": "2026-07-02T17:03:25Z"
},
{
"tag": "v2.0.0-alpha-202607021635",
"kind": "prerelease",
"published_at": "2026-07-02T14:06:44Z"
},
{
"tag": "v2.0.0-alpha-202607021343",
"kind": "prerelease",
"published_at": "2026-07-02T11:15:15Z"
},
{
"tag": "v2.0.0-alpha-202606221352",
"kind": "prerelease",
"published_at": "2026-06-22T14:23:32Z"
},
{
"tag": "v2.0.0-alpha-202606221012",
"kind": "prerelease",
"published_at": "2026-06-22T10:45:58Z"
},
{
"tag": "v2.0.0-alpha-202606211135",
"kind": "prerelease",
"published_at": "2026-06-21T11:56:17Z"
},
{
"tag": "v2.0.0-alpha-202606211035",
"kind": "prerelease",
"published_at": "2026-06-21T11:08:42Z"
},
{
"tag": "v2.0.0-alpha-202606201807",
"kind": "prerelease",
"published_at": "2026-06-20T18:41:48Z"
},
{
"tag": "v2.0.0-alpha-202606161353",
"kind": "prerelease",
"published_at": "2026-06-16T14:30:31Z"
},
{
"tag": "v2.0.0-alpha-202606141334",
"kind": "prerelease",
"published_at": "2026-06-14T14:03:48Z"
},
{
"tag": "v2.0.0-alpha-202606141321",
"kind": "prerelease",
"published_at": "2026-06-14T13:47:07Z"
},
{
"tag": "v2.0.0-alpha-202606141059",
"kind": "prerelease",
"published_at": "2026-06-14T11:23:33Z"
},
{
"tag": "v2.0.0-alpha-202606140317",
"kind": "prerelease",
"published_at": "2026-06-14T03:49:17Z"
},
{
"tag": "v2.0.0-alpha-202606120501",
"kind": "prerelease",
"published_at": "2026-06-12T05:33:26Z"
},
{
"tag": "v2.0.0-alpha-202606120411",
"kind": "prerelease",
"published_at": "2026-06-12T04:36:59Z"
},
{
"tag": "v2.0.0-alpha-202606111819",
"kind": "prerelease",
"published_at": "2026-06-11T18:54:36Z"
},
{
"tag": "v2.0.0-alpha-202606111354",
"kind": "prerelease",
"published_at": "2026-06-11T14:31:21Z"
},
{
"tag": "v2.0.0-alpha-202606080531",
"kind": "prerelease",
"published_at": "2026-06-08T06:07:22Z"
},
{
"tag": "v2.0.0-alpha-202606080354",
"kind": "prerelease",
"published_at": "2026-06-08T04:22:34Z"
},
{
"tag": "v2.0.0-alpha-202606072156",
"kind": "prerelease",
"published_at": "2026-06-07T22:26:16Z"
},
{
"tag": "v2.0.0-alpha-202606072026",
"kind": "prerelease",
"published_at": "2026-06-07T20:51:47Z"
},
{
"tag": "v2.0.0-alpha-202606071935",
"kind": "prerelease",
"published_at": "2026-06-07T20:04:05Z"
},
{
"tag": "v2.0.0-alpha-202606070905",
"kind": "prerelease",
"published_at": "2026-06-07T06:38:43Z"
},
{
"tag": "v2.0.0-alpha-202606070010",
"kind": "prerelease",
"published_at": "2026-06-07T00:37:17Z"
},
{
"tag": "v2.0.0-alpha-202606062218",
"kind": "prerelease",
"published_at": "2026-06-06T22:46:02Z"
},
{
"tag": "v2.0.0-alpha-202606062052",
"kind": "prerelease",
"published_at": "2026-06-06T21:19:28Z"
},
{
"tag": "v2.0.0-alpha-202606061915",
"kind": "prerelease",
"published_at": "2026-06-06T19:50:28Z"
},
{
"tag": "v2.0.0-alpha-202606061820",
"kind": "prerelease",
"published_at": "2026-06-06T18:38:43Z"
},
{
"tag": "v2.0.0-alpha-202606051522",
"kind": "prerelease",
"published_at": "2026-06-05T12:42:45Z"
},
{
"tag": "v2.0.0-alpha-202606041020",
"kind": "prerelease",
"published_at": "2026-06-04T10:50:07Z"
},
{
"tag": "v2.0.0-alpha-202606040949",
"kind": "prerelease",
"published_at": "2026-06-04T10:18:51Z"
},
{
"tag": "v2.0.0-alpha-202606040901",
"kind": "prerelease",
"published_at": "2026-06-04T09:31:39Z"
},
{
"tag": "v2.0.0-alpha-202606040838",
"kind": "prerelease",
"published_at": "2026-06-04T09:07:16Z"
},
{
"tag": "v2.0.0-alpha-202606040741",
"kind": "prerelease",
"published_at": "2026-06-04T08:08:56Z"
},
{
"tag": "v2.0.0-alpha-202606032026",
"kind": "prerelease",
"published_at": "2026-06-03T20:57:21Z"
},
{
"tag": "v2.0.0-alpha-202606031923",
"kind": "prerelease",
"published_at": "2026-06-03T19:52:05Z"
},
{
"tag": "v2.0.0-alpha-202606031543",
"kind": "prerelease",
"published_at": "2026-06-03T16:13:10Z"
},
{
"tag": "v2.0.0-alpha-202606022149",
"kind": "prerelease",
"published_at": "2026-06-02T22:22:16Z"
},
{
"tag": "v2.0.0-alpha-202606022036",
"kind": "prerelease",
"published_at": "2026-06-02T21:06:00Z"
},
{
"tag": "v2.0.0-alpha-202606021941",
"kind": "prerelease",
"published_at": "2026-06-02T20:10:12Z"
},
{
"tag": "v2.0.0-alpha-202606021627",
"kind": "prerelease",
"published_at": "2026-06-02T16:55:28Z"
},
{
"tag": "v2.0.0-alpha-202606021340",
"kind": "prerelease",
"published_at": "2026-06-02T14:06:05Z"
},
{
"tag": "v2.0.0-alpha-202606021118",
"kind": "prerelease",
"published_at": "2026-06-02T11:49:10Z"
},
{
"tag": "v2.0.0-alpha-202605312253",
"kind": "prerelease",
"published_at": "2026-05-31T23:14:48Z"
},
{
"tag": "v2.0.0-alpha-202605312118",
"kind": "prerelease",
"published_at": "2026-05-31T21:43:06Z"
},
{
"tag": "v2.0.0-alpha-202605312050",
"kind": "prerelease",
"published_at": "2026-05-31T21:10:00Z"
},
{
"tag": "v2.0.0-alpha-202605311925",
"kind": "prerelease",
"published_at": "2026-05-31T19:51:02Z"
},
{
"tag": "v2.0.0-alpha-202605311805",
"kind": "prerelease",
"published_at": "2026-05-31T18:27:32Z"
},
{
"tag": "v2.0.0-alpha-202605311718",
"kind": "prerelease",
"published_at": "2026-05-31T17:47:49Z"
},
{
"tag": "v2.0.0-alpha-202605311047",
"kind": "prerelease",
"published_at": "2026-05-31T11:17:33Z"
},
{
"tag": "v2.0.0-alpha-202605310906",
"kind": "prerelease",
"published_at": "2026-05-31T09:31:53Z"
},
{
"tag": "v2.0.0-alpha-202605310416",
"kind": "prerelease",
"published_at": "2026-05-31T04:49:07Z"
},
{
"tag": "v2.0.0-alpha-202605291533",
"kind": "prerelease",
"published_at": "2026-05-29T16:02:06Z"
},
{
"tag": "v2.0.0-alpha-202605291032",
"kind": "prerelease",
"published_at": "2026-05-29T10:56:21Z"
},
{
"tag": "v2.0.0-alpha-202605290831",
"kind": "prerelease",
"published_at": "2026-05-29T08:57:59Z"
},
{
"tag": "v2.0.0-alpha-202605290750",
"kind": "prerelease",
"published_at": "2026-05-29T08:20:12Z"
},
{
"tag": "v2.0.0-alpha-202605290156",
"kind": "prerelease",
"published_at": "2026-05-29T02:24:23Z"
}
],
"recent_commits": [
{
"oid": "1e9c35fc653f8b3e454e37b6354b9b1e5fef6c04",
"body": "feat: upgrade Jewel to 0.39 and IntelliJ icons to 262",
"is_bot": false,
"headline": "Merge pull request #395 from NucleusFramework/feat/jewel-0.39-upgrade",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-23T18:22:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec35c9f97e5054d41ebd04e048e0acf8016a78ca",
"body": "…orated-window-jewel\n\n- Relocate Jewel UnsafeAccessing/MacPlatformServicesDefaultImpl/foundation.util\n build-time init and java.lang.Module#implAddOpens reflection to the\n decorated-window-jewel module so they ship only with Jewel consumers\n- Keep only the generic slf4j build-time init in graalvm-runtime",
"is_bot": false,
"headline": "refactor(graalvm): move Jewel-specific native-image metadata into dec…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-23T18:18:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b19ee58cd88d6b2441e31b5a588e4f406b091ad5",
"body": "- Bump jewel 0.37.0-262.4852.51 -> 0.39.0-262.9437.21 and icons 261 -> 262\n- Add intellij-icons-api/impl deps (Jewel 0.39 IntUiTheme needs IconManager/DefaultIconManager)\n- Add intellij-repository snapshots maven repo\n- GraalVM: initialize-at-build-time for Jewel UnsafeAccessing/MacPlatformServicesD\n[…]\nactor demo-project detection to path.startsWith(\":examples:\")\n- system-info-demo: enable AOT cache + aotTraining, drop AWT --add-opens, SerialGC\n- Register java.lang.Module#implAddOpens for reflection",
"is_bot": false,
"headline": "feat: upgrade Jewel to 0.39 and IntelliJ icons to 262",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-23T18:10:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f9a2e1a70941cb635a5761cd4e0730ca86c7f629",
"body": "…-heap\n\nfeat(graalvm): desktop-appropriate default max heap for native images",
"is_bot": false,
"headline": "Merge pull request #390 from NucleusFramework/feat/graalvm-native-max…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T18:08:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8087c34b2a46dbd8b14fff2b2bb2debb84cfe41e",
"body": "…ages\n\nNative modules call System.loadLibrary from the unnamed module; since\nJDK 24 (JEP 472) that emits a restricted-method warning at startup and\nwill be blocked in a future release. The JVM run path already passed the\nflag — bake it into the native-image build args too so the produced\nbinary starts clean and stays forward-compatible.",
"is_bot": false,
"headline": "feat(graalvm): bake --enable-native-access=ALL-UNNAMED into native im…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T18:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "726f7ff7cf4861a91b36bab9ba5328fd3cdfe1ef",
"body": "… images\n\nnative-image's Serial GC defaults the max heap to 80% of physical RAM (25.6 GB on a\n32 GB machine), far above a desktop app's norm. HotSpot — which Compose Desktop apps\nalready run under on the JVM — defaults to ~25% (MaxRAMPercentage). Bake that parity\ndefault into native images via -R:Ma\n[…]\nsolute -R:MaxHeapSize and takes precedence.\n- Both are defaults only, overridable at runtime via -Xmx / -XX:MaximumHeapSizePercent.\n- Set maxHeapSizePercent = 80 to restore native-image's own default.",
"is_bot": false,
"headline": "feat(graalvm): bake a desktop-appropriate default max heap for native…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T18:01:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2e12e92739bb021a0029933deb22a99eb8e66c81",
"body": "…bfuscation\n\nfeat(graalvm): native-image advanced obfuscation + obfuscate-safe ProGuard rules",
"is_bot": false,
"headline": "Merge pull request #389 from NucleusFramework/feat/graalvm-advanced-o…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T17:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edb2b75a89051a2808d01a931e334cfdf088b053",
"body": "…e globs\"\n\nRestore the blanket font/icon globs: they are required for resources bundled inside\nlibrary JARs (e.g. Jewel's SVG icons), which are NOT the app's own resources and so\nare not covered by the plugin's per-root autoIncludeResources. Dropping them broke\nJewel icons in the native image. The \"pattern too generic\" warning they trigger is\nadvisory only; correctness wins. Documented in CLAUDE.md to prevent re-removal.",
"is_bot": false,
"headline": "Revert \"fix(graalvm-runtime): drop blanket **/*.{svg,ttf,otf} resourc…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T17:51:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6025181fc58d12d687d2614573a990fbf6cad51e",
"body": "They triggered native-image's \"pattern too generic (** without previous literal)\"\nwarning and matched nothing useful at the framework level: an app's own icons/fonts\nlive under its resource roots and are already registered per-root (literal-prefixed\nglobs like icons/**) by the plugin's autoIncludeRe\n[…]\nomposeResources/**. The blanket patterns were redundant and a bloat risk\n(would embed every .ttf/.svg from every dependency). Apps bundling resources at a\nnon-standard location can add their own glob.",
"is_bot": false,
"headline": "fix(graalvm-runtime): drop blanket **/*.{svg,ttf,otf} resource globs",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T17:49:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72541426ee7a4d5c65de5e86b9bcee7e6b55e2ff",
"body": "…adata globs\n\nThe -H:IncludeResources option is deprecated and warns at build time (\"Use a\nresource-config.json ... instead\"). Move the four resource inclusion patterns from\nnative-image.properties into the module's reachability-metadata.json \"resources\"\nsection as glob patterns (regex .* -> glob **\n[…]\non. Semantics preserved: globstar matches at any level including\nthe root, so **/*.svg still matches root-level resources. SharedArenaSupport (no\nmetadata equivalent) stays in native-image.properties.",
"is_bot": false,
"headline": "fix(graalvm-runtime): migrate -H:IncludeResources to reachability-met…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T17:44:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c60fdfdf6ccf8526c9521bf11ef74005c09d979",
"body": "…bfuscation\n\n- Add -H:+UnlockExperimentalVMOptions before -H:AdvancedObfuscation= so it keeps\n working on future GraalVM releases (which will require explicit unlocking) and to\n silence the experimental-option warning.\n- Pass --enable-sbom=export when advanced obfuscation is on: Oracle GraalVM emb\n[…]\nlt, baking the full dependency list into the binary and re-leaking\n what obfuscation hides. Exporting keeps the SBOM as a build artifact without\n embedding it. Overridable via buildArgs (last wins).",
"is_bot": false,
"headline": "fix(graalvm): unlock experimental option + export SBOM for advanced o…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T17:36:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab841132ac6850a4be5fc580028c699b8f6a548f",
"body": "… ProGuard rules\n\n- graalvm { advancedObfuscation = true } passes -H:AdvancedObfuscation= (Oracle\n GraalVM only, gated on the resolved toolchain and warns otherwise) so symbol\n names baked into the native binary (stack traces, heap dumps, Class#getName,\n strings) are obfuscated. Reflection/JNI na\n[…]\ned. Prevents ClassNotFoundException: androidx.compose.runtime.Composer.\n Not injected when obfuscation is off, so shrinking is unaffected.\n- examples: enable the new toggles in cmp-demo/nucleus-demo.",
"is_bot": false,
"headline": "feat(graalvm): advanced obfuscation for native image + obfuscate-safe…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T17:30:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0b50ed977b205d84c9779130e3075f745f45d01",
"body": "…aths\n\nUpdate stale sample-tao/ ignore entries to examples/tao-demo/ (module was\nrenamed) and add GraalVM native-image build-output patterns. PGO profiles\nunder graalvm/pgo/ remain trackable.",
"is_bot": false,
"headline": "chore: ignore GraalVM build output and fix tao-demo native artifact p…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T16:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed915de2ae8f83bda9498dd3245702bcd5f7af97",
"body": "…eaks\n\nfix(tao): scope JNI local refs on permanently-attached upcall threads",
"is_bot": false,
"headline": "Merge pull request #387 from NucleusFramework/fix/tao-jni-local-ref-l…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T12:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09452c5daaa485963ee33619d5986327923f7b1e",
"body": "Object-creating upcalls (find_class / new_string / new_long_array /\nnew_object_array) on threads attached via attach_current_thread_permanently\n— or nested-attached on the already-permanent Tao loop thread — never had\ntheir local frame popped, so each call leaked local refs for the life of the\nproce\n[…]\nwhose AttachGuard detaches per call; the new_long_array sites in\ndecoration/monitor/handles are JNI exports whose frame the JVM pops on return.\n\nVerified with cargo check on the macOS target (exit 0).",
"is_bot": false,
"headline": "fix(tao): scope JNI local refs on permanently-attached upcall threads",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T11:29:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "569de50a074b5230715c31c5e6a7903db2fdc85a",
"body": "…dedup\n\nrefactor(tao): extract shared scene drag-and-drop into TaoSceneDnD",
"is_bot": false,
"headline": "Merge pull request #386 from NucleusFramework/refactor/tao-scene-dnd-…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T10:14:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0817ddcd78983ce20aabef81301f624aa96e582",
"body": "The macOS/Windows/Linux Compose scene hosts each carried a byte-identical\ncopy of the inbound DnD callback (makeDragEvent/makeDropEvent + the\nonDragEnter/Over/Leave/Drop node handoff) and the outbound drag launcher —\n~130 lines per host, differing only in the native bridge object name and\nthe first \n[…]\nompile together on any OS (platform selection is at runtime), so the\nWindows/Linux delegations are compiler-validated locally too.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(tao): extract shared scene drag-and-drop into TaoSceneDnD",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T09:15:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4fbe7f1c95269b2fe191f3979e82c2e54dd3a651",
"body": "…ion-discipline\n\nfix(tao): clear pending JNI exceptions after a11y/deep-link upcalls",
"is_bot": false,
"headline": "Merge pull request #385 from NucleusFramework/fix/tao-a11y-jni-except…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T08:55:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6605bfe394b50bd595433959eb5eaa6fde3521a2",
"body": "The accessibility and deep-link native→JVM callbacks invoke\n`NativeTaoBridge.dispatch*` via `call_static_method` but never\n`exception_check`/`exception_clear` afterwards — unlike the\npointer/key/touch/DnD dispatch paths in events.rs/dnd.rs/touch.rs, which\nall do.\n\nIf a Kotlin `dispatchA11y*` / `disp\n[…]\n clean (cargo check); Windows/Linux a11y are\ncfg-gated and validated by rustfmt parse-check + copying the proven\npattern verbatim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tao): clear pending JNI exceptions after a11y/deep-link upcalls",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T08:13:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b3c27f6bbf9fb031b6a6ae9d88f9013526b5843c",
"body": "…n-minimize\n\nfeat(tao): pause the render loop while the window is minimized",
"is_bot": false,
"headline": "Merge pull request #384 from NucleusFramework/feat/tao-pause-render-o…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T08:06:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a6275df12e8190e307ff691c0c731e2a2d70026",
"body": "Gate each platform scene host's frame body on window.isMinimized, placed\nbefore the frame-clock tick. Skipping sendFrame parks Compose animations\n(no withFrameNanos tick means no re-invalidation), so the FrameDispatcher\nquiesces instead of recording + presenting into a hidden surface.\n\n- macOS (rend\n[…]\nhrottle,\n and additionally covers the app-synthesised Wayland minimize.\n- Restore re-kicks via requestRedraw on the MINIMIZED-off event, since the\n parked loop no longer re-arms a redraw on its own.",
"is_bot": false,
"headline": "feat(tao): pause the render loop while the window is minimized",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T07:54:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6bbfea323b1899b0db47acb3ae351859819c80f",
"body": "…surface\n\nfeat(tao): reintroduce Linux CSD drop shadow via a dedicated wl_shm subsurface (#374)",
"is_bot": false,
"headline": "Merge pull request #382 from NucleusFramework/feat/374-tao-shadow-sub…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:58:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3792da2774e64d9b3337b674f1e5a14e5c2f52d2",
"body": "Flip NUCLEUS_TAO_LINUX_SHADOW to a kill switch (=0 disables) instead of opt-in\n(=1). The host still gates the shadow to Wayland non-popup windows (X11 stays\nflat) and it no-ops when the compositor lacks wl_shm / an RGBA visual, so the\ndefault-on is safe with an escape hatch.",
"is_bot": false,
"headline": "feat(tao): enable the Linux CSD drop shadow by default",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:33:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef8c09e8ab8abf6882555673929dc011c42692a8",
"body": "Import TaoWindowShadowLinux instead of a fully-qualified reference, and collapse\nthe toTile() single-expression body onto its signature. ktlintCheck + detekt\nclean on decorated-window-tao.",
"is_bot": false,
"headline": "style(tao): ktlint fixes for the shadow controller wiring",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "077bf2569d476cbd254b20b711ec30102ecb43e7",
"body": "Approach B rings the content with a negative-offset subsurface and never\ndeclares a WM margin or an input shape, so nativeShadowApply\n(gdk_window_set_shadow_width + window-state-event handler) and\nnativeShadowSetInputShape are dead. Remove both JNI entry points, their\nexclusive helpers (ShadowMargin\n[…]\n, shadow_apply_effective,\nshadow_on_window_state_event, the state-mask + event-struct), and the Kotlin\ndeclarations. C compiles clean under -Wall; only nativeShadowSupported/\nRender/ThemeStamp remain.",
"is_bot": false,
"headline": "refactor(tao): drop dead shadow WM-margin / input-shape bridge",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:28:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f507605f068e6617f375b7df21f86aa853834544",
"body": "…ild tasks\n\nbuildNative<OS> writes the JNI libraries into src/main/resources/nucleus/native\n— a resource dir that GenerateProjectResourceMetadataTask reads — so Gradle 9\nflagged an implicit-dependency validation error (the source set doesn't declare\nsrc/main/resources as a build output, so the FileC\n[…]\n. Depend explicitly on each resource-contributing project's\nbuildNative* tasks; non-host variants self-skip so it's harmless.\n\nSurfaced once a native-source change makes buildNativeLinux actually run.",
"is_bot": false,
"headline": "fix(plugin): wire generateGraalvmProjectResourceMetadata to native bu…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:20:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ef80535be89cc54f4d72b6ac386bbc12da2804ed",
"body": "Re-add the JNI reachability entry dropped by #374's removal. Without it,\nnative-image silently eliminates the shadow bridge and the theme render fails\nat runtime. NativeTaoEglBridge (which gained the shadow subsurface methods) is\nalready registered class-wide (jniAccessible), so its new methods are covered.",
"is_bot": false,
"headline": "build(tao): re-register NativeTaoLinuxShadowBridge for native-image",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f35e24cc5b67b2745da174cc875adb8d87b13708",
"body": "shadow_ensure_buffer no longer tears down and recreates the memfd + mmap +\nwl_shm_pool on every size change (interactive resize churned one per frame).\nThe backing store is created once and grown in place (ftruncate + wl_shm_pool\n.resize + remap, grow-only); only the lightweight wl_buffer view is recreated\non a dimension change. Exact-size commits (focus fade, theme) reuse everything\nwith zero protocol traffic.",
"is_bot": false,
"headline": "perf(tao): reuse the shadow shm pool across resize frames",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83d78ee1be37e0d379a5c65bbc8a14751994d24a",
"body": "The real cause of the backdrop-during-resize: onFocusChanged cleared\ncompositorDragActive on any focus-in, but GNOME toggles keyboard focus *during*\na compositor resize/move grab. That mid-grab focus-in cleared the mask, so the\nnext focus-out flipped the shadow to backdrop for the rest of the drag (\n[…]\ne mask on real pointer motion resuming (the compositor withholds motion\nfor the whole grab, so first motion = grab ended) instead of on focus-in, and\nre-sync the shadow to the actual focus state then.",
"is_bot": false,
"headline": "fix(tao): don't unmask shadow focus on mid-grab focus-in",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T04:02:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30f217b49d02c9016e093fbf1bd5a4fe9ee09313",
"body": "A compositor resize/move grab makes GTK report focus-out for the whole drag, so\nthe shadow cross-faded to backdrop mid-resize. The onFocusChanged masking (focus\n|| compositorDragActive) could still let an edge through on event ordering.\nRe-assert the focused state every frame while compositorDragActive is live in\ncommitShadow — idempotent once already focused.",
"is_bot": false,
"headline": "fix(tao): keep focused shadow during compositor resize/move grab",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T03:56:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d48ac26605a8aeb86afa6867950688c72bf7ac16",
"body": "…ffset\n\nThe first cut offset the content subsurface into the shadow ring and grew the\nsurface via gdk_window_set_shadow_width. That moved the visible content while\ninput/resize stayed relative to GTK's parent surface origin — clicks landed\noffset and the resize edges were unreachable.\n\nPivot: leave \n[…]\nn\n declaration / grow) — margins now only size the shadow buffer\n- host: pass -inset offsets to nativeShadowCommit, no content offset\n\nRebuilt linux-x64 natives into resources + cleared loader cache.",
"is_bot": false,
"headline": "fix(tao): shadow via negative-offset sibling subsurface, no content o…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-21T03:52:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cf4b590af0393d205346491d94f9ca611f430048",
"body": "… host\n\n- TaoComposeSceneHostLinux: initShadow() arms the controller on attach (Wayland,\n non-popup), declares WM margins and offsets the content subsurface into the\n ring; commitShadow() uploads the nine-slice tile to the shadow subsurface each\n frame after the content swap and hides it while ma\n[…]\nindow-tao:compileKotlin) and both native .so link with the\nnew JNI symbols exported. Wayland runtime behaviour still unverified (can't\nexercise the Wayland path on this box — needs on-device testing).",
"is_bot": false,
"headline": "feat(tao): shadow subsurface phase 3 — wire controller into the Linux…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T20:25:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "057021b6ae409fb7a8ac7ff1c39f3bc3684aa9e0",
"body": "… (Wayland)\n\nThe core of approach B. In nucleus_tao_egl.c:\n- bind wl_shm alongside wl_compositor/wl_subcompositor at attach; store the\n parent wl_surface + wl_display on the attachment\n- lazily create a second wl_subsurface placed *below* the content one, backed\n by an anonymous memfd wl_shm ARGB8\n[…]\nidge: declare the three new external methods.\n\nCompiles (gcc object + :decorated-window-tao:compileKotlin). Not yet wired into\nthe host; Wayland runtime behaviour unverified (needs on-device testing).",
"is_bot": false,
"headline": "feat(tao): shadow subsurface phase 2+3 — native SHM shadow subsurface…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T20:21:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a2fb796f6fe12e456e260c2e044ce3c29873ffe",
"body": "…dations\n\nApproach B (Wayland-only) for reintroducing the CSD drop shadow removed in\n\\#374: a dedicated wl_subsurface backed by a wl_shm ARGB buffer, always\nalpha-blended by the compositor, instead of riding in the possibly-opaque EGL\ncontent buffer that broke #361.\n\nPhase 1 (no compositing yet):\n- \n[…]\nshadow as a small canonical nine-slice tile (blended by focus fraction) for\n the native SHM compositor to expand — drops the old Skia nine-slice draw\n- design doc: docs/linux-csd-shadow-subsurface.md",
"is_bot": false,
"headline": "feat(tao): shadow subsurface phase 1 — theme render + controller foun…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T20:09:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "96bbc21402ae4917994755d4f067b03ec44b0898",
"body": "…ow-v2\n\nfix(tao): remove Linux CSD drop shadow (#374)",
"is_bot": false,
"headline": "Merge pull request #381 from NucleusFramework/fix/374-remove-csd-shad…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:57:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5be63ca01e152fc5fa610cecd68a1e97034eef03",
"body": "The GTK CSD drop shadow added in #361 rendered as an opaque black frame on\ndriver stacks that present the EGL child buffer as opaque (alpha not\nhonored): the shadow lived in that buffer and its BlendMode.CLEAR margin\ncarve showed pure black (NixOS/GNOME Wayland). The shadow also required the\ncontent\n[…]\nion carves rounded corners only;\n currentResizeDirection drops shadow insets\n- DecoratedWindow: drop shadow padding + surface-grow bookkeeping\n- build.sh / reachability-metadata: drop the shadow bits",
"is_bot": false,
"headline": "fix(decorated-window-tao): remove Linux CSD drop shadow (#374)",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:54:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10142bdcea211b939b641847e529aefd9709abff",
"body": "…ct-consumer-rules\n\nfeat(proguard): apply dependencies' META-INF/proguard consumer rules",
"is_bot": false,
"headline": "Merge pull request #380 from NucleusFramework/feat/proguard-auto-inje…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3dfc9abe8ad0c06be8054362f953a22b62af023",
"body": "…ng fix suffices",
"is_bot": false,
"headline": "refactor(proguard): drop dependency consumer-rule harvesting; shadowi…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b6584b900605af476ca98369bc595b6d950b694",
"body": "Root cause: the plugin classpath also carries the JetBrains Compose Gradle\nplugin, which bundles a resource with the identical name\ndefault-compose-desktop-rules.pro. getResourceAsStream returned the upstream\ncopy, so Nucleus's enriched rules (JNI keeps for every native module,\n-dontwarn dev.nucleus\n[…]\nmodules, so the per-module consumer\n.pro files added earlier are redundant and removed again; the dependency\nconsumer-rule harvesting in AbstractProguardTask stays (R8 parity for 3rd-party\nlibraries).",
"is_bot": false,
"headline": "fix(proguard): stop upstream Compose shadowing Nucleus's default rules",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:30:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d21f94d5188b1d4aa477259b7ccaa1a0c5daa8b",
"body": "…etector\n\nProGuard's shrinker cannot see native call sites, so it stripped callback methods\ninvoked from native by name, crashing minified apps at runtime:\n- decorated-window-tao: NoSuchMethodError onEvent (nativeRunBlocking) — keep all\n callback interfaces/impls (*Callback/*Listener/*Dispatcher) and native methods\n- darkmode-detector: onThemeChanged callback + native methods\n\nMirrors each module's native-image reachability metadata.",
"is_bot": false,
"headline": "fix(proguard): keep JNI callback/native surface of tao and darkmode-d…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:22:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6317b3e2bc6124e74831f854f213c50b3fb4c61e",
"body": "…y refs\n\nNow that the plugin applies dependencies' META-INF/proguard rules, ship the\n-dontwarn rules Nucleus modules need for references that are legitimately absent\nfrom a minified release:\n\n- graalvm-runtime: org.graalvm.* / com.oracle.svm.* (native-image build-time API)\n- decorated-window-tao: or\n[…]\n/ .devtools.* (hot reload, dev only)\n- nucleus-application, decorated-window-material2/3: the jbr/jni backend classes\n dev.nucleusframework.window.DecoratedWindowKt / DecoratedDialogKt, unused on Tao",
"is_bot": false,
"headline": "feat(proguard): ship consumer -dontwarn rules for optional/compileOnl…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:12:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c4edd5f488099c2738a40f48702c438be709c965",
"body": null,
"is_bot": false,
"headline": "feat(proguard): apply dependencies' META-INF/proguard consumer rules",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:07:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d172d17f3922708555bc6ef769f9cf52cd3d257",
"body": "…fault backend\n\nThe flagship nucleus-demo and all recent demos depend on decorated-window-tao;\njni/jbr are legacy/maintenance-only. CLAUDE.md still listed jni as recommended\nand didn't list the tao module at all.",
"is_bot": false,
"headline": "docs: retire stale decorated-window-jni recommendation; tao is the de…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T19:05:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4196298ff242a332bcf6fb94141a47d9f3ebba48",
"body": "…de-project-resources\n\nfeat(graalvm): auto-include the project's own resources in native image",
"is_bot": false,
"headline": "Merge pull request #379 from NucleusFramework/feat/graalvm-auto-inclu…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T18:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8178381005578c58e3628237b476a7f2819c79cc",
"body": "…nferred",
"is_bot": false,
"headline": "fix(graalvm): wire resource source-dir collections so task deps are i…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T18:40:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb238645719b941278e4065b3f76c59fe537753b",
"body": "native-image only embeds resources it is explicitly told about, and dynamic\ngetResourceAsStream(computedPath) calls cannot be resolved statically. Assets\nloaded by a computed path (e.g. markdown files listed in an index) were silently\ndropped from the binary, unlike the JVM distribution where every \n[…]\nM / Java) plus those of project(...) module\ndependencies. Third-party JAR resources stay excluded (covered by L1/L2 metadata\nand static analysis). Opt out via graalvm { autoIncludeResources = false }.",
"is_bot": false,
"headline": "feat(graalvm): auto-include the project's own resources in native image",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T18:32:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a51acd86f004385665361f5d6f51d9149d2e19e5",
"body": "fix(tao): audit hardening — native fixes, test coverage, host refactor, logging",
"is_bot": false,
"headline": "Merge pull request #378 from NucleusFramework/fix/tao-audit-hardening",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T18:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f0c164f7557a35f8e22a69957e88a8ee4390530",
"body": "Replace the scattered System.err.println / printStackTrace diagnostics with\nthe module's established java.util.logging pattern\n(Logger.getLogger(\"dev.nucleusframework.window.tao.<feature>\")):\n\n- TaoAccessibility: two env-gated a11y traces -> a11yLogger.fine {}\n- NativeViewOverlayControllerWindows: o\n[…]\nt as-is: surfacing an\nuncaught dispatched-task failure on stderr is a deliberate choice there.\n\ndetekt regenerated (no new actionable findings beyond the existing baseline);\ncheck + reformatAll green.",
"is_bot": false,
"headline": "refactor(tao): route residual stderr logging through java.util.logging",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T17:06:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb99ca6021a9cd795877fbb6ec175bff03c93fde",
"body": "… ABI leak\n\nNo observable behaviour change; internal structure only.\n\n- AbstractTaoComposeSceneHost: hoist the a11y debounce scheduler (the one\n subsystem that was byte-identical across the macOS/Linux/Windows hosts)\n and the pointer-button mapping into a shared base the three hosts now\n extend. \n[…]\nays green apart from the intentional TaoTransferableAccess removal\n(apiDump'd). Local: check + taoHeadfulTest green, tao-demo runs and the AT-SPI\nprojection is unchanged (36 nodes, same roles/labels).",
"is_bot": false,
"headline": "refactor(tao): share scene-host base, generic popup context, hide DnD…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T16:45:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbc78a4d04bc7c4b9eafa9081fb560d71f42d030",
"body": "… and battery drift\n\n- TaoA11yProjectionTest (stage-1, also registered in the battery):\n Compose semantics -> TaoSemanticsObserver -> controller snapshot ->\n v7 wire bytes, including role/action/testTag projection, update\n propagation, topology invariants and a full wire-format walk. The\n contro\n[…]\n is missing from TaoSceneTestBattery, when a registered case is\n stale, or when a new test class is neither registered nor declared\n JVM-only — eliminating silent drift in the GraalVM image battery.",
"is_bot": false,
"headline": "test(tao): cover the a11y projection, DnD conversion, popup lifecycle…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T16:20:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be7a9362fafa2f07f52a4ec229e8b5a20b2ab09d",
"body": "- UIA (Windows a11y): take proj->lock in Element_Simple_GetPropertyValue\n and Element_Value_get_Value. apply_snapshot frees label/valueStr/\n customActions under that lock, and UIA proxies can call back from\n outside the STA through transient marshalled references (see\n byid_free_table), so the u\n[…]\nget_get_type through the shared loader\n instead of a leaked per-call dlopen, and own the input-box callback\n global ref via a GObject destroy-notify so GTK-side finalisation can\n no longer leak it.",
"is_bot": false,
"headline": "fix(tao): harden native bridges against races and resource leaks",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-20T02:32:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f02ef003fbe8a3dfcb98576d3b6ad6892658e723",
"body": "…n-button-colors\n\nfix(tao): apply TitleBarStyle color overrides to caption buttons",
"is_bot": false,
"headline": "Merge pull request #377 from NucleusFramework/fix/tao-titlebar-captio…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T19:51:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ba43cd3644e8cf87efd263965698e42431dfe39",
"body": "…n buttons",
"is_bot": false,
"headline": "fix(tao): apply TitleBarStyle color overrides to Windows/Linux captio…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T19:45:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea0a4110c774a6134f338b90aada003a9a4e0b2f",
"body": "ci: cache native builds, merge per-platform artifacts, cancel superseded runs",
"is_bot": false,
"headline": "Merge pull request #375 from NucleusFramework/ci/native-build-cache",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T19:26:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d955a5aea8a1d2bfda70a2699e90c1346bace86c",
"body": "The native binaries are a pure function of the src/main/native sources, yet\nevery workflow invocation recompiled all of them from scratch: each PR push\ntriggered three parallel full rebuilds (pre-merge + test-graalvm +\ntest-packaging), and a release tag four more.\n\nbuild-natives.yaml now caches each\n[…]\nobs become a single 'pattern: natives-*' download.\n\npre-merge.yaml also gains a concurrency group cancelling superseded PR runs\n(pushes to main are never cancelled: their run saves the shared caches).",
"is_bot": false,
"headline": "ci: cache native build outputs and merge per-platform artifacts",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T19:11:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "813670ac2bf721b97f66b1d1c6c0931fffd56ade",
"body": "test(decorated-window-tao): tiered test infra — offscreen scene harness + headful window suite",
"is_bot": false,
"headline": "Merge pull request #373 from NucleusFramework/test/tao-scene-harness",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T18:53:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42552f6e7cf616ef09d2639a7edb626d7f9a5bba",
"body": "…layout\n\nrefactor(decorated-window-tao): JetBrains-like package layout",
"is_bot": false,
"headline": "Merge pull request #371 from NucleusFramework/refactor/tao-jetbrains-…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T18:49:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17758fcb4b1d22ff9382ccef6b5c8deb4877ab42",
"body": "NativeTaoGlxBridge and the nucleus.tao.linux.renderer property are gone;\nEGL is the only Linux renderer (X11/XWayland via nativeAttachX11, native\nWayland via nativeAttachWayland). The old comment still advertised a\nglx|egl switch that no code reads.",
"is_bot": false,
"headline": "docs(tao-linux): drop the stale GLX-vs-EGL renderer selection comment",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T18:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "878521fa4123479d7e8bd8301f36fbb2c4a58698",
"body": "…land\n\nxdg-shell has no client-side positioning, so setOuterPosition is a\ndocumented no-op on native Wayland and onMoved never fires. Mirror GDK's\nbackend selection (WAYLAND_DISPLAY unless GDK_BACKEND or the\nNUCLEUS_TAO_LINUX_RENDERER=x11 escape hatch forces X11 — the native loop\nsetenvs GDK_BACKEND too late for the JVM's env snapshot to see it).\n\nFirst use of the harness's skip hook; on a real GNOME Wayland session the\nsuite now reports 5 run / 1 skipped / 0 failed, and 6/6 on X11/XWayland.",
"is_bot": false,
"headline": "test(tao-scene-harness): skip the setOuterPosition case on native Way…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T18:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65e6512da06727e61cec905c1cdcad8f4c08952a",
"body": "…aders announce it\n\nCompose does not focus any element inside a newly opened Dialog, so the\nsnapshot's focus id stayed on the window root and the only bus traffic on\nopen was a children-changed:add — Orca (and by the same mechanism NVDA /\nVoiceOver, which also key announcements off the platform focu\n[…]\nfted in appearance order). Verified with Orca:\nopening the demo dialog now speaks 'dialog VoiceOver users press VO+Esc\nto dismiss.'; a real focus inside the dialog takes over as soon as the\nuser tabs.",
"is_bot": false,
"headline": "fix(tao-a11y): move the AT focus to a fresh modal dialog so screen re…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T18:22:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1b582e9e9650270d1fceb7924b09be5f5da61b60",
"body": "…imestamp\n\nMutter's focus-stealing prevention drops _NET_ACTIVE_WINDOW requests\ncarrying GDK_CURRENT_TIME (0): gtk_window_present is a silent no-op and a\ndeiconified window stays Iconic with _NET_WM_STATE_DEMANDS_ATTENTION, so\nFocus does nothing and EVENT_MINIMIZED(false) never reaches the JVM on\nGN\n[…]\naught it).\n\nVendored tao patch 0005: fetch a fresh server timestamp via\ngdk_x11_get_server_time and use it for the Focus request and for the\nactivation that must accompany deiconify. No-op on Wayland.",
"is_bot": false,
"headline": "fix(tao-linux): stamp restore/focus activation with a real X server t…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T18:21:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32f229a1b4dff42a1d84af756ae6927b5194aba2",
"body": "…n dispatcher\n\nThe harness advances a fully synthetic clock, but QueueDispatcher did not\nimplement Delay — every delay/withTimeout inside scene code (notably\nCompose's MouseWheelScrollingLogic coalescing timeout) fell back to\nkotlinx's DefaultExecutor, i.e. real time on another thread. On a loaded\nr\n[…]\n\nbusy while a timer is due within a short horizon (covers the ~100 ms wheel\ncoalescing timeout, ignores 500 ms housekeeping like caret blink). The\nscroll pipeline is now deterministic across machines.",
"is_bot": false,
"headline": "test(tao-scene-harness): virtualize delay/withTimeout in the offscree…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T15:32:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b05152f60fb958b51448ddde51efd3755c484f6e",
"body": "… not a GL issue\n\nThe Windows UIA protocol is validated end-to-end on real hardware\n(physical GPU, Windows 11): every verify-uia.ps1 assertion passes, no\nSKIPPED. The hosted-runner self-skips were never a display-adapter/WGL\nlimitation — the Windows host renders through ANGLE/D3D11 (WARP-capable\non \n[…]\nh WGL/opengl32, so installing Mesa's opengl32.dll\nnext to java.exe had no effect. The empty UIA tree was the idle-activation\nrace fixed in the a11y sync scheduler. Update the job comments accordingly.",
"is_bot": false,
"headline": "ci(tao-a11y): drop the Mesa/llvmpipe step — the Windows self-skip was…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T15:04:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a670ffa9040de2cc6f9764d21f4f276ec3aa72cd",
"body": "…e set\n\nRangeValue.SetValue used to translate into a single Increment/Decrement\nstep (10% of the range), so SetValue(0.7) from 0.5 landed on 0.6 — UIA\nclients expect the slider to land ON the requested value. Add a set_value\ncallback channel (C export + Rust trampoline) that forwards the absolute\nva\n[…]\n1ySetValue upcall, which routes into\nCompose's SetProgress with range clamping — the same path the Linux AT-SPI\nbackend already uses. Falls back to the relative step if the callback is\nnot registered.",
"is_bot": false,
"headline": "fix(tao-windows-a11y): dispatch UIA RangeValue.SetValue as an absolut…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T15:04:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5cbbf1ebaab51c7bfaae220bb900579c5bbbf6e9",
"body": "…hile idle\n\nAn assistive-tech client that connects while the scene is idle (e.g. a UIA\nprobe issuing WM_GETOBJECT against a settled window) sets the native\nactive/resync flags, but the debounced semantics walk had already fired and\nbeen gated off — nothing re-scheduled it, so the provider kept servi\n[…]\n the macOS, Windows, and Linux hosts.\n\nNUCLEUS_A11Y_DEBUG now also traces the first push carrying a real tree —\nlogging only the 1-node seed read as 'the tree is empty' while the pipeline\nwas healthy.",
"is_bot": false,
"headline": "fix(tao-a11y): re-arm the parked semantics walk when an AT connects w…",
"author_name": "Elie G.",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T15:03:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ced0e2225b51417562c9f38e67f2d78adcde36b5",
"body": "… nodes\n\npyatspi raised NotImplemented on queryAction: the InterfaceSet only included\nInterface::Action for clickable nodes, so the patched n_actions/do_action\nwere unreachable for nodes whose only actions are custom.",
"is_bot": false,
"headline": "fix(tao-linux-a11y): advertise the Action interface for custom-action…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T13:29:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "987f065ba282c3ec3299483e285b57c38e79615a",
"body": "…the other fork patches",
"is_bot": false,
"headline": "fix(tao-linux-a11y): access custom actions through Node::data() like …",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T13:13:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edb356b2cd9a4d847d21efd51b519b79f8887612",
"body": "… interface\n\nSurfaced by the advanced a11y probe: Compose CustomAccessibilityActions were\nreachable from VoiceOver (macOS rotor) but invisible to Orca — the vendored\naccesskit_atspi_common only exposed the synthetic 'click' action. n_actions/\nget_action_name/do_action now append the node's custom ac\n[…]\nick slot; do_action routes them as Action::CustomAction with the per-node\nindex, which the embedder side (linux/a11y.rs) already dispatches to\nKotlin's customActions list. Linux natives rebuilt by CI.",
"is_bot": false,
"headline": "fix(tao-linux-a11y): project custom actions through the AT-SPI Action…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T13:07:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "007cb5f9d4d747ca540070b935ab7c0ace812223",
"body": null,
"is_bot": false,
"headline": "style(tao-a11y): split the debug trace line under the length limit",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T12:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c8c6c920c0878fdb9a5c2d3239376ac8d9baf45",
"body": "The Windows CI investigation lost hours to a silent pipeline: no way to know\nwhether the sidecar DLL loaded, the HWND resolved, or the first snapshot was\npushed. Gated stderr traces at attach and first pushSnapshot; the tao-a11y\nWindows job sets the flag.",
"is_bot": false,
"headline": "debug(tao-a11y): NUCLEUS_A11Y_DEBUG traces the attach/push pipeline",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T12:43:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50b00dcced6ecae09cc47bbf159e92055dab657a",
"body": "Probes now assert the advanced A11yTab sections, not just the basics:\n- disabled button: role survives AND the disabled state projects\n (AX: AXButton + AXEnabled=false; UIA: IsEnabled=false; AT-SPI: no\n STATE_ENABLED)\n- custom actions: labels ride the a11y channel and are performable\n (AX action \n[…]\nled\nclickable path), so the label stayed a separate enabled static-text node and\nthe disabled button projected unlabeled — VoiceOver read 'Cannot press' as\nplain active text. Local AX probe: 7/7 PASS.",
"is_bot": false,
"headline": "test(tao-a11y): cover the advanced accessibility semantics per OS",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T12:40:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e5546c815e7f977e763cf6673e852d9a3293976b",
"body": "f3d-app/install-mesa-windows-action drops Mesa's software opengl32.dll next\nto java.exe (first hit in the DLL search order), so the Tao scene host can\ncreate its WGL context on hosted runners. This should turn the Windows UIA\na11y probe back into a hard gate (the self-skip stays as a safety net) and\ngive the headful suite real rendering.",
"is_bot": false,
"headline": "ci(tao): Mesa llvmpipe on Windows runners for a real WGL context",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T12:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ff6e5f798bcd6badf7494cc10541aba6b652212",
"body": "Coroutine resumptions can enqueue from other threads; the unsynchronized\nArrayDeque corrupted rarely under load (NPE in pump on the Windows native\nrun, and the earlier animation/scroll flakes). ConcurrentLinkedQueue, same\nmodel as TaoMainDispatcher.",
"is_bot": false,
"headline": "test(tao-scene): thread-safe harness dispatcher queue",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T10:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d2ee3ba2861635ce4b314fd321133685bfb1373",
"body": "…achable\n\nMirrors the macOS TCC self-skip: on hosted runners the software display\nadapter yields no WGL context, the scene never attaches and only the OS\nnonclient elements exist — nothing assertable, loud SKIPPED, exit 0. Any\npartial exposure with failing assertions still fails hard, and the job is\ngating again (continue-on-error removed).",
"is_bot": false,
"headline": "ci(tao-a11y): Windows probe self-skips only when the provider is unre…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T10:04:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8331e6d7cf876aeb5c210f7c3769d6911e9b625",
"body": "A single non-invalidated frame can race the scroll/animation pipeline\nre-arming one dispatch later (rare 8px residue flake in the wheel-scroll\nsymmetry test on CI). Idle now requires 3 consecutive quiet frames.",
"is_bot": false,
"headline": "test(tao-scene): frameUntilIdle waits for consecutive quiet frames",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T09:46:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "069cae7e218f6bfefe511ffae10542d7440994f2",
"body": "The hosted runner's software display adapter can't create the WGL context\nthe Tao scene host needs, so the app has no composed content and nothing to\nproject through UIA — confirmed by the proven manual dump tool seeing only\nnonclient elements while the same protocol passes on real hardware.\nmacOS (AX client, runner turned out to be TCC-trusted: 4/4 PASS in CI) and\nLinux (AT-SPI, doAction round-trip) remain hard gates.",
"is_bot": false,
"headline": "ci(tao-a11y): Windows leg best-effort on hosted runners (no WGL context)",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T09:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59d51fb4e47b21316a730d6b47e12e510d395224",
"body": "…, proven dump tool)",
"is_bot": false,
"headline": "ci(tao-a11y): max diagnostics on Windows (full app log, java tasklist…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T09:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38f8370514bbe729714a6ca98b95a592a48e1400",
"body": "FindAll uses the filtered control view, which never descended into the\ncustom UIA provider on the runner (only the 7 nonclient elements showed).\nscripts/dump-uia-tree.ps1 — validated during manual provider bring-up —\nwalks TreeWalker.RawViewWalker; the probe now does the same, and dumps the\nraw tree on failure.",
"is_bot": false,
"headline": "ci(tao-a11y): UIA probe walks the raw view like the proven manual tool",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T08:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c22bdb2e82a9af2b72d0995c5bbd17b02160293e",
"body": null,
"is_bot": false,
"headline": "ci(tao-a11y): survive probe failure under bash -e so the app log prints",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T08:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18d21fe09e0e1210ac96f26fa777310653df1944",
"body": "…s log",
"is_bot": false,
"headline": "ci(tao-a11y): trace the app-side a11y pipeline on Windows and dump it…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T07:58:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd174daf5bf4ddfbc45063d41c03db9eaa6cd6db",
"body": "…fallback\n\n- test-graalvm/tao-native-tests: execute the binary from graalvm/output\n (the packaging step extracts skiko/jawt/icudtl next to it; the bare\n nativeCompile artifact lacks them — Windows failed unpacking skiko).\n- verify-uia.ps1: dump the UIA descendant names when the A11y content is\n missing, and try invoking the 'A11y' tab through UIA as a fallback.",
"is_bot": false,
"headline": "ci(tao): run the packaged native binary; UIA probe diagnostics + tab …",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T07:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cd6c6d5cb61f0ae0d1b79c9bd493bf0acdd429a",
"body": "The prebuild step starts the Gradle daemon without NUCLEUS_DEMO_TAB; the\nlaunch step then reuses that daemon and JavaExec inherits ITS environment,\nso the app could open on the Demo tab instead of A11y (observed on the\nWindows runner). --no-daemon makes the app JVM inherit the step env\ndirectly. The UIA probe also fails cleanly now instead of null-crashing\nwhen an element is missing.",
"is_bot": false,
"headline": "ci(tao-a11y): launch tao-demo with --no-daemon and guard the UIA probe",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T07:12:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "058b42d85729055b67f028b40711b22c2cc33094",
"body": "tao-demo's build graph reaches decorated-window-jni's buildNativeLinux,\nwhich fails on runners without X11 dev headers; ship the prebuilt artifacts\nlike the main gradle job does.",
"is_bot": false,
"headline": "ci(tao-a11y): download the transitive modules' native artifacts",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T06:53:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948fa11d78b47eb68a78d119d1a68370339065da",
"body": null,
"is_bot": false,
"headline": "ci(test-packaging): trigger for PRs whose base branch contains a slash",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T06:42:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "095f4fcb4ae1c0466ff20401102ce3d355190299",
"body": null,
"is_bot": false,
"headline": "ci(test-graalvm): trigger for PRs whose base branch contains a slash",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T06:41:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6c103f71482c0c8d9a98e621c36cab1d90476a1",
"body": "All three first-run failures were the same race: the probe's 120s window was\nconsumed by the cold gradle compile of tao-demo on a fresh runner. Build the\njar in a prior step and give the probes 300s.",
"is_bot": false,
"headline": "ci(tao-a11y): pre-build tao-demo before probing and widen probe timeouts",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T06:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b69fb5b30355990a3b3083225e724a13c2bffd42",
"body": "…ocol\n\nGraalVM native-image testing (examples/tao-native-test):\n- New runner app (nucleus plugin, graalvm enabled) that compiles the whole\n Tao test pyramid into a native binary and RUNS it — the first place a\n produced native image is actually executed in CI (test-graalvm.yaml only\n compiled nuc\n[…]\n- macOS: verify-ax.swift — AX client dump (axdump/axtool derived);\n self-skips on runners without the TCC Accessibility permission.\n Verified locally: 4/4 elements exposed, 53 named accessibles.",
"is_bot": false,
"headline": "test(tao): GraalVM native test pyramid + native accessibility CI prot…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T06:22:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3a799d3392af1c3e1cbf2add4aeffe0b53d25b5",
"body": "…ilent no-op\n\nSurfaced by the stage-2 headful suite: an unmaximize issued while the\nmaximize animation is still in flight left the window stuck zoomed.\n\nRoot cause: set_maximized dedups on is_zoomed(), which compares the live\nframe to screen.visibleFrame — mid-animation the frame matches neither end\n[…]\nt.\nAlso unskips the Linux move/maximize/minimize cases: the CI display uses\nopenbox (floating, iconify-capable), not a tiling WM.\n\nmacOS natives rebuilt; Linux/Windows rebuilt by CI. Local suite: 6/6.",
"is_bot": false,
"headline": "fix(tao-macos): setMaximized(false) during the zoom animation was a s…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T05:50:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0b6f4ed13f69d65e4c810f437d37fba73fa4348",
"body": "…splay infra\n\nStage 2 of the testing pyramid: real Tao windows driven end-to-end, one\nprocess, one event loop (Compose Desktop's runApplicationTest model — the\nTao loop runs once per process, so no forkEvery).\n\n- headful/TaoWindowTestHarness.kt: TaoWindowTestCase/TaoWindowTestScope with\n suspending\n[…]\nd() doesn't recognize it, so restore early-returns.\n- CI: new tao-headful matrix job — plain runners on macOS/Windows, Xvfb +\n openbox + Mesa on Linux.\n\nLocal run (macOS): 6 run, 0 skipped, 0 failed.",
"is_bot": false,
"headline": "test(decorated-window-tao): stage-2 headful window suite + 3-OS CI di…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T05:24:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2bdf2e009f7d4d3d53e88cad6acf6335025cc329",
"body": "'*' does not cross '/' in GitHub branch filters, so PRs based on\nrefactor/* or feature/* branches never ran Pre Merge Checks.",
"is_bot": false,
"headline": "ci: trigger pre-merge for PRs whose base branch contains a slash",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T04:40:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17613c94ead6a57efece6fb09eeb4bf810ce6f2c",
"body": "…ttery\n\nJetBrains-style testing pyramid, stage 1 (the bulk tier): an offscreen,\nfully deterministic test harness for the Tao Compose backend, mirroring how\nCompose Desktop tests the scene without a window.\n\n- TaoSceneTestHarness (test sources): builds the same CanvasLayersComposeScene\n the host use\n[…]\nere blocking check\n (ComplexCondition in DecoratedWindow, swallowed/generic catch + magic\n number in TaoHotReloadBridgeImpl, missing final newline, consecutive KDoc\n in NucleusPlatformViewFactory).",
"is_bot": false,
"headline": "test(decorated-window-tao): stage-1 offscreen scene test harness + ba…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-19T04:36:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d76a934739e43d03d3309c4250e1c0185b3e9f7c",
"body": "JetBrains convention (kotlin-desktop-toolkit): explicitApi() is now enforced,\nso every public declaration states its visibility and public vals/funs their\nreturn type. 219 explicit 'public' modifiers added; explicit types on the\nTaoA11y* const vals (Int), TaoDnDDiagnostics states and LocalTaoWindow.\n[…]\n apiCheck passes against the untouched baseline dump, all\nconsumers compile unchanged, invariant checker green. From here the public\nsurface can only change deliberately (apiDump diff reviewed in PR).",
"is_bot": false,
"headline": "refactor(decorated-window-tao): enable explicitApi strict mode (phase 3)",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T21:39:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5f9a72fef89e4c921b68e2724bcbee5786ccb86",
"body": "…es (phase 2)\n\nJetBrains-like layout: internal-only declarations move out of the flat\nwindow.tao / window.tao.render packages into per-subsystem packages, KDT-style\n(files named by concern, one subsystem per package):\n\n- event/ key mapping, keyboard modifiers, synthetic key/wheel events,\n \n[…]\nTA-INF/services MainDispatcherFactory, ProGuard keep rules, GraalVM\nreachability metadata (module + plugin macos). No native change needed:\nno JNI export or FindClass literal references a moved class.",
"is_bot": false,
"headline": "refactor(decorated-window-tao): split internals into subsystem packag…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T21:35:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97fecf7e42767038565dd495ef7197e50fe6d9b3",
"body": "…ffi (phase 1)\n\nJetBrains-like layout (kotlin-desktop-toolkit style): all JNI bridge objects\n(NativeTao*, NativeMetalBridge, PopupNativeBridge*) move to the internal-only\npackage dev.nucleusframework.window.tao.ffi, mirroring KDT's quarantined\n'.generated' binding packages.\n\nPublic API is untouched \n[…]\nrebuilt; Linux/Windows rebuilt by CI build-natives\n- tao-demo test reflection literal (only consumer-side change, test-only)\n\nPre-existing detekt findings (5, TaoHotReload*/DecoratedWindow) unchanged.",
"is_bot": false,
"headline": "refactor(decorated-window-tao): quarantine JNI bridges in window.tao.…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T21:27:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a62f1cf5453d9b90a0e522354ae3f53815bdf1ba",
"body": "- REFACTOR_VERIFICATION.md: invariants + per-phase test procedure for the\n JetBrains-like package reorganization (BCV ABI freeze, JNI/FQN coupling\n checker, consumer-compile gate, runtime smoke, CI matrix gate)\n- scripts/check-tao-refactor-invariants.sh: cross-checks compiled classes\n against JNI\n[…]\n.forName, META-INF/services, ProGuard rules and GraalVM metadata\n- binary-compatibility-validator applied to decorated-window-tao with the\n baseline API dump committed under decorated-window-tao/api/",
"is_bot": false,
"headline": "test(decorated-window-tao): add refactor verification harness",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T21:16:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f3fa46ed2ea86d98bbdf4f8a6bc5a72e137354e2",
"body": "…-thread\n\nfix(tao-windows): run the WH_MOUSE_LL outside-click hook on a dedicated native thread",
"is_bot": false,
"headline": "Merge pull request #370 from NucleusFramework/fix/tao-windows-ll-hook…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T19:11:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2522da740a511590bc1990e8a99ef53fca212231",
"body": "…ed native thread\n\nLL hook callbacks are pumped by the installing thread. Installing from the\nTao event loop tied the system-wide mouse to that thread's responsiveness:\nlong Java work (first composition, GC safepoints) stopped the pump and every\nOS mouse event stalled on LowLevelHooksTimeout (~300 m\n[…]\nwith an init handshake so install/uninstall cannot leak the hook. The\nproc's whole pass runs under sOpenListLock: off the Tao thread, popup\ndestruction could otherwise free a PopupState mid-iteration.",
"is_bot": false,
"headline": "fix(tao-windows): run the WH_MOUSE_LL outside-click hook on a dedicat…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T19:00:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "35a8234fe26dc5dac854186f54a1e2aba23e4377",
"body": "fix(rpm): own app/runtime dirs so the jpackage launcher finds its .cfg",
"is_bot": false,
"headline": "Merge pull request #369 from NucleusFramework/fix/rpm-app-dir-entries",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T18:55:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d245bb4c47fef12c4289697fc87f668e1220753e",
"body": "electron-builder builds RPMs via fpm, which lists only files and never emits\n%dir entries for the app's own directory tree. The jpackage launcher\n(libapplauncher.so, Package.cpp::initAppLauncher) discovers the app and runtime\ndirectories by running `rpm -ql <pkg>` and matching lines that endWith \"/a\n[…]\nroring what\njpackage's own template.spec does with `comm -23` against the filesystem\npackage. DEB was never affected because `dpkg -L` already lists directories.\n\nAddresses #251 (launcher .cfg error).",
"is_bot": false,
"headline": "fix(rpm): own app/runtime dirs so the jpackage launcher finds its .cfg",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T18:51:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57db5cc681816a3591b889cb4c587f48b9027099",
"body": "…local\n\nfix(decorated-window-tao): load GTK with RTLD_LOCAL to stop sqlite interposition",
"is_bot": false,
"headline": "Merge pull request #368 from NucleusFramework/fix/tao-linux-gtk-rtld-…",
"author_name": "Elie Gambache",
"author_login": "kdroidFilter",
"committed_at": "2026-07-18T18:37:34Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 2023,
"latest_release_at": "2026-07-23T18:59:15Z",
"latest_release_tag": "v2.1.6",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 24,
"days_since_latest_release": 0,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 17,
"stars": 308,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-02-22",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-25",
"count": 1
},
{
"date": "2026-03-07",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-12",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-13",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 17,
"total_forks": 17
},
"star_history": null,
"open_issues_and_prs": 24
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"aot-runtime/build.gradle.kts",
"autolaunch/build.gradle.kts",
"build.gradle.kts",
"core-runtime/build.gradle.kts",
"darkmode-detector/build.gradle.kts",
"decorated-window-awt/build.gradle.kts",
"decorated-window-core/build.gradle.kts",
"decorated-window-jbr/build.gradle.kts",
"decorated-window-jewel/build.gradle.kts",
"decorated-window-jni/build.gradle.kts",
"decorated-window-material2/build.gradle.kts",
"decorated-window-material3/build.gradle.kts",
"decorated-window-tao/build.gradle.kts",
"decorated-window-tao/src/main/native/Cargo.toml",
"decorated-window-tao/src/main/native/vendor/accesskit_atspi_common/Cargo.toml",
"decorated-window-tao/src/main/native/vendor/accesskit_unix/Cargo.toml",
"decorated-window-tao/src/main/native/vendor/tao/Cargo.toml",
"energy-manager/build.gradle.kts",
"examples/benchmark-demo/build.gradle.kts",
"examples/benchmark-demo/ports/tauri/src-tauri/Cargo.toml",
"examples/cmp-demo/build.gradle.kts",
"examples/compose-demo/build.gradle.kts",
"examples/extra-launcher-demo/build.gradle.kts",
"examples/fs-watcher-smoke/build.gradle.kts",
"examples/jewel-demo/build.gradle.kts",
"examples/jni-demo/build.gradle.kts",
"examples/nucleus-demo/build.gradle.kts",
"examples/scheduler-demo/build.gradle.kts",
"examples/service-management-demo/build.gradle.kts",
"examples/shared/build.gradle.kts",
"examples/swing-tao-demo/build.gradle.kts",
"examples/system-info-demo/build.gradle.kts",
"examples/tao-demo/build.gradle.kts",
"examples/tao-native-test/build.gradle.kts",
"examples/zstd-demo/build.gradle.kts",
"freedesktop-icons/build.gradle.kts",
"fs-watcher/build.gradle.kts",
"fs-watcher/src/main/native/Cargo.toml",
"global-hotkey/build.gradle.kts",
"graalvm-runtime/build.gradle.kts",
"launcher-linux/build.gradle.kts",
"launcher-macos/build.gradle.kts",
"launcher-windows/build.gradle.kts",
"linux-hidpi/build.gradle.kts",
"media-control/build.gradle.kts",
"menu-macos/build.gradle.kts",
"native-http-ktor/build.gradle.kts",
"native-http-okhttp/build.gradle.kts",
"native-http/build.gradle.kts",
"native-ssl/build.gradle.kts",
"notification-common/build.gradle.kts",
"notification-linux/build.gradle.kts",
"notification-macos/build.gradle.kts",
"notification-windows/build.gradle.kts",
"nucleus-application/build.gradle.kts",
"plugin-build/build.gradle.kts",
"plugin-build/plugin/build.gradle.kts",
"scheduler-testing/build.gradle.kts",
"scheduler/build.gradle.kts",
"scripts/uia-listener/UiaListener.csproj",
"service-management-macos/build.gradle.kts",
"sf-symbols/build.gradle.kts",
"system-color/build.gradle.kts",
"system-info/build.gradle.kts",
"taskbar-progress-tao/build.gradle.kts",
"taskbar-progress/build.gradle.kts",
"updater-runtime/build.gradle.kts"
],
"largest_source_bytes": 166094,
"source_files_sampled": 1163,
"oversized_source_files": 12,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"examples/benchmark-demo/AGENTS.md"
],
"agent_instruction_max_bytes": 10610
},
"dependencies": {
"manifests": [
"aot-runtime/build.gradle.kts",
"autolaunch/build.gradle.kts",
"build.gradle.kts",
"core-runtime/build.gradle.kts",
"darkmode-detector/build.gradle.kts",
"decorated-window-awt/build.gradle.kts",
"decorated-window-core/build.gradle.kts",
"decorated-window-jbr/build.gradle.kts",
"decorated-window-jewel/build.gradle.kts",
"decorated-window-jni/build.gradle.kts",
"decorated-window-material2/build.gradle.kts",
"decorated-window-material3/build.gradle.kts",
"decorated-window-tao/build.gradle.kts",
"energy-manager/build.gradle.kts",
"freedesktop-icons/build.gradle.kts",
"fs-watcher/build.gradle.kts",
"global-hotkey/build.gradle.kts",
"graalvm-runtime/build.gradle.kts",
"launcher-linux/build.gradle.kts",
"launcher-macos/build.gradle.kts",
"launcher-windows/build.gradle.kts",
"linux-hidpi/build.gradle.kts",
"media-control/build.gradle.kts",
"menu-macos/build.gradle.kts",
"native-http-ktor/build.gradle.kts",
"native-http-okhttp/build.gradle.kts",
"native-http/build.gradle.kts",
"native-ssl/build.gradle.kts",
"notification-common/build.gradle.kts",
"notification-linux/build.gradle.kts",
"notification-macos/build.gradle.kts",
"notification-windows/build.gradle.kts",
"nucleus-application/build.gradle.kts",
"plugin-build/build.gradle.kts",
"scheduler-testing/build.gradle.kts",
"scheduler/build.gradle.kts",
"service-management-macos/build.gradle.kts",
"sf-symbols/build.gradle.kts",
"system-color/build.gradle.kts",
"system-info/build.gradle.kts",
"taskbar-progress-tao/build.gradle.kts",
"taskbar-progress/build.gradle.kts",
"updater-runtime/build.gradle.kts"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [
{
"name": "Interop.UIAutomationClient",
"manifest": "scripts/uia-listener/UiaListener.csproj",
"ecosystem": "nuget",
"version_constraint": "10.19041.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 271,
"open_issues": 18,
"closed_ratio": 0.806,
"closed_issues": 75,
"closed_unmerged_prs": 23
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "kdroidFilter",
"commits": 1977,
"avatar_url": "https://avatars.githubusercontent.com/u/144903939?v=4"
},
{
"type": "User",
"login": "sproctor",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/217337?v=4"
},
{
"type": "User",
"login": "RavenLiao",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/47520028?v=4"
},
{
"type": "User",
"login": "amir1376",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/38394888?v=4"
},
{
"type": "User",
"login": "23rd",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/4051126?v=4"
},
{
"type": "User",
"login": "mipastgt",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/16735714?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.988
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-natives.yaml",
"pre-merge.yaml",
"publish-maven.yaml",
"publish-plugin.yaml",
"release-desktop.yaml",
"release-graalvm.yaml",
"test-graalvm.yaml",
"test-packaging.yaml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Cargo.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 8,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/9 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1e9c35fc653f8b3e454e37b6354b9b1e5fef6c04",
"ran_at": "2026-07-24T07:10:39Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T18:42:25Z",
"oldest_open_prs": [
{
"number": 255,
"created_at": "2026-05-29T14:10:25Z",
"last_comment_at": "2026-06-01T11:06:29Z",
"last_comment_author": "kdroidFilter"
},
{
"number": 354,
"created_at": "2026-07-16T22:15:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 372,
"created_at": "2026-07-19T04:30:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 391,
"created_at": "2026-07-21T18:20:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 393,
"created_at": "2026-07-22T06:30:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 396,
"created_at": "2026-07-23T19:10:02Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-23T18:22:48Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 52,
"created_at": "2026-02-23T11:01:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 129,
"created_at": "2026-03-20T15:10:20Z",
"last_comment_at": "2026-03-21T17:02:42Z",
"last_comment_author": "kdroidFilter"
},
{
"number": 158,
"created_at": "2026-03-26T20:33:33Z",
"last_comment_at": "2026-04-09T11:15:55Z",
"last_comment_author": "kdroidFilter"
},
{
"number": 178,
"created_at": "2026-04-09T11:16:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 188,
"created_at": "2026-04-11T08:10:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 202,
"created_at": "2026-04-16T15:34:18Z",
"last_comment_at": "2026-04-16T18:44:52Z",
"last_comment_author": "kdroidFilter"
},
{
"number": 210,
"created_at": "2026-04-19T12:18:22Z",
"last_comment_at": "2026-07-12T13:25:44Z",
"last_comment_author": "kdroidFilter"
},
{
"number": 225,
"created_at": "2026-05-05T09:17:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 249,
"created_at": "2026-05-18T19:24:13Z",
"last_comment_at": "2026-06-08T06:49:12Z",
"last_comment_author": "toBYTEas"
},
{
"number": 264,
"created_at": "2026-06-16T07:18:56Z",
"last_comment_at": "2026-06-22T10:49:17Z",
"last_comment_author": "GaodaGG"
},
{
"number": 269,
"created_at": "2026-06-24T12:08:42Z",
"last_comment_at": "2026-06-25T02:08:46Z",
"last_comment_author": "xiaolei123"
},
{
"number": 303,
"created_at": "2026-07-12T03:23:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 327,
"created_at": "2026-07-13T07:31:59Z",
"last_comment_at": "2026-07-19T08:41:19Z",
"last_comment_author": "janbarari"
},
{
"number": 332,
"created_at": "2026-07-13T13:58:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 350,
"created_at": "2026-07-16T05:56:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 383,
"created_at": "2026-07-21T07:13:05Z",
"last_comment_at": "2026-07-21T08:32:54Z",
"last_comment_author": "alexandrucaraus"
},
{
"number": 394,
"created_at": "2026-07-23T09:49:01Z",
"last_comment_at": "2026-07-23T19:37:18Z",
"last_comment_author": "tomasjablonskis"
},
{
"number": 397,
"created_at": "2026-07-24T02:15:27Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/NucleusFramework/Nucleus",
"host": "github.com",
"name": "Nucleus",
"owner": "NucleusFramework"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"security": 40,
"vitality": 85,
"community": 53,
"governance": 45,
"engineering": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 85,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"commits_last_year": 2023,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 24
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "24/52 weeks with commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 24
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "2023 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 2023
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v2.1.6",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 53,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"forks": 17,
"stars": 308,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "308 stars",
"points": 40.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 308
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "17 forks",
"points": 10,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 17
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 45,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.988
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 271,
"open_issues": 18,
"closed_issues": 75,
"issue_closed_ratio": 0.806,
"closed_unmerged_prs": 23
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "81% of issues closed",
"points": 37.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 81
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "271/294 decided PRs merged",
"points": 35.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 271,
"decided": 294
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/9 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"followers": 8,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "NucleusFramework",
"public_repos": 6,
"account_age_days": 74
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "8 followers of NucleusFramework",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 8,
"login": "NucleusFramework"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~0 yr old",
"points": 6.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"compose",
"compose-desktop",
"compose-multiplatform",
"desktop",
"desktop-app",
"framework",
"jvm",
"kotlin",
"linux",
"macos",
"native",
"windows"
],
"has_wiki": false,
"homepage": "http://nucleusframework.dev/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://nucleusframework.dev/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "12 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 12
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/9 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"examples/benchmark-demo/AGENTS.md"
],
"agent_instruction_max_bytes": 10610
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, examples/benchmark-demo/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, examples/benchmark-demo/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Cargo.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.02,
"toolchain_manifests": [
"aot-runtime/build.gradle.kts",
"autolaunch/build.gradle.kts",
"build.gradle.kts",
"core-runtime/build.gradle.kts",
"darkmode-detector/build.gradle.kts",
"decorated-window-awt/build.gradle.kts",
"decorated-window-core/build.gradle.kts",
"decorated-window-jbr/build.gradle.kts",
"decorated-window-jewel/build.gradle.kts",
"decorated-window-jni/build.gradle.kts",
"decorated-window-material2/build.gradle.kts",
"decorated-window-material3/build.gradle.kts",
"decorated-window-tao/build.gradle.kts",
"decorated-window-tao/src/main/native/Cargo.toml",
"decorated-window-tao/src/main/native/vendor/accesskit_atspi_common/Cargo.toml",
"decorated-window-tao/src/main/native/vendor/accesskit_unix/Cargo.toml",
"decorated-window-tao/src/main/native/vendor/tao/Cargo.toml",
"energy-manager/build.gradle.kts",
"examples/benchmark-demo/build.gradle.kts",
"examples/benchmark-demo/ports/tauri/src-tauri/Cargo.toml",
"examples/cmp-demo/build.gradle.kts",
"examples/compose-demo/build.gradle.kts",
"examples/extra-launcher-demo/build.gradle.kts",
"examples/fs-watcher-smoke/build.gradle.kts",
"examples/jewel-demo/build.gradle.kts",
"examples/jni-demo/build.gradle.kts",
"examples/nucleus-demo/build.gradle.kts",
"examples/scheduler-demo/build.gradle.kts",
"examples/service-management-demo/build.gradle.kts",
"examples/shared/build.gradle.kts",
"examples/swing-tao-demo/build.gradle.kts",
"examples/system-info-demo/build.gradle.kts",
"examples/tao-demo/build.gradle.kts",
"examples/tao-native-test/build.gradle.kts",
"examples/zstd-demo/build.gradle.kts",
"freedesktop-icons/build.gradle.kts",
"fs-watcher/build.gradle.kts",
"fs-watcher/src/main/native/Cargo.toml",
"global-hotkey/build.gradle.kts",
"graalvm-runtime/build.gradle.kts",
"launcher-linux/build.gradle.kts",
"launcher-macos/build.gradle.kts",
"launcher-windows/build.gradle.kts",
"linux-hidpi/build.gradle.kts",
"media-control/build.gradle.kts",
"menu-macos/build.gradle.kts",
"native-http-ktor/build.gradle.kts",
"native-http-okhttp/build.gradle.kts",
"native-http/build.gradle.kts",
"native-ssl/build.gradle.kts",
"notification-common/build.gradle.kts",
"notification-linux/build.gradle.kts",
"notification-macos/build.gradle.kts",
"notification-windows/build.gradle.kts",
"nucleus-application/build.gradle.kts",
"plugin-build/build.gradle.kts",
"plugin-build/plugin/build.gradle.kts",
"scheduler-testing/build.gradle.kts",
"scheduler/build.gradle.kts",
"scripts/uia-listener/UiaListener.csproj",
"service-management-macos/build.gradle.kts",
"sf-symbols/build.gradle.kts",
"system-color/build.gradle.kts",
"system-info/build.gradle.kts",
"taskbar-progress-tao/build.gradle.kts",
"taskbar-progress/build.gradle.kts",
"updater-runtime/build.gradle.kts"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "aot-runtime/build.gradle.kts, autolaunch/build.gradle.kts, build.gradle.kts (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "aot-runtime/build.gradle.kts, autolaunch/build.gradle.kts, build.gradle.kts"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Kotlin (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Kotlin"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "2 of the last 100 commits agent-authored or agent-credited",
"points": 4,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Kotlin",
"largest_source_bytes": 166094,
"source_files_sampled": 1163,
"oversized_source_files": 12
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Kotlin (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Kotlin"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "12/1163 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1163,
"oversized": 12
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example",
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T07:11:02.174539Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/NucleusFramework/Nucleus.svg",
"full_name": "NucleusFramework/Nucleus",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with NucleusFramework/Nucleus. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
